Edit tour

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis ID:	1500346
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish54

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,18081194610392995174,6121383709671565716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish54

Source: Yara match

File source: 0.1.pages.csv, type: HTML

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44

HTTP Parser: Form action: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638604268462207676.MTRlNjFjN2MtMDdhYS00ZTBkLWIyMTktZjlkZTM1NjE0NWE4OGEyMTQzZDktYWM2Zi00NmViLThlOGQtYjNmYTRhZjhkNTUz&prompt=none&nopa=2&state=CfDJ8LWN6nmb9HBGpcIJvpEgkL0UOwuWNyMWbFOTpcpezlBTSnui9sgnjRfL0S506S0RUMefYsAma0HaMXjLT7lIfbP15mTjnOEIE48u07p6IhIpthrZ7sXfVO4avYVr9XYMdPnDGBSiq4aTpSsgM2wpVSqCHmPoJCo-RYB1f8r7cQ2U-EayVRXDWFFovZ5ODOPar0OQN2L6jF1GFAm6eWgJ1ivIHsotdmWwsJUdIOrJrM1B4ISsEWWNXIva0pHYpybs5J3ORy1cqrQRzfMcnhoNkhKH6c7bY_6ZA68ZjQ1jOaASob4iytAroVTnN4-DjOPJSvTU2t8ioaC0isyDoNKWkaq2yALa6RkVO0o_VgXVYGYc&x-client-SKU=ID_NET6_0&x-client-ver=7.6.0.0&sso_reload=true microsoft microsoftonline

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: Number of links: 0
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: Number of links: 0

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44

HTTP Parser: Base64 decoded: 14e61c7c-07aa-4e0d-b219-f9de356145a88a2143d9-ac6f-46eb-8e8d-b3fa4af8d553

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: Title: Redirecting does not match URL
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: Title: Continue does not match URL

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No favicon

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="author".. found
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No <meta name="author".. found

Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="copyright".. found
Source: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:55047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:55048 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:54652 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET /LearnAboutSenderIdentification HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LearnAboutSenderIdentification HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_LITcRq6S7_1gG8CPmkPzQQ2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_LITcRq6S7_1gG8CPmkPzQQ2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54
Source: global traffic	HTTP traffic detected: GET /meversion?partner=OfficeProducts&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=OfficeProducts&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=195979-195979If-Range: "1daef8f5cfb4c82"
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1724830088450 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=56454859190031261134500869246404215842&ts=1724830089405 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1724830088450 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=56454859190031261134500869246404215842&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&d_cid_ic=MC1%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&ts=1724830090333 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=56454859190031261134500869246404215842&ts=1724830089405 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=56916935156195165264526806106049391917 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=112026161 HTTP/1.1Host: ats.everesttech.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTcQABoNCIyju7YGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=PoliTs6/YjkuWWSkWzaZFqpgkUYP/zrjr0/CbHZL5/0=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/4000034.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=56454859190031261134500869246404215842&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&d_cid_ic=MC1%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&ts=1724830090333 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDpaXnfUeW4IogxBTg8KWPwDJ4t7tFA0bvMJQ&random=2221103673 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=112026161 HTTP/1.1Host: ats.everesttech.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: everest_g_v2=g_surferid~Zs7RjAAAxL7TUkdc
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=eXrnm5AWp7l-dGVPt6-TJg9ZgCaDS2DGdUnKo-JSbRR783KAd4-8Yq7nZ4onTvRK9euamLqZRLbkMC2KTD6rCgveeZFLbF5mEaK3uC5dxu0.; receive-cookie-deprecation=1; uuid2=4769043448713762178
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=5b8737ccf81d4cfda55b9d042ee355c4&version=2.4.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54; MUID=7abfd6b577da470d85f1555f65baaf67; MSCC=NR; fptctx2=H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLv7xZ3VWqcpppR2Wxlzz44CYD6U6stdLxh3oXIxHiEmsm5ysh%252fZrlfd9f6v8ymqHIGDGulDCuqnWWVtz2lkJuaFJyPJ6P8ebqHey2zUfTFwsEnn9kl1Ujtcx%252bY01TMlHHcUd%252biC3MUfEKaCId%252bLszGQtHbbyuiojpXNWhI9BSmUm91d4wgZJEboctSUeu5JvaHnhdWGCFpnEGyaYznfHDis%252f26P6ktO6huzyiHQt9XXcE0e753x3JYvZNDGbuYgX3w%253d%253d; at_check=true; AMCVS_EA76ADE95776D2EC7F000101%40AdobeOrg=1; AMCV_EA76ADE95776D2EC7F000101%40AdobeOrg=1585540135%7CMCIDTS%7C19964%7CMCMID%7C56454859190031261134500869246404215842%7CMCAAMLH-1725434891%7C6%7CMCAAMB-1725434891%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C125792652%7CMCOPTOUT-1724837291s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#5b8737ccf81d4cfda55b9d042ee355c4#1724831949\|PC#5b8737ccf81d4cfda55b9d042ee355c4.37_0#1759016790
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1rfmbuho6m3dl HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_g5CHpwrtONdguZ6SOdQZsA=="
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=37c904be-5f57-42ac-8e81-66b35f658bff; TDCPM=CAEYBSgCMgsIqKnvyrbPoz0QBTgB
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=c04b199ec87ac081064989c39fe1c0a02c7bd49d4dd92cc6db61501c503cc257b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
Source: global traffic	HTTP traffic detected: GET /action/0?ti=4000034&Ver=2&mid=da24a130-fbd9-433d-8a13-23c301cbc52d&sid=148cd540650f11efb81be72fdc445a4a&vid=148cf0a0650f11efa9d179927a34e56a&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Compare%20All%20Microsoft%20365%20Plans%20(Formerly%20Office%20365)%20-%20Microsoft%20Store&p=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products%3Focid%3Dcmmibbws4d3&r=&lt=14912&pt=1724830070081,,,,,2011,2013,2013,2013,2671,2014,2671,2969,3368,2980,12190,14867,14912,,,&pn=0,0&evt=pageLoad&sv=1&cdb=AQAA&rn=786674 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/4000034.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=4000034&Ver=2&mid=da24a130-fbd9-433d-8a13-23c301cbc52d&sid=148cd540650f11efb81be72fdc445a4a&vid=148cf0a0650f11efa9d179927a34e56a&vids=0&msclkid=N&ea=view_item_list&en=Y&p=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&sw=1280&sh=1024&sc=24&evt=custom&cdb=AQAA&rn=641266 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=ZwoOBTUNVQR8CAhQM11ABDIFWFF8CgxTYAtD7_dB HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDpaXnfUeW4IogxBTg8KWPwDJ4t7tFA0bvMJQ&random=2221103673 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4769043448713762178 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /tag/uet/4000034?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=38E007E636376F42355E130F379F6ED7 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1rfmbuho6m3dl HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=56916935156195165264526806106049391917&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=c04b199ec87ac081064989c39fe1c0a02c7bd49d4dd92cc6db61501c503cc257b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=56916935156195165264526806106049391917&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aLnoeUpkijsDifqGdSBi8AlqeiRsMv6a8lHh2VZcB
Source: global traffic	HTTP traffic detected: GET /s/0.7.45/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/4000034?insights=1 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=ZwoOBTUNVQR8CAhQM11ABDIFWFF8CgxTYAtD7_dB HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4769043448713762178 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=38E007E636376F42355E130F379F6ED7 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=6084CD362F368F&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
Source: global traffic	HTTP traffic detected: GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695
Source: global traffic	HTTP traffic detected: GET /s/0.7.45/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=6084CD362F368F&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107
Source: global traffic	HTTP traffic detected: GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent=&uid=56916935156195165264526806106049391917&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJHRzmYCEK-ZxQ55hAIOdc2zPBjT7wkFEgEBAQEj0GbYZtxA0iMA_eMAAA&S=AQAAAjrd_CivSliVaIADqiZyGcQ
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7781164971607730135 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-TlJ6vXZE2pHRMWdLtNk2Rv.lrdyKacsILCo-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
Source: global traffic	HTTP traffic detected: GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=98D0B2CF29A060328D4DE3B9EC6BCBC4 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=56916935156195165264526806106049391917 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www/bridge-WR110.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7781164971607730135 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-TlJ6vXZE2pHRMWdLtNk2Rv.lrdyKacsILCo-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=b114c5b2-6292-4cce-864d-2bb2656ad5f2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=98D0B2CF29A060328D4DE3B9EC6BCBC4 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products%3Focid%3Dcmmibbws4d3&dr=&dw=1263&dh=6283&ww=1280&wh=907&sw=1280&sh=1024&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&sn=1&hd=1724830099&v=13.89.2&pid=2422&pn=1&r=090415 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&r=750718 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageEvent?value=H4sIAAAAAAAAA3POz0vLTLdSCErNSU0sTo03MjAyMTAzNAYAgJLsFxgAAAA%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&r=418523 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA6tWCghxjncvzUxRslIyME0xNjI2M9ZNMTU20TVJsTTWtUwyM9VNTkk1MzcxNzdNNTdUqgUAotlAIzMAAAA%3D&ct=2&r=041858 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=b114c5b2-6292-4cce-864d-2bb2656ad5f2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693
Source: global traffic	HTTP traffic detected: GET /www/bridge-WR110.js HTTP/1.1Host: cdnssl.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4289392735944159371995; tluid=4289392735944159371995
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quota?ct=0 HTTP/1.1Host: q-aus1.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA1XMzQrCMBAE4FdZclK02PoD6m2tQQvWSo0XRSSkUUNLIjGoRXx3g4jgaVhm9nsSnByQHYxQBXDh1E25mowJfVykVVILCUja3xFdz6A77IcjP%2Fhk%2FKtSzBmN57BhySLZIkuyJeR0leUsWc4ggNho53nAa5ly66Q4w9FYmErHVeU5ZrkolT5Bpqs6iH5u1BuEof%2FH6s7ra2A0YAfBx27tjJW%2BWVlTQAv%2BzgbStLn3LGLwEVhEXm%2BxscmY6wAAAA%3D%3D&ct=2&r=918548 HTTP/1.1Host: c.clicktale.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exist?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c HTTP/1.1Host: srm.bf.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=3f2a63db-5b48-4539-9091-71c7392e8f57 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=3f2a63db-5b48-4539-9091-71c7392e8f57 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693
Source: global traffic	HTTP traffic detected: GET /v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=1&ct=2 HTTP/1.1Host: k-aus1.clicktale.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=6a839ce538a5c34c1975eae9c7bb4c1 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.css HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695\|144229-1-1724830103692
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=6a839ce538a5c34c1975eae9c7bb4c1 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695\|144229-1-1724830103692
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnM3UmpBQUFBR2l2cmdOLQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkh0DCp5LuXvaDLMvjENXICXa_jFGo-4wt4DNZcWk-D3aqV06kDOLHZ_AUoDO0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnM3UmpBQUFBR2l2cmdOLQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkh0DCp5LuXvaDLMvjENXICXa_jFGo-4wt4DNZcWk-D3aqV06kDOLHZ_AUoDO0
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Zs7RjAAAAGivrgN- HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Zs7RjAAAAGivrgN-&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zs7RnUt3uUQAAGeEAAvEgQAA; CMPS=045; CMPRO=045
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Zs7RjAAAAGivrgN- HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=eXrnm5AWp7l-dGVPt6-TJg9ZgCaDS2DGdUnKo-JSbRR783KAd4-8Yq7nZ4onTvRK9euamLqZRLbkMC2KTD6rCgveeZFLbF5mEaK3uC5dxu0.; receive-cookie-deprecation=1; uuid2=4769043448713762178
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Zs7RjAAAAGivrgN-&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zs7RnUt3uUQAAGeEAAvEgQAA; CMPS=045; CMPRO=045
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zs7RjAAAAGivrgN- HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zs7RjAAAAGivrgN- HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Zs7RjAAAAGivrgN- HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4769043448713762178; anj=dTM7k!M4.FErk#WF']wIg2E?]k]Ij'!]tbPl1MwL(!R7qUY#RXKz3jS(DhEA)wGkq%:t?qLU2J[9RFMZ9bmtwgM/]vGiO_]ZNZXfDYw?IEBnq=!$aFK@[I.#
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537148856&val=Zs7RjAAAAGivrgN- HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=d6534798-d1fd-4c5e-9eae-cea116898966\|1724830113
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537148856&val=Zs7RjAAAAGivrgN- HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=d6534798-d1fd-4c5e-9eae-cea116898966\|1724830113
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zs7RjAAAAGivrgN- HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_218=22978-Zs7RjAAAAGivrgN-&KRTB&23194-Zs7RjAAAAGivrgN-&KRTB&23209-Zs7RjAAAAGivrgN-&KRTB&23244-Zs7RjAAAAGivrgN-; PugT=1724830112
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Zs7RjAAAAGivrgN-&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=adobe HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695\|144229-1-1724830103692\|144230-1-1724830104699\|144231-1-1724830105694\|144232-1-1724830106715\|144233-1-1724830108361\|144234-1-1724830108701\|144235-1-1724830110008\|144236-1-1724830110698\|144237-1-1724830111692\|147592-1-1724830112699\|390122-1-1724830113701
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Zs7RjAAAAGivrgN-&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693\|121998-1-1724830101742\|144228-1-1724830102695\|144229-1-1724830103692\|144230-1-1724830104699\|144231-1-1724830105694\|144232-1-1724830106715\|144233-1-1724830108361\|144234-1-1724830108701\|144235-1-1724830110008\|144236-1-1724830110698\|144237-1-1724830111692\|147592-1-1724830112699\|390122-1-1724830113701

Source: chromecache_439.2.dr, chromecache_292.2.dr	String found in binary or memory: "//www.linkedin.com/shareArticle?mini=true&url=" + equals www.linkedin.com (Linkedin)
Source: chromecache_439.2.dr, chromecache_292.2.dr	String found in binary or memory: url: "//www.facebook.com/share.php?u=" + h, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: microsoftwindows.112.2o7.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: amp.azure.net
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: d.impactradius-event.com
Source: global traffic	DNS traffic detected: DNS query: cdnssl.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ats.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: q-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: c.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: srm.bf.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: k-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: static-assets.fs.liveperson.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 07:28:21 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 42Connection: close

Source: chromecache_356.2.dr, chromecache_433.2.dr	String found in binary or memory: http://aka.ms/corebenefits
Source: chromecache_278.2.dr, chromecache_394.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_347.2.dr, chromecache_301.2.dr	String found in binary or memory: http://github.com/aFarkas/lazysizes
Source: chromecache_473.2.dr, chromecache_293.2.dr, chromecache_551.2.dr, chromecache_275.2.dr, chromecache_340.2.dr, chromecache_482.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_448.2.dr, chromecache_453.2.dr	String found in binary or memory: http://github.com/requirejs/domReady
Source: chromecache_448.2.dr, chromecache_453.2.dr	String found in binary or memory: http://github.com/requirejs/requirejs/LICENSE
Source: chromecache_397.2.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3
Source: chromecache_442.2.dr, chromecache_438.2.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/launch/store/launch-ENf7805d09fd1b455883333cdf34e
Source: chromecache_323.2.dr, chromecache_549.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_363.2.dr, chromecache_343.2.dr, chromecache_528.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_313.2.dr, chromecache_252.2.dr, chromecache_513.2.dr, chromecache_547.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_278.2.dr, chromecache_394.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_323.2.dr, chromecache_549.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_343.2.dr	String found in binary or memory: https://accdn.lpsnmedia.net
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_474.2.dr	String found in binary or memory: https://aka.ms/28808
Source: chromecache_433.2.dr	String found in binary or memory: https://aka.ms/SVAFAQ
Source: chromecache_343.2.dr	String found in binary or memory: https://aka.ms/edusupport
Source: chromecache_343.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_343.2.dr	String found in binary or memory: https://analytics.tiktok.com
Source: chromecache_268.2.dr, chromecache_374.2.dr	String found in binary or memory: https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b
Source: chromecache_399.2.dr	String found in binary or memory: https://assets.onestore.ms
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_515.2.dr, chromecache_325.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_413.2.dr, chromecache_502.2.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_343.2.dr	String found in binary or memory: https://cdnssl.clicktale.net
Source: chromecache_343.2.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_474.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase
Source: chromecache_474.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase/
Source: chromecache_343.2.dr	String found in binary or memory: https://d.impactradius-event.com
Source: chromecache_413.2.dr, chromecache_502.2.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_413.2.dr, chromecache_502.2.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_377.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_356.2.dr, chromecache_433.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_397.2.dr	String found in binary or memory: https://eus-streaming-video-rt-microsoft-com.akamaized.net/0f937af8-d731-4ff2-a223-053a9189b20e/91f6
Source: chromecache_484.2.dr, chromecache_397.2.dr	String found in binary or memory: https://eus-streaming-video-rt-microsoft-com.akamaized.net/7070043d-58fb-4f43-b0cf-89f6dbf4bb38/91f6
Source: chromecache_515.2.dr, chromecache_325.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_515.2.dr, chromecache_325.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_260.2.dr, chromecache_475.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_323.2.dr, chromecache_549.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_396.2.dr, chromecache_416.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_343.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net
Source: chromecache_363.2.dr, chromecache_343.2.dr, chromecache_528.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_497.2.dr, chromecache_545.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_497.2.dr, chromecache_545.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_497.2.dr, chromecache_545.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_343.2.dr	String found in binary or memory: https://js.monitor.azure.com
Source: chromecache_474.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_364.2.dr, chromecache_563.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_343.2.dr	String found in binary or memory: https://login.live.com/me.srf?wa=wsignin1.0
Source: chromecache_261.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_364.2.dr, chromecache_563.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_364.2.dr, chromecache_563.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_563.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_261.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_343.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net
Source: chromecache_474.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/10.13.0.5-release_5314/resources/icons/desktop/sprites
Source: chromecache_474.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7
Source: chromecache_343.2.dr	String found in binary or memory: https://lptag.liveperson.net
Source: chromecache_474.2.dr	String found in binary or memory: https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili
Source: chromecache_343.2.dr	String found in binary or memory: https://mem.gfx.ms
Source: chromecache_515.2.dr, chromecache_325.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_399.2.dr	String found in binary or memory: https://microsoftwindows.112.2o7.net
Source: chromecache_343.2.dr	String found in binary or memory: https://office.com/systemrequirements
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_484.2.dr, chromecache_397.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f
Source: chromecache_484.2.dr, chromecache_397.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?v
Source: chromecache_343.2.dr	String found in binary or memory: https://products.office.com/en-us/free-productivity-apps
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_343.2.dr	String found in binary or memory: https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8
Source: chromecache_343.2.dr	String found in binary or memory: https://publisher.liveperson.net
Source: chromecache_343.2.dr	String found in binary or memory: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m3
Source: chromecache_343.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_474.2.dr	String found in binary or memory: https://signup-local.azure.com/
Source: chromecache_474.2.dr	String found in binary or memory: https://signup-staging.azure.com/
Source: chromecache_474.2.dr	String found in binary or memory: https://signup.azure.com/
Source: chromecache_497.2.dr, chromecache_545.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_356.2.dr, chromecache_433.2.dr	String found in binary or memory: https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_474.2.dr	String found in binary or memory: https://stores.office.com/
Source: chromecache_474.2.dr	String found in binary or memory: https://stores.office.com/subscription/acquire
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/cs-cz/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/da-dk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/de-ch/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-ca/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-gb/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-in/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-ng/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_343.2.dr	String found in binary or memory: https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-us/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_343.2.dr	String found in binary or memory: https://support.office.com/en-us/article/what-s-new-in-office-365-95c8d81d-08ba-42c1-914f-bca4603e14
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/en-za/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/es-cl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/es-es/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/es-mx/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/fi-fi/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/fr-ch/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/fr-fr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/hu-hu/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/id-id/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/ja-jp/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/ko-kr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/nb-no/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/nl-nl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/pl-pl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/pt-br/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/pt-pt/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/ru-ru/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/sk-sk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/sv-se/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/vi-vn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/zh-hk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_433.2.dr	String found in binary or memory: https://support.office.com/zh-tw/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_356.2.dr, chromecache_433.2.dr	String found in binary or memory: https://support.xbox.com
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_443.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_343.2.dr	String found in binary or memory: https://templates.office.com
Source: chromecache_357.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories
Source: chromecache_474.2.dr	String found in binary or memory: https://va.idp.liveperson.net
Source: chromecache_474.2.dr	String found in binary or memory: https://va.msg.liveperson.net
Source: chromecache_433.2.dr	String found in binary or memory: https://www.21vbluecloud.com/dynamics365/
Source: chromecache_343.2.dr	String found in binary or memory: https://www.clarity.ms
Source: chromecache_408.2.dr, chromecache_543.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_517.2.dr, chromecache_398.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_398.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_356.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.microsoftestore.com.hk/partner?locale=zh_HK
Source: chromecache_474.2.dr	String found in binary or memory: https://www.microsoftstore.com.cn/
Source: chromecache_343.2.dr	String found in binary or memory: https://www.office.com/?auth=1
Source: chromecache_343.2.dr	String found in binary or memory: https://www.office.com/?auth=2
Source: chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_363.2.dr, chromecache_343.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_528.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_343.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_343.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 55063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 54952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 54975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 54837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55086
Source: unknown	Network traffic detected: HTTP traffic on port 55051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55088
Source: unknown	Network traffic detected: HTTP traffic on port 54905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 54997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 54825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55028
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55037
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55047
Source: unknown	Network traffic detected: HTTP traffic on port 54874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55053
Source: unknown	Network traffic detected: HTTP traffic on port 54897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55054
Source: unknown	Network traffic detected: HTTP traffic on port 54939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 54835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55064
Source: unknown	Network traffic detected: HTTP traffic on port 55053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55061
Source: unknown	Network traffic detected: HTTP traffic on port 54676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54815
Source: unknown	Network traffic detected: HTTP traffic on port 54943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54818
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54812
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54931
Source: unknown	Network traffic detected: HTTP traffic on port 55054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54948
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54949
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54820
Source: unknown	Network traffic detected: HTTP traffic on port 54869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54956
Source: unknown	Network traffic detected: HTTP traffic on port 55088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54839
Source: unknown	Network traffic detected: HTTP traffic on port 55065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54951
Source: unknown	Network traffic detected: HTTP traffic on port 54817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54955
Source: unknown	Network traffic detected: HTTP traffic on port 54851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54952
Source: unknown	Network traffic detected: HTTP traffic on port 54675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54848
Source: unknown	Network traffic detected: HTTP traffic on port 55043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54847
Source: unknown	Network traffic detected: HTTP traffic on port 54944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54965
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54964
Source: unknown	Network traffic detected: HTTP traffic on port 54839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54905
Source: unknown	Network traffic detected: HTTP traffic on port 54850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54912
Source: unknown	Network traffic detected: HTTP traffic on port 54695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54918
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54910
Source: unknown	Network traffic detected: HTTP traffic on port 54871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54804
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54920
Source: unknown	Network traffic detected: HTTP traffic on port 54722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54897
Source: unknown	Network traffic detected: HTTP traffic on port 54820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54669
Source: unknown	Network traffic detected: HTTP traffic on port 54981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54671
Source: unknown	Network traffic detected: HTTP traffic on port 54957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54676
Source: unknown	Network traffic detected: HTTP traffic on port 54890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54795
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54673
Source: unknown	Network traffic detected: HTTP traffic on port 55023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54694
Source: unknown	Network traffic detected: HTTP traffic on port 55057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54978
Source: unknown	Network traffic detected: HTTP traffic on port 54853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54850
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54971
Source: unknown	Network traffic detected: HTTP traffic on port 55009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54853
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54980
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 54912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54872
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54996
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54880
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54885
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54889
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54887
Source: unknown	Network traffic detected: HTTP traffic on port 54891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54892
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54890
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55002
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55013
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55011
Source: unknown	Network traffic detected: HTTP traffic on port 55049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55014
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55023
Source: unknown	Network traffic detected: HTTP traffic on port 54938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54695
Source: unknown	Network traffic detected: HTTP traffic on port 54947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 54971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54993 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:54694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:55047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:55048 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@27/526@231/60

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,18081194610392995174,6121383709671565716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,18081194610392995174,6121383709671565716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://aka.ms/LearnAboutSenderIdentification	0%	URL Reputation	safe
https://aka.ms/LearnAboutSenderIdentification	0%	URL Reputation	safe

Source	Detection	Scanner	Link
global.px.quantserve.com	0%	Virustotal	Browse
dco-ats-00-1519508033.us-east-1.elb.amazonaws.com	0%	Virustotal	Browse
sni1gl.wpc.alphacdn.net	0%	Virustotal	Browse
eu-eb2.3lift.com	0%	Virustotal	Browse
s.tribalfusion.com	0%	Virustotal	Browse
adobetarget.data.adobedc.net	0%	Virustotal	Browse
bttrack.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
s-part-0033.t-0009.t-msedge.net	0%	Virustotal	Browse
s-part-0014.t-0009.t-msedge.net	0%	Virustotal	Browse
idsync.rlcdn.com	0%	Virustotal	Browse
sync.crwdcntrl.net	0%	Virustotal	Browse
dualstack.tls13.taboola.map.fastly.net	0%	Virustotal	Browse
sni1gl.wpc.omegacdn.net	0%	Virustotal	Browse
s-part-0036.t-0009.t-msedge.net	0%	Virustotal	Browse
c.ba.contentsquare.net	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
rtb.adentifi.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
publisher.liveperson.net	0%	Virustotal	Browse
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
sync.srv.stackadapt.com	0%	Virustotal	Browse
s-part-0023.t-0009.t-msedge.net	0%	Virustotal	Browse
aragorn-prod-va-lb.inbake.com	0%	Virustotal	Browse
s.twitter.com	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
k.bf.contentsquare.net	NaN%	Virustotal	Browse
aka.ms	0%	Virustotal	Browse
us-u.openx.net	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
s-part-0039.t-0009.t-msedge.net	0%	Virustotal	Browse
d.impactradius-event.com	0%	Virustotal	Browse
msftenterprise.sc.omtrdc.net	0%	Virustotal	Browse
microsoftwindows.112.2o7.net	0%	Virustotal	Browse
pug-lhr-bc.pubmnet.com	0%	Virustotal	Browse
q-aus1.contentsquare.net	0%	Virustotal	Browse
ax-0001.ax-msedge.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://login.microsoftonline.com/uxlogout?appid	0%	URL Reputation	safe
https://outlook.live.com/owa/	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.prototype.tostring	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-arrayspeciescreate	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	URL Reputation	safe
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.push	0%	URL Reputation	safe
https://bugs.chromium.org/p/v8/issues/detail?id=12681	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	URL Reputation	safe
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	0%	URL Reputation	safe
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	0%	URL Reputation	safe
https://axios-http.com	0%	URL Reputation	safe
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	URL Reputation	safe
https://keycode.info/table-of-all-keycodes	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-getmethod	0%	URL Reputation	safe
https://mscom.demdex.net/dest5.html?d_nsid=0	0%	URL Reputation	safe
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-parseint-string-radix	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-string.prototype.includes	0%	URL Reputation	safe
https://www.onenote.com/	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.map	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-tolength	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype-	0%	URL Reputation	safe
https://ag.innovid.com/dv/sync?tid=6	0%	URL Reputation	safe
https://breeze.aimon.applicationinsights.io	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.foreach	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-string.prototype.trimstart	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://bugzil.la/548397	0%	URL Reputation	safe
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	0%	URL Reputation	safe
https://www.clarity.ms/tag/uet/	0%	URL Reputation	safe
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	0%	URL Reputation	safe
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	0%	URL Reputation	safe
https://github.com/mozilla/rhino/issues/346	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc=	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7781164971607730135	0%	Avira URL Cloud	safe
https://assets.onestore.ms	0%	Avira URL Cloud	safe
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	0%	Avira URL Cloud	safe
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/www/bridge-WR110.js	0%	Avira URL Cloud	safe
https://lptag.liveperson.net	0%	Avira URL Cloud	safe
https://github.com/tc39/proposal-array-filtering	0%	Avira URL Cloud	safe
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zs7RjAAAAGivrgN-	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=358&dpuuid=4769043448713762178	0%	Avira URL Cloud	safe
https://github.com/es-shims/es5-shim/issues/150	0%	Avira URL Cloud	safe
https://github.com/w3c/aria-practices/pull/1757	0%	Avira URL Cloud	safe
https://github.com/microsoft/clarity	0%	Avira URL Cloud	safe
https://d.impactradius-event.com	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=992&dpuuid=1rfmbuho6m3dl	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	0%	Avira URL Cloud	safe
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830102059&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=4&ct=0	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meCore.min.js	0%	Avira URL Cloud	safe
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://www.skype.com/en/	0%	Avira URL Cloud	safe
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=adobe	0%	Avira URL Cloud	safe
https://c.clicktale.net/dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA6tWCghxjncvzUxRslIyME0xNjI2M9ZNMTU20TVJsTTWtUwyM9VNTkk1MzcxNzdNNTdUqgUAotlAIzMAAAA%3D&ct=2&r=041858	0%	Avira URL Cloud	safe
https://rtb.adentifi.com/CookieSyncAdobe	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	0%	Avira URL Cloud	safe
https://www.office.com/?auth=2	0%	Avira URL Cloud	safe
https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8	0%	Avira URL Cloud	safe
https://www.office.com/?auth=1	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/1130	0%	Avira URL Cloud	safe
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	0%	Avira URL Cloud	safe
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zs7RjAAAAGivrgN-	0%	Avira URL Cloud	safe
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=1&ct=2	0%	Avira URL Cloud	safe
https://stores.office.com/subscription/acquire	0%	Avira URL Cloud	safe
https://signup.azure.com/	0%	Avira URL Cloud	safe
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
http://github.com/aFarkas/lazysizes	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/677	0%	Avira URL Cloud	safe
https://analytics.twitter.com/i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594	0%	Avira URL Cloud	safe
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	0%	Avira URL Cloud	safe
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=2&ct=0	0%	Avira URL Cloud	safe
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	0%	Avira URL Cloud	safe
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/1128	0%	Avira URL Cloud	safe
https://signup-local.azure.com/	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css	0%	Avira URL Cloud	safe
https://login.windows-ppe.net	0%	Avira URL Cloud	safe
https://www.facebook.com/tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s.tribalfusion.com	172.64.150.63	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.244	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	0%, Virustotal, Browse	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bttrack.com	192.132.33.67	true	false	0%, Virustotal, Browse	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	0%, Virustotal, Browse	unknown
dco-ats-00-1519508033.us-east-1.elb.amazonaws.com	52.21.67.222	true	false	0%, Virustotal, Browse	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	0%, Virustotal, Browse	unknown
idsync.rlcdn.com	35.244.174.68	true	false	0%, Virustotal, Browse	unknown
c.ba.contentsquare.net	52.30.188.204	true	false	0%, Virustotal, Browse	unknown
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	0%, Virustotal, Browse	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	0%, Virustotal, Browse	unknown
sync.crwdcntrl.net	52.211.24.199	true	false	0%, Virustotal, Browse	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	0%, Virustotal, Browse	unknown
publisher.liveperson.net	34.120.154.120	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.184.226	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
aragorn-prod-va-lb.inbake.com	18.209.2.95	true	false	0%, Virustotal, Browse	unknown
rtb.adentifi.com	23.23.91.66	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.16.132	true	false	0%, Virustotal, Browse	unknown
d.impactradius-event.com	35.186.249.72	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.78.109.69	true	false	0%, Virustotal, Browse	unknown
sync.srv.stackadapt.com	54.165.19.58	true	false	0%, Virustotal, Browse	unknown
msftenterprise.sc.omtrdc.net	63.140.37.206	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	52.223.40.198	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	0%, Virustotal, Browse	unknown
us-u.openx.net	35.244.159.8	true	false	0%, Virustotal, Browse	unknown
s.twitter.com	104.244.42.67	true	false	0%, Virustotal, Browse	unknown
microsoftwindows.112.2o7.net	63.140.62.222	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
k.bf.contentsquare.net	54.208.196.179	true	false	NaN%, Virustotal, Browse	unknown
aka.ms	2.18.69.150	true	false	0%, Virustotal, Browse	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	0%, Virustotal, Browse	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	0%, Virustotal, Browse	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	0%, Virustotal, Browse	unknown
q-aus1.contentsquare.net	34.200.199.99	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
srm.bf.contentsquare.net	54.90.52.195	true	false		unknown
googleads.g.doubleclick.net	216.58.206.34	true	false		unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false		unknown
a.tribalfusion.com	172.64.150.63	true	false		unknown
dh1y47vf5ttia.cloudfront.net	18.66.112.103	true	false		unknown
ib.anycast.adnxs.com	185.89.210.90	true	false		unknown
d1xbuscas8tetl.cloudfront.net	108.138.7.18	true	false		unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
js.monitor.azure.com	unknown	unknown	false		unknown
ats.everesttech.net	unknown	unknown	false		unknown
ag.innovid.com	unknown	unknown	false		unknown
t.clarity.ms	unknown	unknown	false		unknown
idpix.media6degrees.com	unknown	unknown	false		unknown
va.v.liveperson.net	unknown	unknown	false		unknown
px.owneriq.net	unknown	unknown	false		unknown
cm.everesttech.net	unknown	unknown	false		unknown
static-assets.fs.liveperson.com	unknown	unknown	false		unknown
jadserve.postrelease.com	unknown	unknown	false		unknown
dmpsync.3lift.com	unknown	unknown	false		unknown
accdn.lpsnmedia.net	unknown	unknown	false		unknown
rtd.tubemogul.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false		unknown
pixel.rubiconproject.com	unknown	unknown	false		unknown
logincdn.msftauth.net	unknown	unknown	false		unknown
trc.taboola.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
cms.analytics.yahoo.com	unknown	unknown	false		unknown
amp.azure.net	unknown	unknown	false		unknown
sync-tm.everesttech.net	unknown	unknown	false		unknown
lpcdn.lpsnmedia.net	unknown	unknown	false		unknown
c.clicktale.net	unknown	unknown	false		unknown
ds.reson8.com	unknown	unknown	false		unknown
assets.onestore.ms	unknown	unknown	false		unknown
ups.analytics.yahoo.com	unknown	unknown	false		unknown
ajax.aspnetcdn.com	unknown	unknown	false		unknown
q-aus1.clicktale.net	unknown	unknown	false		unknown
image2.pubmatic.com	unknown	unknown	false		unknown
cdnssl.clicktale.net	unknown	unknown	false		unknown
dpm.demdex.net	unknown	unknown	false		unknown
rtd-tm.everesttech.net	unknown	unknown	false		unknown
servedby.flashtalking.com	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
k-aus1.clicktale.net	unknown	unknown	false		unknown
www.clarity.ms	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		unknown
mscom.demdex.net	unknown	unknown	false		unknown
mem.gfx.ms	unknown	unknown	false		unknown
analytics.twitter.com	unknown	unknown	false		unknown
c.s-microsoft.com	unknown	unknown	false		unknown
cms.quantserve.com	unknown	unknown	false		unknown
support.content.office.net	unknown	unknown	false		unknown
analytics.tiktok.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
sync.search.spotxchange.com	unknown	unknown	false		unknown
login.microsoftonline.com	unknown	unknown	false		unknown
lptag.liveperson.net	unknown	unknown	false		unknown
acctcdn.msftauth.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc=	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7781164971607730135	false	Avira URL Cloud: safe	unknown
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false	URL Reputation: safe	unknown
https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/www/bridge-WR110.js	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zs7RjAAAAGivrgN-	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=358&dpuuid=4769043448713762178	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=992&dpuuid=1rfmbuho6m3dl	false	Avira URL Cloud: safe	unknown
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830102059&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=4&ct=0	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://mscom.demdex.net/dest5.html?d_nsid=0	false	URL Reputation: safe	unknown
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=adobe	false	Avira URL Cloud: safe	unknown
https://c.clicktale.net/dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA6tWCghxjncvzUxRslIyME0xNjI2M9ZNMTU20TVJsTTWtUwyM9VNTkk1MzcxNzdNNTdUqgUAotlAIzMAAAA%3D&ct=2&r=041858	false	Avira URL Cloud: safe	unknown
https://rtb.adentifi.com/CookieSyncAdobe	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	false	Avira URL Cloud: safe	unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zs7RjAAAAGivrgN-	false	Avira URL Cloud: safe	unknown
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=1&ct=2	false	Avira URL Cloud: safe	unknown
https://ag.innovid.com/dv/sync?tid=6	false	URL Reputation: safe	unknown
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://analytics.twitter.com/i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594	false	Avira URL Cloud: safe	unknown
https://k-aus1.clicktale.net/v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=2&ct=0	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/uxlogout?appid	chromecache_563.2.dr	false	URL Reputation: safe	unknown
https://outlook.live.com/owa/	chromecache_363.2.dr, chromecache_528.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.onestore.ms	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://lptag.liveperson.net	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tc39/proposal-array-filtering	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_278.2.dr, chromecache_394.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_268.2.dr, chromecache_374.2.dr	false	URL Reputation: safe	unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/aria-practices/pull/1757	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://axios-http.com	chromecache_515.2.dr, chromecache_325.2.dr	false	URL Reputation: safe	unknown
https://d.impactradius-event.com	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_396.2.dr, chromecache_416.2.dr	false	Avira URL Cloud: safe	unknown
https://keycode.info/table-of-all-keycodes	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	chromecache_356.2.dr, chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/en/	chromecache_363.2.dr, chromecache_343.2.dr, chromecache_528.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_323.2.dr, chromecache_549.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_343.2.dr	false	URL Reputation: safe	unknown
https://www.office.com/?auth=2	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/	chromecache_363.2.dr, chromecache_528.2.dr	false	URL Reputation: safe	unknown
https://www.office.com/?auth=1	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_323.2.dr, chromecache_549.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://jquery.com/	chromecache_497.2.dr, chromecache_545.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://stores.office.com/subscription/acquire	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://signup.azure.com/	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/aFarkas/lazysizes	chromecache_347.2.dr, chromecache_301.2.dr	false	Avira URL Cloud: safe	unknown
https://breeze.aimon.applicationinsights.io	chromecache_413.2.dr, chromecache_502.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/issues/677	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_497.2.dr, chromecache_545.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzil.la/548397	chromecache_443.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9	chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_443.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://signup-local.azure.com/	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/tag/uet/	chromecache_408.2.dr, chromecache_543.2.dr	false	URL Reputation: safe	unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	chromecache_363.2.dr, chromecache_528.2.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_261.2.dr	false	Avira URL Cloud: safe	unknown
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_515.2.dr, chromecache_325.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.129.9.96	unknown	United States	16509	AMAZON-02US	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
185.89.211.116	unknown	Germany	29990	ASN-APPNEXUS	false
151.101.193.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
54.165.19.58	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
63.33.187.142	unknown	United States	16509	AMAZON-02US	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
107.22.246.206	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
2.18.69.150	aka.ms	European Union	16625	AKAMAI-ASUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
52.30.188.204	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false
34.195.65.55	unknown	United States	14618	AMAZON-AESUS	false
54.208.196.179	k.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
216.58.206.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.112.34	unknown	United States	3	MIT-GATEWAYSUS	false
54.78.109.69	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
108.138.7.18	d1xbuscas8tetl.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
23.23.91.66	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
34.200.199.99	q-aus1.contentsquare.net	United States	14618	AMAZON-AESUS	false
63.140.37.206	msftenterprise.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false
52.21.67.222	dco-ats-00-1519508033.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
91.228.74.244	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
54.171.26.222	unknown	United States	16509	AMAZON-02US	false
63.140.62.222	microsoftwindows.112.2o7.net	United States	15224	OMNITUREUS	false
142.250.184.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.75.62.37	unknown	United States	16509	AMAZON-02US	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
172.64.150.63	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.209.2.95	aragorn-prod-va-lb.inbake.com	United States	14618	AMAZON-AESUS	false
13.107.246.64	s-part-0036.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
13.107.246.61	s-part-0033.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
192.132.33.67	bttrack.com	United States	18568	BIDTELLECTUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
34.238.211.197	unknown	United States	14618	AMAZON-AESUS	false
18.66.112.103	dh1y47vf5ttia.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
52.211.24.199	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.90.52.195	srm.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500346
Start date and time:	2024-08-28 09:26:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@27/526@231/60
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://go.microsoft.com/fwlink/?linkid=849747 Browse: https://www.microsoft.com/microsoft-365/microsoft-office?ocid=cmml7tr0rib Browse: https://www.microsoft.com/microsoft-365?ocid=cmmttvzgpuy

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 93.184.221.240, 20.190.160.17, 40.126.32.140, 40.126.32.76, 40.126.32.68, 40.126.32.138, 40.126.32.74, 40.126.32.136, 40.126.32.133, 142.250.185.227, 74.125.206.84, 142.250.186.110, 34.104.35.123, 88.221.168.116, 88.221.169.152, 2.19.126.155, 2.19.126.146, 23.192.249.186, 184.28.89.233, 52.182.143.215, 2.23.70.177, 20.114.59.183, 23.50.103.248, 20.190.160.14, 40.126.32.72, 20.190.160.22, 52.165.164.15, 20.42.65.91, 216.58.206.42, 142.250.185.74, 142.250.186.170, 142.250.185.106, 142.250.186.106, 142.250.184.202, 142.250.185.170, 172.217.18.106, 172.217.18.10, 172.217.16.202, 216.58.212.138, 142.250.186.138, 142.250.184.234, 142.250.185.138, 216.58.206.74, 142.250.185.202, 23.192.243.7, 2.19.126.139, 2.19.126.150, 93.184.221.200, 13.85.23.206, 20.223.35.26, 23.96.180.189, 184.28.89.167, 2.18.64.20, 2.18.64.21, 178.249.97.23, 34.120.154.120, 178.249.97.99, 52.167.30.171, 2.18.64.6, 2.18.64.14, 2.18.64.16, 2.18.64.11, 2.18.64.15, 216.58.206.72, 13.107.42.
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, lgincdnmsftuswe2.azureedge.net, assets.onestore.ms.edgekey.net, pme-greenid-prod.trafficmanager.net, clientservices.googleapis.com, ak.privatelink.msidentity.com, l-0005.l-msedge.net, clients2.google.com, star-azurefd-prod.trafficmanager.net, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, acctcdnmsftuswe2.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, cm.everesttech.net.akadns.net, lgincdnvzeuno.ec.azureedge.net, assets.onestore.ms.akadns.net, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, c.bing.com, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, logincdn.msauth.net, a1985.g2.akamai.net, e11294.g.akamaiedge.net, aws-virg-oreg-cali.ag.innovid.com.akadns.net, support.microsoft.com, acctcdn.msauth.net, prod-video-cms-rt-microsoft-com.akamaized.net, go.microsoft.com, www.googletagma
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 06:27:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9797708981820525
Encrypted:	false
SSDEEP:	48:8shdBTpFPHuidAKZdA19ehwiZUklqehYy+3:8CLMHy
MD5:	CFF26E23CD5D470D8CEDCA1013222BE5
SHA1:	AEE3ED502ECCC0A84EE74E4BF08C75206DCA1B5D
SHA-256:	F1D6EBDB34C4E047B6041C7033212BC951A89FC29AECAD2FB01192D296536787
SHA-512:	0EB70ACD36365230175617AFF6C160B14601E936375C1CD72A2F9BA576CE46A78BDB324579DC49A076391F36866EA27BB32D7FF0161F83C998B5FD28FC16122E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....F.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 06:27:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993879221019684
Encrypted:	false
SSDEEP:	48:8X+hdBTpFPHuidAKZdA1weh/iZUkAQkqeh3y+2:80L+9QWy
MD5:	42EC436A437A620A11921DF6428E69FC
SHA1:	B851CC441234E71D4BC1D4389C2E58CC6EDFACF7
SHA-256:	FCEC21A6CECC889825B7C0DA5BD7751A1D2FE72751ED93D466667EAEDE7CEB38
SHA-512:	8617EFC55110A17CCEE127AAD7E780F8E8BEF72E0D90DF85CC83A957A307E933D01C7372A54D5EE9E032FA3D8667EBBB56BC52705A3739FA91748117E6AF87B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003758992496565
Encrypted:	false
SSDEEP:	48:8x+hdBTpFsHuidAKZdA14tseh7sFiZUkmgqeh7s1y+BX:8xkLHnDy
MD5:	6D1E5FF0151E14C7FE75805F36FFEA99
SHA1:	6470D1DF1BA99870B83CE79B1FC6DC8A9464F7A0
SHA-256:	0E58EDCD48E87926FAEBAA06C781FEF3A117355FF2B1B2D3A0918F9483263128
SHA-512:	DD019C8BAEC160BCE75E0913F807C1A48AC158900F1EB99318C6D6587817404A59946ABAB0D5898CEABA4A72C5565663041072D0641DC019068EA090EDBAAF45
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 06:27:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9942073798213467
Encrypted:	false
SSDEEP:	48:8ChdBTpFPHuidAKZdA1vehDiZUkwqeh7y+R:8YLlNy
MD5:	39F4AD60511BB026478595E7D9118E63
SHA1:	BF76C28FEEB278070F8FB4CE0866BC3F4E3E57E0
SHA-256:	B0F9F1C1D370B2FEBCC3A5239E64F616D3FFB7BA7F31C8EF24D4523769A54A5D
SHA-512:	33326A3309C2AF8CAF86F0D52B949561724938376F5F13DB7F691B2EADCDD2E91256DE9403049584BEA2984B37DA1933F368C8191E5D0AB962DD571F57986237
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 06:27:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9824751754498386
Encrypted:	false
SSDEEP:	48:8BhdBTpFPHuidAKZdA1hehBiZUk1W1qehxy+C:8fL19Ry
MD5:	8F4E26EE2313EFA9D5873439BDE43A7E
SHA1:	9675A6DA149E90666E54D5C62B758791B478BBA0
SHA-256:	A6D98555FEB019BE6C30F4508CF2AA1A39AB28F6AC85016447FAEABEF89DCB37
SHA-512:	38977C7C804C0C5254BD9254D8FB9AA80CB3646EAF297E57BE8AA4AC7AE09767BC16A2B55464045D455D507D364A4BD02D79A880183724516A10B31FE745E25E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....q.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 06:27:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9913059970447278
Encrypted:	false
SSDEEP:	48:8UhdBTpFPHuidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbDy+yT+:8qLJT/TbxWOvTbDy7T
MD5:	CC5E254D6CD102D9D8519289D0B5B89D
SHA1:	7397FBB1059B838BA902C18D4143D6DA5AAF16AE
SHA-256:	5A75B082083312F8D30D3EDB2A082989C9F2087441F5EC5CE90899ADAD7B3DF0
SHA-512:	2B5F98095BEB48B22F471E2F5D4D15233D514AC8FDD66D3919339284668CA0BCD7C433649F6C2B9073E8DD6E940287A6677DFD9963D727B4BECB6AA569A45623
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....E......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd;....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd;....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd;....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd;..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yh;...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Z.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	dropped
Size (bytes):	40535
Entropy (8bit):	5.329172101529111
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlb:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SZ
MD5:	F50D31809ACB60FA6C9D03A6DCDC1EF6
SHA1:	9AA762F1FF4DA9D6F058FDB63C07AA38BF66DF3B
SHA-256:	0B22C718AA3DF8AAF8D98526EAD4A61CF6179A64F962495734A4E208AF52B902
SHA-512:	A35E0E94CD1915E9BA7CDAA65F5061E437C08A3689125A6D3DA32C709B26645D01388F0F9ECF714C3C1BFA488AAE32EC973EAAF9F95065E28E050C47CD7B8A1D
Malicious:	false
Reputation:	low
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15396)
Category:	downloaded
Size (bytes):	15441
Entropy (8bit):	5.11317096226596
Encrypted:	false
SSDEEP:	384:pcdYt6g5LhlvLlbbbxGd7GIpaexhvWHt/YVc8:pcy3vLlbZnIpaexhv6RKb
MD5:	F92C3CD31AC3F23E9256DBC2A7DB7454
SHA1:	FF753C1D040C5CB370C9C4770D1FD967C9D5FA6C
SHA-256:	80A45B8AB3685DD11B1193D214BE8695389409BE7D5C795561A4395E286FA06D
SHA-512:	CB2DD870F1C26F3B2B88EEB932096A512C3B2442E42190703DB0624EC6A950CA6DCD2195D3C5160A6C602C76EF933C45F4BA1781D5F7CA787EB43F9300B4F877
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Article.Main.min.js?v=gKRbirNoXdEbEZPSFL6GlTiUCb59XHlVYaQ5XihvoG0
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.221020544248936
Encrypted:	false
SSDEEP:	24:ckGytSvuT/y67L/nV9jViHwukcglwYVTYVu:catwuby67pLRuxmwCTCu
MD5:	EC8AED9DF755A7B27E52317DCF532DF8
SHA1:	60F03B5BF43D1682D1CDB7DAF5A5A37FCD29D4E8
SHA-256:	C152DD3ED8493299EA2712FFC15A0043F417FEDCF4159B2C993A006501D82AC4
SHA-512:	16890D243CE2236AA2CD01C3C85D7B0AA1DB3DC8BF8B9CFE97AD18889F4030A0B6511C9F82C62F2BDA5F1029AFF4E12A9E35B0E182FC3B2B8B677618A589F5CF
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/socialfollow/v1/socialfollow/clientlibs/site.min.ACSHASHec8aed9df755a7b27e52317dcf532df8.js
Preview:	'use strict';$(document).ready(function(){var a=window.matchMedia("(prefers-color-scheme: dark)");a.addEventListener("change",function(k){{const d=document.querySelectorAll(".socialfollow .socialfollow-li img");if(d)for(var e=0;e<d.length;e++){var b=d[e].getAttribute("src"),g=d[e].getAttribute("data-src");b&&(k.matches?(-1<b.indexOf("\x26fmt\x3dpng-alpha")&&(b=b.replace("\x26fmt\x3dpng-alpha",""),d[e].setAttribute("src",b)),-1<b.indexOf("?fmt\x3dpng-alpha")&&(b=b.replace("?fmt\x3dpng-alpha",""),d[e].setAttribute("src",.b))):g&&d[e].setAttribute("src",g))}}});if(a.matches&&(a=document.querySelectorAll(".socialfollow .socialfollow-li img")))for(var f=0;f<a.length;f++){var c=a[f].getAttribute("src"),h=a[f].getAttribute("data-src");c&&(-1<c.indexOf("\x26fmt\x3dpng-alpha")?(c=c.replace("\x26fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):-1<c.indexOf("?fmt\x3dpng-alpha")?(c=c.replace("?fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):h&&a[f].setAttribute("src",h))}});

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	7.334002053768874
Encrypted:	false
SSDEEP:	6:zZCdClQ5lN62mazX6ducrRt1p+vq5cPIvGEpGc4xtk6Xu4lOZFK45U:455XtBL41bQvq5cPejobI6XOm45U
MD5:	E5C8F8637544A519558371B774E355DF
SHA1:	71BFB49D52B3D1B99DF598BB366DB193D8762194
SHA-256:	26C9CD908137A3768118AE5F587B66643ED94206D8FB2C3813D06C3376BA0431
SHA-512:	FDC7E17B35F0D013FAFB8557DD8E57D87F3C46552DBECFE38B1E187C5FABACBAAF334EA22F272E4C93C4296C224B53E6F5FE55B9AA40E30B97EA2BA0BB2F7961
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Linkedin_noBG?scl=1
Preview:	RIFF`...WEBPVP8 T........(.(.>E..D"...:..(.D...g..).... :5....?.L...])..6YW...{}9......2l\|...c/.0...!..y....S.h....?.;..^....._.....l..].8......O)......./Z..U........j.......1.Hz.\X...._..._...d`.^.....~.5...%....7..{..^.b......(..........9.w."`}H..u[M.M$E.z.?U`.n.M..5.....q...~...?@..8k.._...%..>.X.y-,[......~XV.~.$fG.r.k./k.G.bCu..v U.(....p....

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	dropped
Size (bytes):	2916
Entropy (8bit):	5.299643121721776
Encrypted:	false
SSDEEP:	48:F2CwrUfJrBAkyq5tJiSoGu8EBG8gxE/44af4G4QLPp/CpoiovvtB6Ugw6vAykytz:Fzw4xBryq3bCpBGlE/4Xf77jp/Cpoioa
MD5:	348B07E6E2C5729E9E932BA2765BDF43
SHA1:	09484F4E16FC3CD083C1D40C74C3765B81F76ED2
SHA-256:	5083F052635B8F690C7327BA89F17FA956E73E4161BD302163EE5B371383547E
SHA-512:	1872F4B62AF8864E5F37DC3B7277E68DF4C4D85AA405A85ACF8D034BF61F1134AFE002C169BB45DB5AC432AB25004A44935B4CDD5F87DF934E95FAA3E1920FC4
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function l(c){var a=t[c];if(void 0!==a)return a.exports;a=t[c]={exports:{}};return v[c](a,a.exports,l),a.exports}var v={4470:()=>{function c(a,d){(null==d\|\|d>a.length)&&(d=a.length);for(var h=0,k=Array(d);h<d;h++)k[h]=a[h];return k}window.matchMedia("(prefers-color-scheme: dark)").addEventListener("change",function(a){return function(d){var h=document.querySelectorAll(".feature-card .card-body .img-fluid");h&&h.forEach(function(k){var g=(k.getAttribute("src")\|\|"").split("?");if(!(g=.function(b){if(Array.isArray(b))return b}(g)\|\|function(b,m){var e=null==b?null:"undefined"!=typeof Symbol&&b[Symbol.iterator]\|\|b["@@iterator"];if(null!=e){var f,n,q,r=[],p=!0,u=!1;try{if(n=(e=e.call(b)).next,0===m){if(Object(e)!==e)return;p=!1}else for(;!(p=(f=n.call(e)).done)&&(r.push(f.value),r.length!==m);p=!0);}catch(w){u=!0;var x=w}finally{try{if(!p&&null!=e.return&&(q=e.return(),Object(q)!==q))return}finally{if(u)throw x;}}return r}}(g,1)\|\|function(b,m){if(b){if("string"==typeof b)r

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23186), with CRLF line terminators
Category:	downloaded
Size (bytes):	23650
Entropy (8bit):	5.767822494217297
Encrypted:	false
SSDEEP:	384:HWcexHbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:2cyDH9yF1IBBdq5yF/2dE
MD5:	13C114999311AAA1E53FF4262F0F5D2C
SHA1:	A97B29F5A102972D9338051B376F18F517AA7303
SHA-256:	D0ED01B74EAFD6BCA98F1FF4035CA28EC612F270CD732FF65206C5E465BF49CD
SHA-512:	269A88A1EDE42AE13B94BE03294151F6CF1C26C82C229BF0D62B99B1701FDA01B167F7FCE5C3595CABC48C76589DA613F24C6F3C01DFD8684DE7A427E1641970
Malicious:	false
Reputation:	low
URL:	https://fpt.microsoft.com/tags?session_id=f3979bbb-36cb-4f3d-9d0e-72e8914c85df
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.microsoft.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='f3979bbb-36cb-4f3d-9d0e-72e8914c85df',ticks='8DCC732F608335D',rid='7abfd6b5-77da-470d-85f1-555f65baaf67',authKey='H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLsC1YDbhJlGo2gEEUqiXJF5WgpOA8A39Rs8%252b2fDhJnQJ3cOWKFZfXR8ZKeBGjmkShQXFaak0GLAKMpJHzKFLUwtwTmTaMzKu8l3bS9a68eXYraF7tsYKLzSU%252blaSuIzwOLm%252bIokq%252b93pF1A9shweIPWC%252ft%252bsz8nh4kjyE5IkT3w6GzNYC8YgzlAC5bmU6n4v0uibCFUsADCobp4ABxkpZzZR3qIAvuHS90tYN19sD8uN',cid='02C58649-E822-405B-B6C3-17A7509D2FCC',assessment='',waitresponse=false,bbwait=false,commonquery='',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1724830086979,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.l

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1290
Entropy (8bit):	7.827004131478698
Encrypted:	false
SSDEEP:	24:z9jyIMrqKGApQFTcZEDEFRxOARxcql4P/GeB35gyE54K03G+jU7Dc:ZGICqKdQKzFRxOARxvlk++y54KwjUfc
MD5:	DD8559857F58FCD27DF2454F49D7AF4F
SHA1:	DC9650CAEF227D59CCE9C0A5FFA12EDD408B31EC
SHA-256:	E891499624C6E4EACA7629AF380D94459F96B44FC759A632062F7ECC1DB6C3D5
SHA-512:	22AF9FF1674D56C1B53A02BF7922CC20DF7BEC12E98931D344DFBC67FFF13ABAA27C5CB6C5F99338827BD2A0C7F417021EABAB6BE943A1476BF2AE4DAAB203C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH.....W. .$E....._..<h.....@..3....Mj.0s.h...=..l....m.v....'.FD.'..y..-.._N...q...,.Tx^.u2.4.W.....l.l..dl,9..J.......D.L.`............M....f.............X..I..G.$^.r.B...S.I....k.Z.ZK...).Z.].N..i.F2j..:.VP8 ....0....o.o.>Q".E.....].8....jV..:.}.......z..._3.._.. .....o^...........~..=j.....g..=G.I...'._.......[..2.<&.].oN....w...;.~...'...T7R@\|g9..[...`c...T..,.9q...F...DJ..d.B....G..A]..m........W.....N....F.....S......L#uD..f.c..<.c...'........{mW....Ld^:..>..yq..S.....9..g.CD.$k.O...m.M.7%r.v.9.@..2Cp....].ie..zt.....-......3...&8...'..h....(S.....T..'.A....Vq..R..^p.)-.N.J...TTz'X.~MeL...^...a...G.r).\....@.]c......O:.Cw...a....z......o....)..!...l7Bd.~\......... ).....Kh6"U..~...h6...j..AEu...a..^...._.$....s......a......Z..tA..EO...l?..zz....H....w.$/..\6.!z:).'..Y....D)u.X.^.%...."...q.as 2.W....Bgg.POf>l5..$..._......L..D{....j..L#....h..R...3..6..Vh.X..b......`...K@..(.c..'_.v.R3V...

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	916
Entropy (8bit):	7.720438442767581
Encrypted:	false
SSDEEP:	24:Yuoux1JrA90Wghgc24eKyHjpw3RI87lNi+uu5IGslN9pPySu:rvWghdBeee8BNi+15I9/fPySu
MD5:	BDE473695CDC46B3D6810A1F561FC99A
SHA1:	94F9B012FD1F881078446BBE05A7B1DA78CE25EE
SHA-256:	ED0EC0568B39A870748767E2515077EDEE489EBF64B8EDC64DF1B6615FC9B9D4
SHA-512:	47E0EA293636E61F8CB90F42E16F7D31ECA40713A5B07DC1DB8494C6E9250CC07F14F75D7FE408FB9352C132F2ED8C8B4C3D0E31A8526C3EB410E56D63A2C5DD
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Excel-75x75
Preview:	RIFF....WEBPVP8 .........K.K.>Q".E.......8...................<8..?P?c...:[...-.L.Y..$...#...].?.....I...V.y.g.P.P..;.34f.5.g...l.1..:.vS0......).....=.{../e.>.K..s...d.......2.Jt....&.9Wn.{.W. .5O..!...c.o.P....C7..@.N5.../..._.W.r......d......I. .`N._..".$.;.-p....kHBI..../x....]b....&...:D.....>.\..A(K.....>...*...t%..."U..\R....C..G.....u.I...o.....(..V../+5EV..S\|...@Q..:.....V.Rz..qCjz.....C<mQc...>x%...O<J............5..m7;.R.....b{4...q?.l.r...i?s.=.uw...C.jU...D..9..-.I...{..).(.0....LIE..@....-.0.v........H9.....:.&.....3..J...v.j...s...$c..........}...J.Y,F3...'....\|$..,..~.u.....v....u..MY..W.jJ.F.Iu..[..\|./.}^E..i..#&....\..<.A.. 0a.4].^.\|\"....1s...>...K[..c$.DU...j.........2.......2.z..!k..W..(..?.Y..A...B.vd.....z..j...B.:fD.A....k.......+to.&......q..B8$..s.....#.........FQ*P%..Q..b.2.^.."`...,e+.7.......P.. P..EU...e....=V..[\.i~.!.z.M.....\$.8J......

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1181
Entropy (8bit):	7.3485998507705075
Encrypted:	false
SSDEEP:	24:+cKYj6LuzpSgcoJfYSBOxs2PpwtkMfxl02nm2fzdAJkkZE3mG+b:+cKYjwulSgc0BNtkMZ22nm25AJkkZE3y
MD5:	77A7927C38CDAB23699833B516BD80E8
SHA1:	6424AB6A501FC6E0569E6F15BA5FDFD211220010
SHA-256:	F37220C1F89087D388043528F99B1CE0F7C9797E8DE456D9A5ADCA21F54FD998
SHA-512:	EF529A8BE1383BCE3E5C132DC74B8F9E09B6AF5AA57607640A62E246E5854636A000339BCA236BDCCC4FF057ECF316A52672EC71B25227EEBAAABCE29A2A6C08
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Powerpoint-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......J`...B2.......1@.+<.~..9Y.N../.....?....l.\|...._....l..U.F..DT'l.d..\'.9...3.......c....3....$]RU...um...+.ll..U(%.."hj.\|..I..:.Z.}.>\|..p..L8-....C.K..wHth1..Z.~mv..l..A....u..n..._..G.d#...$..??...g.O.t...X............)jx..w..iO..l.{:3b&2!W.P.q.ryl$.!.%Bo...SO..[.y...Vi/8....2,.k...:.s.zjv.....`..\|.0Z.Qh....Owh.L...K,....V,c.kc.x......<8...D...#..\.A........R.-.a.k.\|n....6....[-MQb...../......}.=.0Gx...s.!..kxh..C.B.{a......w... .p.{....(...x..,...O.F'<.Z.WD..Q..f...R.e...r..n...r..QR....I..m.eo....G....\..'..]......0..M.B.d.CaV...<wy6.o:J.....R......y\|.'...Q..#$.::..dq.?...)..k..$.{?...V.X..5.....8..>...n.F.Q..f-..$.:_..>....0.B....\|8.,._..#.v.L........z.\.b<*?.j.!...<!

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32681), with CRLF line terminators
Category:	downloaded
Size (bytes):	217242
Entropy (8bit):	3.8595135714192796
Encrypted:	false
SSDEEP:	3072:7mWTl90STteLRFmnt81yi1oONt+jVh5Fp3f5rc7WGceLysIe3XQP8eVH2JMZJ973:JWUxC6hbhY1dL4
MD5:	5E6D4F6AE324C9E1E90FB0BC7DC5E812
SHA1:	284E6B07B12E2E6194C3C081997BAA4A57D03AF7
SHA-256:	C8CD5EE68E599B7D4427D0712378F26781A11B9DCE53720A60047F4F60EE3242
SHA-512:	1816E970576207DDF4AEA29646594C7D91D11AA9DD0DDE67CD6CC4EB9B81B2F5FC02F81F25683FE47E898325558DE87BE9579D21050DAFAA407B7F1ABC7553C5
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfjquery-3.5.1.js
Preview:	../..!. .j.Q.u.e.r.y. .v.3...5...1. .\|. .(.c.). .J.S. .F.o.u.n.d.a.t.i.o.n. .a.n.d. .o.t.h.e.r. .c.o.n.t.r.i.b.u.t.o.r.s. .\|. .j.q.u.e.r.y...o.r.g./.l.i.c.e.n.s.e. ../.....!.f.u.n.c.t.i.o.n.(.e.,.t.).{.".u.s.e. .s.t.r.i.c.t.".;.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e.&.&.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e...e.x.p.o.r.t.s.?.m.o.d.u.l.e...e.x.p.o.r.t.s.=.e...d.o.c.u.m.e.n.t.?.t.(.e.,.!.0.).:.f.u.n.c.t.i.o.n.(.e.).{.i.f.(.!.e...d.o.c.u.m.e.n.t.).t.h.r.o.w. .n.e.w. .E.r.r.o.r.(.".j.Q.u.e.r.y. .r.e.q.u.i.r.e.s. .a. .w.i.n.d.o.w. .w.i.t.h. .a. .d.o.c.u.m.e.n.t.".).;.r.e.t.u.r.n. .t.(.e.).}.:.t.(.e.).}.(.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .w.i.n.d.o.w.?.w.i.n.d.o.w.:.t.h.i.s.,.f.u.n.c.t.i.o.n.(.C.,.e.).{.".u.s.e. .s.t.r.i.c.t.".;.v.a.r. .t.=.[.].,.r.=.O.b.j.e.c.t...g.e.t.P.r.o.t.o.t.y.p.e.O.f.,.s.=.t...s.l.i.c.e.,.g.=.t...f.l.a.t.?.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...f.l.a.t...c.a.l.l.(.e.).}.:.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...c.o.n.c.a.t...a.p.p.l.y.(.[.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	111789
Entropy (8bit):	4.901702120768548
Encrypted:	false
SSDEEP:	1536:zQOHl+WFYhiYgT1zq3EDmJFiSxj61PDKhn+Kg+zsjXrZknCYQQqZKfvB1YMKI:zQOFLY9icj0KF+Kg+zs7C5bvnYk
MD5:	CEC26DBEF7B47E5FA6F370B0A0BB2147
SHA1:	4E9973D7B00940671C95E66BEB6DAD8DA135316D
SHA-256:	257EA472927C42475E063424040113BA32FABABA2590042C3ED2C6F2FA06EA09
SHA-512:	3343432E3915F4DB1416BBA22ACB66F3A042519E2E51793143833697FDF12A16CD8A8343E86C7B10339CAC89E178A1EC92E65C1796774D9CD59EEEC0B2050BC6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/slider.js
Preview:	// vid team slider.js..define("observableComponent", ["require", "exports", "htmlExtensions"], function(n, t, i) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0.. });.. var r = function() {.. function n(t, i) {.. i === void 0 && (i = null);.. this.element = t;.. this.ignoreNextDOMChange = !1;.. this.observing = !1;.. n.shouldInitializeAsClass(t, i) && this.setObserver().. }.. return n.prototype.detach = function() {.. this.unObserve();.. this.teardown().. }.. ,.. n.prototype.isObserving = function() {.. return this.observing.. }.. ,.. n.prototype.unObserve = function() {.. this.observing = !1;.. this.modernObserver && this.modernObserver.disconnect();.. i.removeEvent(this.element, i.eventTypes.DOMNodeInserted, this.obsoleteNodeInsertedEventHander);..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	930
Entropy (8bit):	7.753628280164637
Encrypted:	false
SSDEEP:	24:0qhIlp61EXC1aFWXWQpXxwecacgLnjqc+7DYiNNl:3Op61Uj8XWkhwwDXyl
MD5:	B665C2E078EBD73711D1A0CF23B8A717
SHA1:	5E13E0371C4C35A06B23C072AE097A151E8454C5
SHA-256:	CC9F6227E9E58BB888A8EBD2F6671D9E9333CD3FFD1E42A74D726732CCC1CE46
SHA-512:	518A8E1268BB3C10F5196FF0AB0EAFA9B8736459F519CF04883C5E7D572551165B3339C546E54C295AF78E16288AFB7E4041CFE975E242D8E0C9BEAB47DF48E0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........@.@.>9..C.!.......Z@.x....?.t'.'.../.......g.V.G...)4%.........R.....p.o.M.....~.?................'.....D....D9^I=q.lT9..sV....]]...".....7......)....A......\|P........,9.q....1"R.MG..&.Q5...fx5..+Rwey.aY.&..i..p.1...J..1>}[.%+.B?.P.....KHWl..7..;...(#..A....V...z(...o]Z.$....._.?.^.Z.4.B..Y.+.....j...~.D..Ip.Yg..t^.Q..^S.F...g.k3Hm(F...w..D....."B.....@Q...5.........zUy...;C..6M..:........R.>7k `.....{.?.S%/.?...../d....O.\|l.t...g}..P4.:.1.Ad..4..&q.nW.N....!......f.........X..o.=.2.U..kx.?Y....:....N Z.&i...........x.ME.)..kH'o..an9L,.[.........BHC..8a.....f..........].70...+_e.y.RI.....#p8.....h!....a..".Y.U..9[....[...e....7x....Y.jg...v.~....$....)....[t.Z....8v{.4...*...N...k.>6...+.P..S).q..u....-z.........I..a.........Y..L\|..8W...s.E.BR..th.`.Z1.;1..R,_.V..a>..C...Do./O...yn......H._.p".............Ei.f.h.8...F.b:..-<A_...zs......6.K..P...,(..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	downloaded
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65298)
Category:	downloaded
Size (bytes):	372649
Entropy (8bit):	5.092497147126706
Encrypted:	false
SSDEEP:	6144:hkz1b3b99G9gR7N1xf6ilX1b3b99G9gR7N1xf6iPyD1b3b99G9gR7N1xf6ilfsPQ:6YfW1fvh8
MD5:	C34FA6955BE9497F516B1D185D1450D8
SHA1:	C2B45C4572E6B0398E3703CCFC1746D7D6CFC582
SHA-256:	F6895205E6AFDDAB2E56E315FB74F0016F5ECD70F163FA978BB88504E8512398
SHA-512:	56D1919BD4B6E00B43B9DBFE63E8570EDEAB2A4718EFD6A92ED3198835252CB5D817ABE625B166245C49AAD95FD99389680E2AA1BC083053980E6A8A6FFCDC5E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css
Preview:	@charset "UTF-8";/!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2?v=2.15.1) format("woff2"),url(resources/fonts/MWFFluentIcons.woff?v=2.15.1) format("woff"),url(resources/fonts/MWFFluentIcons.ttf?v=2.15.1) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-micros

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (387), with no line terminators
Category:	dropped
Size (bytes):	387
Entropy (8bit):	5.0802884301148685
Encrypted:	false
SSDEEP:	12:c7IYNgvlLL9EIHCdEIHYEEIHLcJk7JcBAX2x8p:ctyh/E46IJkYE2ep
MD5:	1D54EF912663F344CFA7B55B016DD0C7
SHA1:	56324935CFF42275A7F485205AAE477546E2B38B
SHA-256:	77B19B52E3DA15B983971599A97A0030D4984B5C3148AE70E4770112A337CA65
SHA-512:	BEE3005D4B0C7587D1B6C95CC4C41B7F4DCC7F36A325C7DFEF57E41CE4C8FC3700DAE34C4DE0F2B165DDE17201C7FB5799754CADC74D713A03F60552A779AB67
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){$(".modal-component .modal").each(function(a,b){a=$(b).find(":header");b=$(b).find(".link-group \x3e a");0<b.length&&0<a.length&&(b.attr("data-bi-EhN",a.text()),b.attr("data-bi-hN",a.text()));b.attr("data-bi-compNm","Modal")})});$(document).ready(function(){$(".modal-trigger").on("keypress",function(a){a=a.charCode\|\|a.keyCode;32!==a&&13!==a\|\|this.click()})});

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	downloaded
Size (bytes):	3642
Entropy (8bit):	5.399452635270733
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5Hvsy15vm9sgsTO7wdNTB:yjXPT2Sb15vkl7wdN9
MD5:	BE3F2A9F6A41FC40556EFE260FC861A5
SHA1:	EF6D673802EDF44C01EEA9DD86DF4E5ACD21757E
SHA-256:	C94F3B6AA377CFC8D9416F38AEDF1E49C43DE0BDC6726858720610827DF2DD3E
SHA-512:	05ED779F490E9F21153E0C6838198A9E5337C4361644E62A5C99BCA3978001840CAC2E947874983FABF15573FDDA548567176F77B0393A827E27E47ECB01792A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHbe3f2a9f6a41fc40556efe260fc861a5.js
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	3.895461844238321
Encrypted:	false
SSDEEP:	3:mSnuZoS8/ZoS8/ZYn:mSnuZoS8/ZoS8/ZYn
MD5:	F8BC0E6A30BE8B892F5675CA35A469CB
SHA1:	1A558296BBA9C20D67FC33098A6AF19511AABD82
SHA-256:	EE7C434C1742F4120B16809CD9FB8C626BEB67A1AA9121D9073F89390BFBBDC1
SHA-512:	DB0081530CEF5CC7F9B7EEAEAEB7AD98883A64F7ED5400508D4163FF07F3EAE4C9C3B4BF60F29ED32609002133399EA36C4C6579A23EB4732CF8070D9D3C5E79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglPXFRxhTdsqhIFDZFhlU4SBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4466
Entropy (8bit):	4.815200143314862
Encrypted:	false
SSDEEP:	96:G9DjiPeS9cXL1V04LCJ3t8Q/sWJMqRhSgVNtHYRq9JNK2zRri4KNpcrgcG8K5VNU:G9DIHeXLToJuQsWJhXSgVNtHWq9JNK2T
MD5:	608ED94DBBE53914E7284F9D0BF56B46
SHA1:	32EC37ED5ABE203EBEB3E552CDECAF2EA9014196
SHA-256:	188B658300213BE394E47A973D27D0FE5FD8F9A150EDEC30091C1F6C409C71D1
SHA-512:	A129758D575C5B3CD577955FCE4EC13454DB2439D0C20586002500C20F07C7FA8CC9D79739C84CA23D92F1F33B7E3E52F705214CAA3A38410FF44A2814163D5F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/localization/en-us.json
Preview:	{.. "agegate_day": "Day",.. "agegate_enterdate": "Enter your date of birth",.. "agegate_fail": "You may not access this content.",.. "agegate_month": "Month",.. "agegate_submit": "Submit",.. "agegate_year": "Year",.. "audio_tracks": "Audio tracks",.. "agegate_dateorder": "m/d/yyyy",.. "browserunsupported": "We\u0027re sorry, but your browser does not support this video.",.. "browserunsupported_download": "Please download a copy of this video to view on your device:",.. "cc_appearance": "Appearance",.. "cc_color_black": "Black",.. "cc_color_blue": "Blue",.. "cc_color_cyan": "Cyan",.. "cc_color_green": "Green",.. "cc_color_grey": "Grey",.. "cc_color_magenta": "Magenta",.. "cc_color_red": "Red",.. "cc_color_white": "White",.. "cc_color_yellow": "Yellow",.. "cc_customize": "Customize",.. "cc_font_name_casual": "Casual",.. "cc_font_name_cursive": "Cursive",.. "cc_font_name_monospacedsansserif": "Monospaced Sans Serif",.. "cc_font_name_monospacedserif": "Monospaced S

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=Zs7RjAAAAGivrgN-
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21576), with no line terminators
Category:	downloaded
Size (bytes):	21576
Entropy (8bit):	4.929076929051309
Encrypted:	false
SSDEEP:	192:sdjjSUaTGkgh1BvhEun6tuckPpE+ziELZZEyGRjZMIKJ56oDwPcQN9CAzy/qNcV9:q5fP/5ozV8gKV
MD5:	F4D99A125067F09F843655E4672531F6
SHA1:	19A9238CFB95AE010A9DE135F1AA510481551647
SHA-256:	CDC136270FECE97E9A6C18DB7D71BB603ADA22F67BB5EE52B2B43673E0BF3E9C
SHA-512:	894A15A6AE634F14A0D907ADBBEB4F10107550B125CF88E7E8E20173FD0B62EA17A0B6B50C43F0287C400A2E7925ECBE8285DCA02E169A9FBE49E5B331BEF362
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":138781714,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Right Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":18},{"engagementSubType":22},{"engagementSubType":17},{"engagementSubType":27},{"engagementSubType":24},{"engagementSubType":26},{"engagementSubType":19}],"isDeleted":false},{"id":138781814,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Offsite","deleted":false,"zoneType":2,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":28},{"engagementSubType":29},{"engagementSubType":30}],"isDeleted":false},{"id":138781914,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":21},{"engagementSubType":14},{"engagementSubType":16},{"engagementSubType":23},{"engagementSubType":15},{"engagementSubType":20},{"engag

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4735), with no line terminators
Category:	downloaded
Size (bytes):	4735
Entropy (8bit):	5.4443702548512265
Encrypted:	false
SSDEEP:	96:lthgjRaqz0uCNpAuLLea0FYUtVlaqTv3GtttCr5uQBrgB:FAt0XvLiTGkVxv3PuQBgB
MD5:	6B0B079E2EC46D6DE6E5C9F0C5E4A170
SHA1:	01CE70FDEDBF3AADE66D43F16B9083FD6C03AB44
SHA-256:	62E429990335816DDBDBD1B5C5F00DCC9DE8A044BB4A06916CEE73BCC39556C7
SHA-512:	526BECCA1A6B19706DC556349A02A183E83169BBA8490ED3E1E476BCFB5ECA924A50C6FB859E996ACA4147DA4025DAAC386F4BFEB9842AF627E0BA94DAB898F6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/library/svy/store/broker-config.js?1724830089426
Preview:	COMSCORE.SiteRecruit.Broker.config={sv:"scor",delay:0,addEventDelay:1e3,isWindowOpener:!0,cookie:{name:"msresearch",path:"/",domain:".microsoft.com",duration:90},tracker:{ssl:"https://www.microsoft.com/library/svy/store/SiteRecruit_Tracker.htm"},mobile:{match:"iphone\|ipad\|ipod\|android\|opera mini\|blackberry\|windows (phone\|ce)\|iemobile\|htc\|nokia\|bb10\|mobile safari\|mobile\|wpdesktop\|lumia\|playbook\|tablet\|silk\|reddit",largePhones:"phone\|sm-(n\|g)\|pixel.+xl\|ph-1\|oneplus\|lg-\|nexus 6\|lm-q",halt:!1},mapping:[,{m:"www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products",c:"inv_c_p203765973960-3616.js",f:.051,d:1,p:0},{m:"www.microsoft.com/en-us/store/b/copilotpro",c:"inv_c_p402042945452_3622.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/d/surface-pro-10-for-business/8v73d6qwrss1",c:"inv_c_p709169257397_3624.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/d/surface-laptop-6-for-business/8pz3fvs57qcv",c:"inv_c_p709169257397_3625.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/store

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (31781)
Category:	downloaded
Size (bytes):	353056
Entropy (8bit):	3.54628063061396
Encrypted:	false
SSDEEP:	6144:j2+eueO+ueO+eA5E0s0UU000082SaCCqS6iyKy2P32N8jBzE6xTPyj2jK5m68BaS:C3E8jpP88Ba8n888u
MD5:	B3798F354AF881F8C1E8B35A709AF24A
SHA1:	5F5FD96E90037BF99BB06172FDFEFDC4B9CB7601
SHA-256:	A3834415AF119205CA2080700B3F05C2F648D81CF47F6CB6AA9ABDBC3499B00B
SHA-512:	9CE111C3F4CB4D80B9AC60474C396B1A2CB0008974CCBCF1F3976DDD9EE2D3DB8F896A905B31BC06E418A041EB1C024988D003983BB7381378E947701E351643
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/slider.css
Preview:	..@.c.h.a.r.s.e.t. .".U.T.F.-.8.".;.../.*.!. .1...5.8...6.-.b.e.t.a. .\|. .C.o.p.y.r.i.g.h.t. .2.0.1.7. .M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n. .\|. .T.h.i.s. .s.o.f.t.w.a.r.e. .i.s. .b.a.s.e.d. .o.n. .o.r. .i.n.c.o.r.p.o.r.a.t.e.s. .m.a.t.e.r.i.a.l. .f.r.o.m. .t.h.e. .f.i.l.e.s. .l.i.s.t.e.d. .b.e.l.o.w. .(.c.o.l.l.e.c.t.i.v.e.l.y.,. .".T.h.i.r.d. .P.a.r.t.y. .C.o.d.e.".)... .M.i.c.r.o.s.o.f.t. .i.s. .n.o.t. .t.h.e. .o.r.i.g.i.n.a.l. .a.u.t.h.o.r. .o.f. .t.h.e. .T.h.i.r.d. .P.a.r.t.y. .C.o.d.e... .T.h.e. .o.r.i.g.i.n.a.l. .c.o.p.y.r.i.g.h.t. .n.o.t.i.c.e. .a.n.d. .t.h.e. .l.i.c.e.n.s.e. .u.n.d.e.r. .w.h.i.c.h. .M.i.c.r.o.s.o.f.t. .r.e.c.e.i.v.e.d. .T.h.i.r.d. .P.a.r.t.y. .C.o.d.e. .a.r.e. .s.e.t. .f.o.r.t.h. .b.e.l.o.w. .t.o.g.e.t.h.e.r. .w.i.t.h. .t.h.e. .f.u.l.l. .t.e.x.t. .o.f. .s.u.c.h. .l.i.c.e.n.s.e... .S.u.c.h. .n.o.t.i.c.e.s. .a.n.d. .l.i.c.e.n.s.e. .a.r.e. .p.r.o.v.i.d.e.d. .s.o.l.e.l.y. .f.o.r. .y.o.u.r. .i.n.f.o.r.m.a.t.i.o.n... .M.i.c.r.o.s.o.f.t.,. .n.o.t. .t.h.e. .t.h.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	914
Entropy (8bit):	7.778446129877769
Encrypted:	false
SSDEEP:	24:09if7X68pSEVy4/NMuckup0y6pDUUK2k2OqDRCW4YAqNTh4yXl:P68MEV9NvcLpUeN2k2gbYtay1
MD5:	82B7921FBF835E1916B10B2A47FC2DA3
SHA1:	FE03BB72D791551459474180FB1206405C010C72
SHA-256:	E65BA28CB5468016142382E888CACA3F4A0FEB9EE8BEE11E561E3F3D9A697CF0
SHA-512:	0E66EE6BF28BC71CE8EF68DABAF252E548C8F4E42670921E4C49B6C59444A05473A0F0D6A75321CE2A99D4449EEFB4856FDF2961E02D7CC00ECC5C8AC5960FDD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ~........K.K.>Q".D..!...8....g....6?......l@0....".o...g......p...@.._M.c..O._l{.R v..a..g[._D.HL.....8.7p..3....?.....+W.(.....j7..#.o..P.(G=...Q.?z..)..d...m.q.o.............y.:V.......]1....5n....z.C.%.......wu.S...).......'.....m....).....&ks.r'.....M.-..=.u...g.\..x.#..S...=iSy.......P.n.u.......n......5.]..U.'.6z.^Bf..7D.{.....'z'....q.P..(...W.....J.2..x..Xd..7...-n...:.......VK..rJ.fbPz..1ON.......4.6.c............y...?.....e.../...A.n.]h..9....<......;I.=>....7Fo...FX.sX...w...6';g<......!.Af.....y......\|..0..D.^..=.U.s.J..:Q.tF...Q4..m\|.N...kU.b.....O~..n04......q......&Wch!..'.....3..........JJ.3>......].p..W..?.$.%..n..$P...C.../.(....{iw....._.mz..p....Ue>i..8_.(.H.s.Ax...\....A+68......;...Zl..Z..9g.}ZR.O<..4.Ej../B>A.3..`u.J.Ei...J._8."...7..f.?S,..8x..g..:.....-jOT..0r..({...s.i.17p...... .Uw..)..._....:^.Dp~.Ou...k.5w.........

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	downloaded
Size (bytes):	99505
Entropy (8bit):	5.20600737523251
Encrypted:	false
SSDEEP:	1536:ixTfTfE8PWCgGDbn5lHij6D4/55p2/y+XlkpttBJjm:ixTfTfE8uCPIJkSm
MD5:	895E2A12062F1EE44D7D72D266904BDE
SHA1:	896B8B40961C524472FB84C4760160267A3B89A6
SHA-256:	D2AEA4BA12C00A853C03EB8EA9575338D1A21D15314B39B9A7AA039016E6FC93
SHA-512:	5673B54ECFF13BB7263EA98A554B8DEB04C5C2151B164F0A3A1411D9BB624C0395147D618C7C3381F263EAF5EECAA0E7EDC479DB9ABDC1A611110C2DC4610D2A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/experimentation.min.ACSHASH895e2a12062f1ee44d7d72d266904bde.js
Preview:	// *************************************.// config file for at.js lib.//************************************************************************.// SET TARGET PROPERTY HERE:.const at_property = window.cas.exp.target.propertyToken; // Workspace Name.// *************************************************************************.! function () {. window.tt_getCookie = function (t) {. var e = RegExp(t + "[^;]+").exec(document.cookie);. return decodeURIComponent(e ? e.toString().replace(/^[^=]+./, "") : ""). }. var t = tt_getCookie("MC1"),. e = tt_getCookie("MSFPC");. function o(t) {. return t.split("=")[1].slice(0, 32). }. var n = "";. if ("" != t) n = o(t);. else if ("" != e) n = o(e);. if (n.length > 0) var r = n;. if (n.length > 0 && at_property != "") {. window.targetPageParams = function () {. return {. "mbox3rdPartyId": r,. "at_property": at_property,. ...(win

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 960 x 540
Category:	dropped
Size (bytes):	89401
Entropy (8bit):	7.983830870854764
Encrypted:	false
SSDEEP:	1536:O0tlL9HAc5vZfgVMlebvdE3cuj5CZLJdu8tFgmkJVNfaghgZf6zGujvOdXCkKFCG:jfLR7XSdF7VtOmIVzXzn2dXysdKII0k
MD5:	B1F5B34FD4653ECC55A495B7A6A59B51
SHA1:	A3E0E79E99FE0614A67143206A4B91E6811AE61C
SHA-256:	2A38C4E7692EFECBF4B5F6EFD20DDBD3D77D2EDC91F8A76132431C6A068A6E41
SHA-512:	C67F0806499612281C4D03362CC459ACCC5254709FA351B8AFAA5F2C1509F723E465DEEE675ADF154B95A12F66A26C9B7B2D63C86BEF7B321D2C7E9CF41BE5C8
Malicious:	false
Reputation:	low
Preview:	GIF89a............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,............c..Hp.....L.p....J.Hq.../j..q.. ?..Ir..(O.L.r..0_.Is..8o...S.@.1...Jt..H.M.t..P.J.Ju..X.j..u..`...Kv..h.M.v..p..Kw..x....(......<Xp...#^..q..!3..8...+c..3..As..9...K.^..5..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4735), with no line terminators
Category:	dropped
Size (bytes):	4735
Entropy (8bit):	5.4443702548512265
Encrypted:	false
SSDEEP:	96:lthgjRaqz0uCNpAuLLea0FYUtVlaqTv3GtttCr5uQBrgB:FAt0XvLiTGkVxv3PuQBgB
MD5:	6B0B079E2EC46D6DE6E5C9F0C5E4A170
SHA1:	01CE70FDEDBF3AADE66D43F16B9083FD6C03AB44
SHA-256:	62E429990335816DDBDBD1B5C5F00DCC9DE8A044BB4A06916CEE73BCC39556C7
SHA-512:	526BECCA1A6B19706DC556349A02A183E83169BBA8490ED3E1E476BCFB5ECA924A50C6FB859E996ACA4147DA4025DAAC386F4BFEB9842AF627E0BA94DAB898F6
Malicious:	false
Reputation:	low
Preview:	COMSCORE.SiteRecruit.Broker.config={sv:"scor",delay:0,addEventDelay:1e3,isWindowOpener:!0,cookie:{name:"msresearch",path:"/",domain:".microsoft.com",duration:90},tracker:{ssl:"https://www.microsoft.com/library/svy/store/SiteRecruit_Tracker.htm"},mobile:{match:"iphone\|ipad\|ipod\|android\|opera mini\|blackberry\|windows (phone\|ce)\|iemobile\|htc\|nokia\|bb10\|mobile safari\|mobile\|wpdesktop\|lumia\|playbook\|tablet\|silk\|reddit",largePhones:"phone\|sm-(n\|g)\|pixel.+xl\|ph-1\|oneplus\|lg-\|nexus 6\|lm-q",halt:!1},mapping:[,{m:"www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products",c:"inv_c_p203765973960-3616.js",f:.051,d:1,p:0},{m:"www.microsoft.com/en-us/store/b/copilotpro",c:"inv_c_p402042945452_3622.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/d/surface-pro-10-for-business/8v73d6qwrss1",c:"inv_c_p709169257397_3624.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/d/surface-laptop-6-for-business/8pz3fvs57qcv",c:"inv_c_p709169257397_3625.js",f:.5,d:1,p:0},{m:"www.microsoft.com/en-us/store

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
Category:	downloaded
Size (bytes):	34052
Entropy (8bit):	7.994131533337155
Encrypted:	true
SSDEEP:	768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe
MD5:	36397A3BC139C6E9F81D383F060F080A
SHA1:	3F4F86C10920D4ED345F4858B6CDE9F93E1AEB81
SHA-256:	4F7F4AFE26E71FA9CA1DAC4A43B557A554A46F53251D849F07ED08A04829D74B
SHA-512:	7FFF4870E9142E6E1921F8DD78E3B049547EC1D540EFE573C2938F8B855DB61BA908FA9D3C8DA1BB2AAE6D95217A586D256B9EA2BD8A8F706B1DB75BC21F2CB9
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2
Preview:	wOF2.............................................`....."..\.....D..D.6.$........ .. . ..@.S.5x.q..m.5.7Q..2......6..R....v.j.......".c..@.Z.B..G.Y.\S.AtT.iTJt.....l.>..=+z...1.pP..[.+.S..`...c.1.u1...)......`............9.8.......+..4...;..[W.v..p0..qg..=..+...1...\|R..qM..\|/...%..!C.....G:.;7...Z..^P...o..q.B'....a....M.l3k....=&.'.'..8.....K..k........}.?w.i[..q.,...,.0,.....?...o.y..@..U5.:T..E..B..%......YU.....Z..4T..5....m/..,.$.w..`O.s.c.{...;a;..T...9../.......,....BDf.S).ola._e../..z%.:....r..d;.t.....7....jI!-.....{..l.T..H%8.p.*=!.z8.7.k..L...WUW...0.0.....7Q.0.J..Q.\|~P..'Q... m.a..(..p..q...B.:.....e.B...g..<O(..z..o.G...U.x.Tw...^t.._.t..}....q....*K....".UP...Te...<.....f.....{.....I..V...p.+...-<..%.+..?M.A!.ob.9p...7..B. ..R....."4..%M.6..'...!.S.........?.`w.....l@..R.AJ&@..h/H{.(n..I.8..6.4 ..i{..5.I....l...rJ.....N{.^..6..^.V.&..)?Bc.&.u.......fd.H..X.5Fq(c....6...w(O..K...F.......ohh.....Gk...l.2q.t.h..........U9%.n....%...

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=f65ecb70-094d-0b11-7c9d-7da1bcadfaa7
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27332), with no line terminators
Category:	dropped
Size (bytes):	27332
Entropy (8bit):	5.48233759733871
Encrypted:	false
SSDEEP:	384:sQ43HT5jFkfHlHOF1cCVVbO8IkFzjBCK2be7R1G1E2Jnkef3:sQKU6OCb68IkFRCKSV
MD5:	4502CFFD9A049B7D23CF17CC2DE9B80D
SHA1:	2150B19E2378B68F766A958A1408E599C556BE44
SHA-256:	2823FBFA7B9256867E21AF1ECBFBB98583C8EF0E0B495F6F01D862EF58E3D93D
SHA-512:	28CE499A0787323277957763ADE1B7F5341E547CF82ECE2E4B7CD4F35B250B48F87596CF2E580D7400FE5FB35D73493D932781E851E254753A61EF123EB2EA32
Malicious:	false
Reputation:	low
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.13";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var c;a=a\|\|e();if("string"==typeof a)for(var d=0;d<Ha.length;d++)if(Ha[d].env===a&&(b.tagletsPrecomputed&&Ha[d].tagletsPrecomputed\|\|!b.tagletsPrecomputed&&!Ha[d].tagletsPrecomputed)){c=Ha[d].tagDomain;break}return c}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.h

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	dropped
Size (bytes):	980
Entropy (8bit):	5.221020544248936
Encrypted:	false
SSDEEP:	24:ckGytSvuT/y67L/nV9jViHwukcglwYVTYVu:catwuby67pLRuxmwCTCu
MD5:	EC8AED9DF755A7B27E52317DCF532DF8
SHA1:	60F03B5BF43D1682D1CDB7DAF5A5A37FCD29D4E8
SHA-256:	C152DD3ED8493299EA2712FFC15A0043F417FEDCF4159B2C993A006501D82AC4
SHA-512:	16890D243CE2236AA2CD01C3C85D7B0AA1DB3DC8BF8B9CFE97AD18889F4030A0B6511C9F82C62F2BDA5F1029AFF4E12A9E35B0E182FC3B2B8B677618A589F5CF
Malicious:	false
Reputation:	low
Preview:	'use strict';$(document).ready(function(){var a=window.matchMedia("(prefers-color-scheme: dark)");a.addEventListener("change",function(k){{const d=document.querySelectorAll(".socialfollow .socialfollow-li img");if(d)for(var e=0;e<d.length;e++){var b=d[e].getAttribute("src"),g=d[e].getAttribute("data-src");b&&(k.matches?(-1<b.indexOf("\x26fmt\x3dpng-alpha")&&(b=b.replace("\x26fmt\x3dpng-alpha",""),d[e].setAttribute("src",b)),-1<b.indexOf("?fmt\x3dpng-alpha")&&(b=b.replace("?fmt\x3dpng-alpha",""),d[e].setAttribute("src",.b))):g&&d[e].setAttribute("src",g))}}});if(a.matches&&(a=document.querySelectorAll(".socialfollow .socialfollow-li img")))for(var f=0;f<a.length;f++){var c=a[f].getAttribute("src"),h=a[f].getAttribute("data-src");c&&(-1<c.indexOf("\x26fmt\x3dpng-alpha")?(c=c.replace("\x26fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):-1<c.indexOf("?fmt\x3dpng-alpha")?(c=c.replace("?fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):h&&a[f].setAttribute("src",h))}});

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	dropped
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
Reputation:	low
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1140508
Entropy (8bit):	5.695121574391395
Encrypted:	false
SSDEEP:	12288:cJsxRIaFlA05vbVfIVhixlLgabqLj1DXyxoBUTDeD5jU29o7ogyfBDo/jVqPR9uv:fx1l75SW9C3zO/Ht7HmQBxD
MD5:	32E0F638811A157F86AFCC7383631136
SHA1:	850B615ED5656DDDC286B93164B6CC837179FE57
SHA-256:	C96903A387F97B19B3400BF476E1FA6CB93C9E377AD78DE4C25B98362A22CD98
SHA-512:	682F9208C3E28A066AEC7341F6540EC593B3ADFE402CB1FDD66A28EC3395FE45BE10B35E229FA528D18A3B735C5AC30FD541C2CC59851C601BC52AA1B14E31D9
Malicious:	false
Reputation:	low
Preview:	/* Azure Media Player v2.3.9 \| (c) 2016 Microsoft Corporation */..function ObjectIron(a){var b;for(b=[],i=0,len=a.length;i<len;i+=1)b.push(a[i].isRoot?"root":a[i].name);var c=function(a,b){var c;if(null!==a&&null!==b)for(c in a)a.hasOwnProperty(c)&&(b.hasOwnProperty(c)\|\|(b[c]=a[c]))},d=function(a,b,d){var e,f,g,h,i;if(null!==a&&0!==a.length)for(e=0,f=a.length;f>e;e+=1)g=a[e],b.hasOwnProperty(g.name)&&(d.hasOwnProperty(g.name)?g.merge&&(h=b[g.name],i=d[g.name],"object"==typeof h&&"object"==typeof i?c(h,i):d[g.name]=null!=g.mergeFunction?g.mergeFunction(h,i):h+i):d[g.name]=b[g.name])},e=function(a,b){var c,f,g,h,i,j,k,l=a;if(null!==l.children&&0!==l.children.length)for(c=0,f=l.children.length;f>c;c+=1)if(j=l.children[c],b.hasOwnProperty(j.name))if(j.isArray)for(i=b[j.name+"_asArray"],g=0,h=i.length;h>g;g+=1)k=i[g],d(l.properties,b,k),e(j,k);else k=b[j.name],d(l.properties,b,k),e(j,k)},f=function(c){var d,g,h,i,j,k,l;if(null===c)return c;if("object"!=typeof c)return c;for(d=0,g=b.length;g

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31516
Category:	downloaded
Size (bytes):	9077
Entropy (8bit):	7.975537408589154
Encrypted:	false
SSDEEP:	192:JkJUqRyomFIPHR7Ot2kgknP1JtmV2wsibF4HNzDRkyz:auqR4IPHR78iItpw6zDRjz
MD5:	D2BA765F9D6C67BA7509D5DA2286BBB7
SHA1:	F203757417D72E22BB7758260AC52E45175821A9
SHA-256:	75C1F0066A69EBD567208842251EEAB6504884E155407838D5D4DE3F58FE195C
SHA-512:	37F19927E72BE24D0A5FFBFB6B618628205BC816DC7A93BA2B1E07E766951180E90E94C9A0A3FE96A7B2F9B27E8CA9BF380332DF5EC900EDE9575E215A451899
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Preview:	...........}k[...g.<.?..w..8N.-]....]...M(...cl%qq.,..d...3..-.r..r>..)..h4..fF.h...p2...(.6...F{..{.....(qMC...N...vJ....?............YZE...}.]n.'I.(cE.J...E....^.-..U.2v"o..f...D.....~..]M..<wH._.:...-..M.8.._....[.M....+..f......7..yM.t...}2........oxb..uF\|b..+.K{...v...6u$.>..N..Z.mh..z.2.#...>..x\.'.z.a.}eln......+ck.x.a...m.U.x..........lt.m...._..h....u...e.(.`... de.Fu.{f8.g.....k..a2..~./......B..$u...7...`....Ys~.:....3.Y..=.f..........?7,..............~....../7.`...5.x.+.N......4.Ym..v\.+n.FH"}.~.[.$.Y5.Q8........JDM/.... I.\..L...N..+....bwj....S...t~th_.?..O.w...........\7......rt~z8.....\........E.k.^L/.......M.lQ...].B!/;..=<.V.vzt8?H..}....NN.'...}.[.N/O..b..E\|qx....v..~..Hj.u4.9<(...^..(.F.SZ..d....9._.._.T...O...........u..\|..x.i~.L./G...G.....;=...<.ut.{..1.K8/..0...L7#..2.D.h..*...;wG..nw..t~0Uq...wA.Wj..6..c.4..(LB'........".L.@..G..0 h<4g.E...B....V...eW......t.v..{..?<L.`..u.f]...M..7..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	7.195140427846098
Encrypted:	false
SSDEEP:	24:+cKYj6LfHzSnrEEPge7ZqK5sWPKkEmK/H8Bfgk9Qsx1nEK8R:+cKYjwP+nrb74UPKkPmYBxWhR
MD5:	65DAD8DC084E6ECB8700E238E7843D1F
SHA1:	8B3AF5FA5F46F58709673CFCB1230E34921B6DEA
SHA-256:	DEBA878CF001402A01789BD7656E5FCF9CC06685FF6B12C2A68F7A0A320368AA
SHA-512:	EA9631A589BCB7C95C4600A77C30D5D241EF9A625622B31906A92CA87105E35E41EAAAA944B2B740D9A48E754B99C924DE7A2360F4D496955498DCCC40A1EE2F
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-OneNote-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......J`...B2.......1@..........\..u.....t...e..2....=@(.....i.....\|/.A.C.........J...u..T.+..>...:....F..Q.0.!..[.j.....}..x.p.AT8:.0.;.w.o.x....G.,j-.f3......`=V.p.\.oW....H.H{.[ .ru.T.E.....#(\|vA9.E.A...d...qy..l.zyR.9....'......Ql.._6c ^.&...T=....s...9........rWs....\.S. UJ.G.@.......'..z<...u.D8<W...@...IWS&..5.T.5'... .(...w2QB.3...z..D!#..q..W_.H...di.^.=...`.+.>P........R)PZ.n.w.......\...u.`..c...b.......c8.#.\|"...~.....g_\...oW}\|/.GWr(.x....?..s.e....".-.xX.Z........s.J..v;...8.&...[....`..3.........".&./i...E.vAoO...=-A../..&{&.s<!".p.z.<qB!.,......8.<}k..Jxm.n.!;.....J...c..Q.}..f..!......N.:..N.$...+>.!..!.m./"..r...pM;g......Q.H...!..qL#[Q]......Tq3R.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.min.ACSHASH30368a72d017e4133bfd3b5d073d06ff.js
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	566945
Entropy (8bit):	5.427445847196822
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6OTa9/2y16gnu1:XQY22kuQ4/a/2y16gnu1
MD5:	0848B540E7CEFA19B6B90711E600470E
SHA1:	15A6D705E861BDBD6E4620F3982C4CDD6581BCD5
SHA-256:	5E8CB94E51F938396C62AAB378E9CCEB8D94C008730084188AAC207E8151697E
SHA-512:	6A33F5B167EBDB7ED2C21D1061603D61577A366B833155400A687CBD83E108910A4A58E29B36CAE96B51828E4D0D7C4BD714B4BF2C8C6834225839A5287288B5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2662), with CRLF line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.6810208786111085
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4WTCsTUzFrZKyjjQLoIbi6c:H9W3iuV96wDrHBZ4WT1TUrJsvB6n/
MD5:	F8C9A16D43C59DB451BEBB40C96E594C
SHA1:	C5F7986028B7B91B6039E67EF36D971401CF650F
SHA-256:	B8DC48B7CFA901C116E25A9B19C8DC1EA0980D53E7C96F8BDFEF15071BFC8686
SHA-512:	D2DB5B706EF32C614A9F89BA14AEDA5C71D3A14CCDEDC04950516AAC59AAED0F68799BD06A3253B181903F0856F10D6BB1B8F23A71141801465F9E4FEFC7BE71
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=f3979bbb-36cb-4f3d-9d0e-72e8914c85df&id=7abfd6b5-77da-470d-85f1-555f65baaf67&w=8DCC732F608335D&tkt=H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLsC1YDbhJlGo2gEEUqiXJF5WgpOA8A39Rs8%252b2fDhJnQJ3cOWKFZfXR8ZKeBGjmkShQXFaak0GLAKMpJHzKFLUwtwTmTaMzKu8l3bS9a68eXYraF7tsYKLzSU%252blaSuIzwOLm%252bIokq%252b93pF1A9shweIPWC%252ft%252bsz8nh4kjyE5IkT3w6GzNYC8YgzlAC5bmU6n4v0uibCFUsADCobp4ABxkpZzZR3qIAvuHS90tYN19sD8uN&CustomerId=02C58649-E822-405B-B6C3-17A7509D2FCC
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignIn.Main.min.js?v=LKkJs9puSk_H_Tyd1JDE20VDXJlRd6pdfRVIUu_WniU
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.074626749222841
Encrypted:	false
SSDEEP:	48:cyDvwreaxxzZ77DWqstabe02UqXqsuVAez:TDsD5s826sS
MD5:	2CAB542E06C6FF4B5B3EBD343CCEB9E7
SHA1:	86D7B941DC09149AAF0A5AD96CAA619F75926CFF
SHA-256:	32A2E610B5C62DB33C2ADDD9DF8D9F8AE9FE3B8FA59C0FB22E99C255E6503C46
SHA-512:	076946DBD2CD36715E8A9A5D827D28D492B52140BEB8AAA04BDAE32711043D8826EAE424BF7498195AFA8FBAB1B0038D13133BDE4CE9A9396502514959169467
Malicious:	false
Reputation:	low
Preview:	'use strict';$(document).ready(function(){function c(){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.contentSquare){var a=document.createElement("script");a.type="text/javascript";a.setAttribute("src",window.partnerScripts.contentSquare.entryFile);a.setAttribute("id","content-square");(document.body\|\|document.getElementByTagName("body")[0]).appendChild(a)}}function e(){if(null!=WcpConsent&&"undefined"!=typeof WcpConsent.siteConsent&&null!=WcpConsent.siteConsent){var a=.WcpConsent.siteConsent.getConsent();if(null!=a&&a.Advertising&&a.Analytics&&a.SocialMedia&&GPC_DataSharingOptIn){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.meta){a="/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-partnerscripts."+window.partnerScripts.meta.partnerJsHash+".min.js";var b=document.body\|\|document.getElementByTagName("body")[0];if(0<a.indexOf("ACSHASH")){var d=document.createElement("script");d.type

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	4.778342118734739
Encrypted:	false
SSDEEP:	12:o3hM8BZGEFNshi9Sm24qxfREGm24qHF5wlQm24qBqRU4Vgs6mClzR:y5B7ZvqXEdvql5qvqBq3V2Dl
MD5:	96DDEA96F43B844AD97950D109C49366
SHA1:	5E03C87FFA2D7280EDFB161374B5627BFFB7C84F
SHA-256:	D941285D752E28E91E025F65C8734EE3C79D5D514C6649EE22C07C9AA6FD1308
SHA-512:	2797C9744A7EF774067E96D223225ACF59330CD1F649092A70232AA88CF9468A0E6924CC00CCA5A92487479E43636245FE99E5BADA301E9575C284C83F45B083
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/alert/v1/alert/clientlibs/site.min.ACSHASH96ddea96f43b844ad97950d109c49366.css
Preview:	.cta-font-normal{font-weight:normal !important}..alert-full-bleed[class*="bg-"] .alert-content a{color:#fff;word-break:break-word}..alert.bg-alt-blue .alert-content a,.alert.bg-light-blue .alert-content a{word-break:break-word;color:#000}.@media(min-width:768px){.alert-display-more{display:none}..alert-description-truncated{display:none}..btn.btn-collapse.alert-btn{display:none}.}.@media(max-width:768px){.alert-content.btn-flex-direction{display:flex;flex-direction:row-reverse}..btn.btn-collapse.alert-btn{transform:rotate(180deg);display:block;margin-bottom:auto}..btn.btn-collapse.alert-btn.expanded{transform:rotate(0)}..alert-description-full{display:none}..alert-description-full.active{display:block}..text-truncated{display:none}..text-truncated.active{display:block}.}

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1220
Entropy (8bit):	7.349207499335515
Encrypted:	false
SSDEEP:	24:+cKYj6LrzBaVuabygz7vELUSIxJ+BCdGfHnhX0vX1C5Dw7x+F0KM5BG:+cKYjwrcAabygzLELwj+BCdaGvAFwde
MD5:	A0710D72BB650FBC3F55BE06FC3F0E35
SHA1:	27293908C2AB11194E3EE0C51349EBF15C18DFEE
SHA-256:	21FD8AFEC8D132F72E81569E1817D55DEFEA21CCE081FA5B0ACFB6E0BB03E439
SHA-512:	F965BD7C3470EDBE44D74C00B1419D6F6B7C781A0F7A851C15D6EE54BFC40F997FE33C02F16431EA7904D6420D8F3C3CD9F0EB9223166D04862C506186216804
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Outlook-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......J`...B2.......1@.........5....=.C.A...%..w.......:]...{.2...`..5......s....i.u.3..\...Jtl".h....H...6......;...a .@......^..r;s.U....4.&[..;]?...{......g....]o...2.K ..(.....KHc...w~g.\1.......2[.P.....i....#c...`h.7.H.!...A.l.]..Om....U..?..aQhuy.Z'..}9.&.b}.i..y.u.i..._....R.7....(e.#......Q0X.-.j.0..vUy..,G.....D.....i...m.l.....a[.....tI..jP\$j.0.H.N..p.J.)"...4(.W......n4 ..I..e.O.#.......l.}...c. ...?.....=.....F....a...0.........H..m...F.K.(9....4a. ..LhO.......=6....X~.s..D.#t..].k...:.....M...[.<.,....)..n..pn.N..... ....t.....R(.K..Z.^......\|.Q...."0r7.PLk..=...@.;......P...<.p.b..g.......$..vN..g~./1.k<o..p.K....O.d...U....6.7L+f..yA.c-B..k[.Y......n.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	440
Entropy (8bit):	4.871214925208103
Encrypted:	false
SSDEEP:	6:NqDRMBTolKXxqsgP0KOFMLs9cVNKmV+o/Kr2yqzfMGlP04xNqzGJM9PQQKR2lHoN:gDR4QKhDLUN+MKYMUPjxTC9PIW+
MD5:	1913B28373B6A15EBDF30FEECB53BE9B
SHA1:	3052D7BC1FF3670A286B0DC53AE9C1019814F067
SHA-256:	A6A059D3B6AF6E1C915EF1BE02FACAF63A559CB07E40263C0A0CC29685FE7BC8
SHA-512:	F5A931A3A2CF7E94DEC9322E78D32CB0A9CCDF3AB53EAA355A740BDC9BFA16FE8CB4711ADB268D8DBE4E7ADF1C8803C7974405CFFC36C713F3B9DFB8AE3DA6EF
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/accordion/v1/accordion/clientlibs/site.min.ACSHASH1913b28373b6a15ebdf30feecb53be9b.css
Preview:	.accordion ul{list-style-type:disc !important}..accordion .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}.@media(forced-colors:active){.accordion-component .btn-link:not(.inactive){border:0rem;text-decoration:none}..accordion-component .btn-link.inactive{border:0rem;border-bottom:.125rem solid #0067b8 !important}.}

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 960 x 540
Category:	downloaded
Size (bytes):	89401
Entropy (8bit):	7.983830870854764
Encrypted:	false
SSDEEP:	1536:O0tlL9HAc5vZfgVMlebvdE3cuj5CZLJdu8tFgmkJVNfaghgZf6zGujvOdXCkKFCG:jfLR7XSdF7VtOmIVzXzn2dXysdKII0k
MD5:	B1F5B34FD4653ECC55A495B7A6A59B51
SHA1:	A3E0E79E99FE0614A67143206A4B91E6811AE61C
SHA-256:	2A38C4E7692EFECBF4B5F6EFD20DDBD3D77D2EDC91F8A76132431C6A068A6E41
SHA-512:	C67F0806499612281C4D03362CC459ACCC5254709FA351B8AFAA5F2C1509F723E465DEEE675ADF154B95A12F66A26C9B7B2D63C86BEF7B321D2C7E9CF41BE5C8
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/4873755a-8b1e-497e-bc54-101d1e75d3e7.png
Preview:	GIF89a............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,............c..Hp.....L.p....J.Hq.../j..q.. ?..Ir..(O.L.r..0_.Is..8o...S.@.1...Jt..H.M.t..P.J.Ju..X.j..u..`...Kv..h.M.v..p..Kw..x....(......<Xp...#^..q..!3..8...+c..3..As..9...K.^..5..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65188)
Category:	dropped
Size (bytes):	1076664
Entropy (8bit):	5.680656723962722
Encrypted:	false
SSDEEP:	12288:FItZlNRkBr1mXD+66Vbk7+pHibXK+PldQvKL7:S+Br1mTDWzibXK+PldYKL7
MD5:	FFB6932D920EA51A69D8B25CC31D8BB5
SHA1:	C398875A78C36B625368CF43E9F4E0BA7FF38E7F
SHA-256:	7F4672B236E18575A35B891DA1781D2D4070F4F8273BDCF46DF70B196BC19CDD
SHA-512:	DAA0264BB6F8154DE69261E6A69AB49CE5A0AD77A292FDBEC6CB8CFE26920FE6F9070CB64598F9FF12F625BC35822E2F5A584839015898AB7C871D7B48C809DB
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e={115:(e,t)=>{function r(e){return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function n(e,t,n){e(null,{verifier:t,challenge:r(String.fromCharCode.apply(null,new Uint8Array(n)))})}t.Z=function(e,t){e\|\|(e=43);for(var i=window.msCrypto\|\|window.crypto,o=r(Array.prototype.map.call(i.getRandomValues(new Uint8Array(e)),(function(e){return String.fromCharCode(e)})).join("")).substring(0,e),a=new Uint8Array(o.length),c=0;c<o.length;c++)a[c]=o.charCodeAt(c);var u=i.subtle.digest("SHA-256",a);window.CryptoOperation?(u.onerror=t,u.oncomplete=function(e){n(t,o,e.target.result)}):u.then((function(e){n(t,o,e)})).catch(t)}}},t={};function r(n){var i=t[n];if(void 0!==i)return i.exports;var o=t[n]={exports:{}};return e[n](o,o.exports,r),o.exports}(()=>{const e=crypto;var t=function(e){return e instanceof CryptoKey};function n(e,t,r,n,i,o,a){try{var c=e[o](a),u=c.value}catch(e){return void r(e)}c.done?t(u):Promise.resolve(u).then(n,i)}const i=function(){var t

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	591216
Entropy (8bit):	4.457159748744365
Encrypted:	false
SSDEEP:	12288:k8/e1j6gGD1sXRxMh2muS4NwejoZXaOrbpKjxagFg1g/oG8o7XdYCohcw9Tp+vKE:hDoYg
MD5:	831D94570D3BFCB11E9007DBC3E71464
SHA1:	38F81B54E32C68370C37C704F838A895A952B17D
SHA-256:	DF3D3F80AAE55064D2DF6F7EC5CB9C1F45F5BD75B4F81758E582FE271842FA47
SHA-512:	592FD31E6825F34AE158E68637E9369B9E62DE86CF82050961A96773591D7202C8D5DB9805A30C7FD7224E5D15EC5AFA9F6F4036F91E6C14E09E663DD9CD4D3B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfcomponentfactory.js
Preview:	// onerfcomponentFactory.js....define("componentFactory", [.. "require",.. "exports",.. "htmlExtensions",.. "utility",.. "stringExtensions",.. ], function (n, t, i, r, u) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0,.. });.. var f = (function () {.. function n() {}.. return (.. (n.create = function (t) {.. for (var i, r = 0, u = t; r < u.length; r++) {.. if (((i = u[r]), !i.c && !i.component)).. throw "factoryInput should has either component or c to tell the factory what component to create.Eg.ComponentFactory.create([{ c: Carousel] or ComponentFactory.create([component: Carousel]))";.. n.createComponent(i.component \|\| i.c, i);.. }.. }),.. (n.createComponent = function (t, r) {.. if (t) {.. var o = r && r.eventToBind ? r.eventToBind : "",.. f = r && r.selector ? r.selector : t.selector,.. s = r &&

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	dropped
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Reputation:	low
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30647), with no line terminators
Category:	downloaded
Size (bytes):	30647
Entropy (8bit):	5.389557554734225
Encrypted:	false
SSDEEP:	768:s4tHaTVLfVG+Ies8ZdCDVydmY/MP5ulx7dxrxTyO4D4/R6o5HMv:JtHaTVLfIiXCx2moHrxTyvDiR6oGv
MD5:	EEE640D58B09A4461472719DC7EB973F
SHA1:	EFC06EAC0DB27ED7A8E8D8078FB0568C7E558A58
SHA-256:	5C525027B646BF78EBA749696366D20E8AA5C3603043339EB5AD828175C7238E
SHA-512:	01F42E29528588AC4A12E73E48D30FDB842CC54667F029C813400F7670CFCAF7996728983EC609B28DB0B547A7D3F7E17F19AA7B691E2F74AF8F93E9529EE4F4
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.60.0.0-release_5218/jsv2/UISuite.js?_v=3.60.0.0-release_5218
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lpAnimate={_V:"1.2",name:"lpAnimate",elements:{},queue:{},conf:{interval:13,duration:500,easing:"swing"},init:function(a){if(a)for(var b=0;b<a.length;b++)this.conf[a[b].id]=a[b].value},_supported:{opacity:function(){var a=document.createElement("div");a.style.cssText="opacity:.1";var b=/^0.1/.test(a.style.opacity);return b}()},_regExp:{alphaFilter:new RegExp("alpha\$[^)]\$","i"),opacityInAlphaFilter:new RegExp("opacity=([^)])")},_cssPropHooks:{opacity:{get:function(a){if(this._supported.opacity)return parseFloat(a.style.opacity);var b=this._regExp.opacityInAlphaFilter.test(a.style.filter),c=b?.01parseFloat(RegExp.$1):null;return c},set:function(a,b){if(this._supported.opacity)a.style.opacity=b;else{var c=a.style.filter\|\|"",d="alpha(opacity="+100b+")",e=this._regExp.alphaFilter.test(c),f=e?c.replace(this._regExp.alphaFilter,d):c+" "+d;a.style.filter=f}}}},_cssNumber:{zIndex:!0,fontWeight:!0,opacity:!0,zoom

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (452), with no line terminators
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.024945445284132
Encrypted:	false
SSDEEP:	12:cbIzEIHP6EIHPKO9zN1JT9bEQsNa29ophufdYN:cbIVvQvjh1JBbEBNa29Xli
MD5:	7A250BCCDECEA73EF18C154F9D245CB4
SHA1:	66D39A7FA6188F61258B70B39BB40D71FEFA359D
SHA-256:	3EECFAA9C0EAA7FB61CC255AE97AB887A24B016B1BA0EA14860A8E7C47CFD701
SHA-512:	1B1B7916B07C2B27DCC04CA3B0302E9E3C69E2C1B2BCCA3DCED3360A6219AD27C2965E23889F956480A3F2CEE32A095B30AFC99B53594EBE0913EA38E4F8BC93
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/accordion/v1/accordion/clientlibs/site.min.ACSHASH7a250bccdecea73ef18c154f9d245cb4.js
Preview:	'use strict';$(function(){function b(a){(a=$(a))&&(a.hasClass("collapsed")?a.attr("data-bi-bhvr",7):a.attr("data-bi-bhvr",8))}$(".accordion li .accordion-header .btn-collapse").each(function(){b(this)});$(".accordion-header .btn-collapse").on("click",function(){b(this)});document.querySelectorAll(".accordion sup").forEach(function(a){0==a.children.length&&a.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})});

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2860
Entropy (8bit):	7.678555820497896
Encrypted:	false
SSDEEP:	48:+pYjGyYapIHL3+zjm6A+j+U/NmzJg2vecRdhH9epuT+e1P+BLkRGmSI4b:+ajPE3+GCszCgPeuq64qtSLb
MD5:	966A7EEF1A56D28688B50DEF242D3F8B
SHA1:	A5715DC3E4D18468C1E9520B0CBE49FB943F71EF
SHA-256:	7A46A2E31605CED812C80D69077CCDB3EEDDDF98521162923F8B222D4CA048E0
SHA-512:	02C5AC882DB6B194682941A5F21B36233F510F7ECAEE29110D764A8626EFA8527B1DA1963A9D038FEFA96270E13BC05826D54499148EDCFDE94BA57C65514FDE
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-OneDrive-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................U.................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................kmdat.......niP2......T..yF....L.....}U..tw]....47]....W:...R..]/..~W...].L..+...t.p..s..exKx.#.6"Pk.8..ub.)..?.^.@Gt...+.Y.N...7B...VM/...S....{=.......(...p...c..j.X.vibyl^.WH.7\|.#...~.pNM.S.......Oz.3..\|h/V.t{OC.....M..../4..c.....v&...f........./%..(.......F.....D...(.;]..(.HP.3+.)]..`M.....v"2....t._...)...BD.io.......E.-....o.[.c`.D$,.........=A..'f.\...l...PF...@.A..dt=..Z.f;/...L...[.%..0..70.n.k...w.G.2..R.X.....b.j.K.&!."..Q.tM..8W+2B...A* ....k=....~>e.(....H.n...:.>..K.em>...,..v...h..c..w.q.*.L...

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6493
Entropy (8bit):	4.551839647285828
Encrypted:	false
SSDEEP:	192:i5FC2Hc5G5S5QIcYcapz1CIw4AG/ayMJRLQDBRLa3R5WI:i5FZHcAwO6ZP/MRUHeR5WI
MD5:	72BF18B12BFCDCFA8B757E8413CFA263
SHA1:	5D69BCC252CE7D0F985699D36827F84EABE1DB4C
SHA-256:	119C6149B19ECEA8E4EF2C5AB47B20C5FDEAF1546F1C0A4349A345A74CCFEFE8
SHA-512:	9502AD91D78E6EB3C212944A66E2A18A38D26A1E510E278C6F2384E380D182345656F9AA66CF368F5B0AF8C3BB5FBAD7CB8E58EFDF8D66B9055C9C249E36393E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/alert/v1/alert/clientlibs/site-countdown.min.ACSHASH72bf18b12bfcdcfa8b757e8413cfa263.js
Preview:	$(document).ready(function ().{. 'use strict';.. var translatedCountDownTimerVariables = $(".countdownbanner").data("count-down-timer-variables");.. function getTimeRemaining(endtime) {.. // Set the date we're counting down to. var countDownDate = new Date(endtime).getTime();.. // Get the current client time. var clientDate = new Date().getTime();.. // Find the milliseconds between current server Date and the count down date. var distanceMS = countDownDate - clientDate;.. // Time calculations for days, hours, minutes and seconds. var days = Math.floor(distanceMS / (1000 * 60 * 60 * 24));. var hours = Math.floor((distanceMS % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));. var minutes = Math.floor((distanceMS % (1000 * 60 * 60)) / (1000 * 60));. var seconds = Math.floor((distanceMS % (1000 * 60)) / 1000);.. return {. 'total': distanceMS,. 'days': days,. 'hours': hou

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	5.790313764793093
Encrypted:	false
SSDEEP:	384:Ap7zYdCuhywhJiHui2mheS22hZ4JmIBMtbkaprj/42+MXgai:C7zOowCd2mheSlkSdrjP+Mwai
MD5:	D3B052243F835D67AF736C26A359533D
SHA1:	8D6F8CC779FE29A3C5AA41B1EEE41BCCA4DD84A7
SHA-256:	5214C3AC8AEF0E2CBFF68890171B67D42C710C87CDF50C4515B480E3DB570945
SHA-512:	5610327630E8C73595576A79CEEB1CEF014162BCE4237BB300F85C79514C155A2A99E46865BEB0D6E879D3465BB1677F7ED89D00AF7420D4779BA5458A194828
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/load-script.js
Preview:	function loadScript(url, async, defer, crossorigin, type) {.. var script = document.createElement('script');.. script.src = url;.. if (async) {.. script.async = true;.. }.. if (defer) {.. script.defer = true;.. }.. if (crossorigin) {.. script.crossOrigin = 'anonymous';.. }.. if (type === 'head') {.. document.head.appendChild(script);.. } else {.. document.body.appendChild(script);.. }..}..// SIG // Begin signature block..// SIG // MIIr4AYJKoZIhvcNAQcCoIIr0TCCK80CAQExDzANBglg..// SIG // hkgBZQMEAgEFADB3BgorBgEEAYI3AgEEoGkwZzAyBgor..// SIG // BgEEAYI3AgEeMCQCAQEEEBDgyQbOONQRoqMAEEvTUJAC..// SIG // AQACAQACAQACAQACAQAwMTANBglghkgBZQMEAgEFAAQg..// SIG // wICQeL6lBTAvIyDbUlJWb/8FTBOcmun3GMJyJMBUXT6g..// SIG // ghFuMIIIfjCCB2agAwIBAgITNgAAAd9zgZcWvjL9DQAC..// SIG // AAAB3zANBgkqhkiG9w0BAQsFADBBMRMwEQYKCZImiZPy..// SIG // LGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRUw..// SIG // EwYDVQQDEwxBTUUgQ1MgQ0EgMDEwHhcNMjQwMTIwMDEz..//

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14627), with CRLF line terminators
Category:	dropped
Size (bytes):	34372
Entropy (8bit):	5.931056415719769
Encrypted:	false
SSDEEP:	768:waxLTFDg8vvUEKdSKxjI8BxLHBja6/xuVFh56vJ7zOowCdn6GBnHmlg+DBIHAJxo:3xLKkUEKzjI8BNHBjamxuVMRB6GIl/50
MD5:	0ED23ADC4DA873A157378C425B236059
SHA1:	0297A21C5D5CA7FADD403E3B6D5CE913AA1B9E3D
SHA-256:	67986184568950851D87AA755B3D6FEC658A0F1D55133AC11F81E3E7F142EF1F
SHA-512:	7A68980D121A977C5CCDC9D855E097CC6AFCB7142D4DB7D761329228CE9983C2783C3A6294934085EBE8A632E568E62CC705BE9D60B67FE443C12A0EB2F0B221
Malicious:	false
Reputation:	low
Preview:	function _preLoadErrorHandler() { if (arguments) { var n = { Page: window.location.href, Message: arguments[0] \|\| "", Script: arguments[1] \|\| "inline", LineNumber: arguments[2] \|\| 0, UserAgent: window.navigator ? window.navigator.userAgent : "" }; _preLoadErrorsBuffer.push(n) } } var _preLoadErrorsBuffer = []; (function (n) { var t = window.onerror; window.onerror = function () { t && t.apply(this, arguments); n.apply(this, arguments) } })(_preLoadErrorHandler);../! lazysizes - v2.0.0 Copyright (c) 2015 Alexander Farkas.. Released under MIT license, http://github.com/aFarkas/lazysizes../..(function (n, t) { var i = t(n, n.document); n.lazySizes = i; typeof module == "object" && module.exports && (module.exports = i) })(window, function (n, t) { "use strict"; if (t.getElementsByClassName) { var i, s = t.documentElement, f = n.Date, ft = n.HTMLPictureElement, e = "addEventListener", r = "getAttribute", o = n[e], u = n.setTimeout, et = n.requestAnimationFrame \|\| u, c = n.requestIdleC

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	dropped
Size (bytes):	610
Entropy (8bit):	4.917938721766698
Encrypted:	false
SSDEEP:	12:cYdIRGdIg8dlHEGI2/d4EhAdJd3F6lZF6xN24TN2QEbWNb93e:cmJJaFEwl473FWZFuNBTN55p3e
MD5:	79F5C41AD31C7E07DA446CBB8E641601
SHA1:	9173199CF25F7D8EF0533565E14CF34A83C91E40
SHA-256:	5B0FBD4BFA965B3A5429396C618D757A06D8E00D1C79380CC0CD89DAAA022933
SHA-512:	16AB36CAFF34CFDD1ADBFA9F8D85082C890D89896DC3C43897858FEF522756A423E98A0C3D9D48F22C361A0A984B5990D7CFD10B33BD4B152721FA90CF85192B
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!!(document.querySelector("#storeassistantroot")&&window.storeAssistantReactJsLib&&(window.enableStoreAssistantChat\|\|"wwwdev.microsoft.com"===window.location.host\|\|"wwwppe.microsoft.com"===window.location.host\|\|window.location.host.includes("adobedev.microsoft.com")\|\|window.location.host.includes("adobeppe.microsoft.com")));.a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/9e557d93-f803-44df-a274-1282d542cf63.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	7.814887250980293
Encrypted:	false
SSDEEP:	24:YwOCBa8E7tieBK24EaUHl7LreFmQieSthkhRYFXgjrO7PQaRzek:Ywn3E7ti2nzDtreF+LqMWrO7TRzF
MD5:	38B935C05A3C5F63308B3B7BD4696DF8
SHA1:	9BE7CCA671BCC1E1C07FBFB11FDCEA2E664D989E
SHA-256:	A1F368DFC04A32BBE760A93A4ED4EA6041411759B4B232EE9CB748C9A49B06B8
SHA-512:	D96FEDF47B2A902D96A399D83884C94E97129F576A2CC040A26524CA7DE01069410A20636AA04F86E7D6DD121A9CAB813AC01555BC3AB9422253A63764E45F32
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH5......m#G......#"...'.j..G...4.N...,x,........X.m+..q........\.x..".?...{...........3[...Y.+..w.)...q...'.....~R.@<....N6. ....\|......r>.5m.....Jsc..Y.4..2M..qX....bA.....I........y&.Bp...#..`...q......4...CF.4@..t..S..-CZ.sh......C.g.h[..}....ih....@g....j...<..<..j.../.?..`..O,._.......t...;.VP8 n........o.o.>Q".E.......8....j`.......+.W....C...[.._..@.r..=.<.=.=.?G}1...s=.....Z........h..?._.]F...\..~.P.<..#_...@G.&=..v...)&.%..J#.....\.>.y.%Gn%."X.3h.......z.M.qQ6..UQ.........~..d....bf{.....~A]...A....e........{....s.F..d}...{.[v?...i..y\e\|\|3..!..({zq...-.x. .Q.Z.E.2l.wm...)y...w.G.T..h....d8-{N..._Kg.....w........G.....A..;...3.}../..2~.[bH.-......,......._.PwnI...;....75...Q~Cg>.8.8...<.g}.%.4...y....8...dC...1..*.....l.......\2X....c..n[.L..&....d.e.{.U.f".ly...oj..(...oS.s.......-M+Ta.._vpH'7.U.L...8O......dQv...xi...=.V...;.m.]>....X.8%.7..{.R8n.s..K..0.&....e.......RW..I....U.-.....[L.k....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	5749
Entropy (8bit):	5.208767114975909
Encrypted:	false
SSDEEP:	96:XvC4aXbZGT/c/0/ZmlQLkneRm+gMl7Iel3VOObBpqzySnV5xcmpk5hShhMguAtCw:XvC4ybZGTUcRmlQLw8m+gMlsenNbBpqh
MD5:	B8DAF2580363AD852F6156ED4833ED56
SHA1:	91C0E3E27EB955CCDFB54E1A7B09C38F6585E70F
SHA-256:	C21A3B39CF9490AE504DAF27D1FD31521E8E2EF1FD650071BBDBCA579AECFD0E
SHA-512:	E222443B4F513E627FF4307D9E51C3C0C5FB56504B1781A07A1B709E845B840082D378FC881CBD5389E681DCEB5ECFF164566F7C0962FDEE08C01CBFFB443E50
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/chat/v1/chat/clientlibs/site-performance-enhancement.min.ACSHASHb8daf2580363ad852f6156ed4833ed56.js
Preview:	'use strict';if(document.querySelector("#LivePerson"))$(window).on("load",function(){function c(){b\|\|(b=document.getElementById("lpSS_89316509127"));h\|\|(h=b.getAttribute("data-domainUrl"));d\|\|(d=document.getElementById("lp-iframe-container"))}function y(){$("body").attr("data-islpinitialized","false");z().then(function(){var a=window.WcpConsent;a&&(a=a.siteConsent.isConsentRequired,$("body").attr("data-isConsentRequired",a))})}function z(){return new Promise(function(a,e){var l=0,t=setInterval(function(){100>.l?"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent?(clearInterval(t),a()):l++:(clearInterval(t),e())},50)})}function A(a){m()}function f(a){b.contentWindow.postMessage(a,h)}function u(){c();n\|\|(n="true"===b.getAttribute("data-isOfficeCommercial").toLowerCase()?"Office365":"Store",b.getAttribute("data-topicName")&&""!==b.getAttribute("data-topicName")&&(n=b.getAttribute("data-topicName")));f({action:"Topic",Topic:n})}f

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21576), with no line terminators
Category:	dropped
Size (bytes):	21576
Entropy (8bit):	4.929076929051309
Encrypted:	false
SSDEEP:	192:wdjjSUaTGkgh1BvhEun6tuckPpE+ziELZZEyGRjZMIKJ56oDwPcQN9CAzy/qNcV9:W5fP/5ozV8gKV
MD5:	F6847C40FDA91DC4B8F68F90A37D57FF
SHA1:	407D8CC739D8F7C242EC1BE0E9395576B7E9AFA4
SHA-256:	25D351084FF0CA10724ABCF431AD4787874FDB1FAE3F3DF99F1DA1BB4AB10453
SHA-512:	7F01ACA081D11C4F7587ABD9BB680ACB9827E31BAD6CEC7A014B7598C753013F79040572D5A245FDDA626BD40894F6FFA0F89C9E30C47A846E08192FE728EFC9
Malicious:	false
Reputation:	low
Preview:	lpZonesStaticCB([{"id":138781714,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Right Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":19},{"engagementSubType":22},{"engagementSubType":27},{"engagementSubType":26},{"engagementSubType":18},{"engagementSubType":17},{"engagementSubType":24}],"isDeleted":false},{"id":138781814,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Offsite","deleted":false,"zoneType":2,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":30},{"engagementSubType":28},{"engagementSubType":29}],"isDeleted":false},{"id":138781914,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":16},{"engagementSubType":20},{"engagementSubType":14},{"engagementSubType":25},{"engagementSubType":15},{"engagementSubType":21},{"engag

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	downloaded
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	834
Entropy (8bit):	7.70182419325142
Encrypted:	false
SSDEEP:	24:0zgLDWgZHXJ0ItjEcl6jCMAAj/e85sFcqq:oqDTntQm3AKDcJ
MD5:	3EBE2FB2CECBBF18F636347D5DA15D79
SHA1:	D9331DD930EFBD768F2639FEF3EECE7E9455B562
SHA-256:	353784F288BF22DB4286A6FA29AD5B98C6F618AB7AE6948C983AFDBA5909D91D
SHA-512:	8E182E3C11B1F88F7670E3931C81A0A4FDFA26A6A216F5C5277859C936D475F350FA7B7D64A363D860FC403667EA24841C3838B71A4C85C444BFDDD59ACC67B7
Malicious:	false
Reputation:	low
Preview:	RIFF:...WEBPVP8 .........K.K.>M..D"...:.8(...bL._7..U........1.......=@...@.@.y....].`...#.,.g.....V.D.YY..../VO.{..b.......3..C.)....X2.j..."v.....g...;l...,..{..%....p.k.^...p.1Z.GaV.&7 gh.....b..As.<..........F.x....<...Y.\|N.P.......(jd..E1..R...6....?.J....s.I..........N;I0:5...?.....e......C............E....p.M~y.f...T..=...y...q.(...m......zk.7.g.(.-.<..O._..o........._(....%y.......Z+/\=....m.e.cW.....l..o].r.0.........U^.~...;&(j=}..U.g~E..].-...Q..)F..)S@..b.}p..,.[.......V#....%..6t....f..nM....W.~8j.. .v......3.....s...p...V.....&.i.+U.R>......V.u.].R/o.;...J5>..C.Ybx\.7p>.1.m_&..@h:2t....%x..f...o.>..X7.Q....lF..A..0F._=.'.u".Bs,.9.B+i).....M......p...aC....[.......I.L...K..g.....jR.p'.wY.J&...z.s.jq..2R..r..,DF...!R..z.....z.j....A..n.P*.F..5.{.a0P.K.1,.....X.=^.....i...A3.0........

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65513), with no line terminators
Category:	downloaded
Size (bytes):	98822
Entropy (8bit):	5.2342056134005785
Encrypted:	false
SSDEEP:	768:2qnFfbkxlWF8DdYRZMcPEk5BFIsbyy9ojybRpWJIYpQ58WLJY8wE2usUrGBux+de:k3WTZ0oQZ2LvEV5jNVxy95v
MD5:	A48B8751668B1A8DF0FEDD153BCFCFD0
SHA1:	4287AA16CDDB523184C3EC1717DFCA50B82411C1
SHA-256:	209FD1BB4FA4561AB0233B3BC843F166AE761C77AADF751667C424A52C15ECE4
SHA-512:	CDFFA2F88C78BF7E574BC6FE3ADB6CDA84AC6924DA6B12ABE501F7BCC68D30FD0AE26A477657C0A666535FA82B203CEF314E79DBEF007B030682219A2AAA0244
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/article.css?v=IJ_Ru0-kVhqwIzs7yEPxZq52HHeq33UWZ8QkpSwV7OQ
Preview:	.html[dir=rtl] .supHomeAndLandingPageSearchButton{right:auto;left:0}html[dir=rtl] .supHomeAndLandingPageSearchBox{padding:0 18px 0 50px}.supHomeAndLandingPageSearchBoxForm{margin:auto;position:relative;max-width:748px}.supHomeAndLandingPageSearchBoxForm .supSuggestionList{margin:0;padding:0;list-style:none}.supHomeAndLandingPageSearchBoxForm .supAutoSuggestContainer{width:100%}.supHomeAndLandingPageSearchBoxForm .supSuggestionItem{text-indent:0;padding-left:18px}.supHomeAndLandingPageSearchBoxContainer{position:relative}.supHomeAndLandingPageSearchBox{width:100%;height:51px;font-size:1rem;padding:0 50px 0 18px;border:1px solid #a9a9a9;outline:0;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif}.supHomeAndLandingPageSearchBox::-webkit-input-placeholder,.supHomeAndLandingPageSearchBox:-ms-input-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder{color:#505050

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	111789
Entropy (8bit):	4.901702120768548
Encrypted:	false
SSDEEP:	1536:zQOHl+WFYhiYgT1zq3EDmJFiSxj61PDKhn+Kg+zsjXrZknCYQQqZKfvB1YMKI:zQOFLY9icj0KF+Kg+zs7C5bvnYk
MD5:	CEC26DBEF7B47E5FA6F370B0A0BB2147
SHA1:	4E9973D7B00940671C95E66BEB6DAD8DA135316D
SHA-256:	257EA472927C42475E063424040113BA32FABABA2590042C3ED2C6F2FA06EA09
SHA-512:	3343432E3915F4DB1416BBA22ACB66F3A042519E2E51793143833697FDF12A16CD8A8343E86C7B10339CAC89E178A1EC92E65C1796774D9CD59EEEC0B2050BC6
Malicious:	false
Reputation:	low
Preview:	// vid team slider.js..define("observableComponent", ["require", "exports", "htmlExtensions"], function(n, t, i) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0.. });.. var r = function() {.. function n(t, i) {.. i === void 0 && (i = null);.. this.element = t;.. this.ignoreNextDOMChange = !1;.. this.observing = !1;.. n.shouldInitializeAsClass(t, i) && this.setObserver().. }.. return n.prototype.detach = function() {.. this.unObserve();.. this.teardown().. }.. ,.. n.prototype.isObserving = function() {.. return this.observing.. }.. ,.. n.prototype.unObserve = function() {.. this.observing = !1;.. this.modernObserver && this.modernObserver.disconnect();.. i.removeEvent(this.element, i.eventTypes.DOMNodeInserted, this.obsoleteNodeInsertedEventHander);..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	5.237366916956353
Encrypted:	false
SSDEEP:	24:IlxCSV6Pfo4ydsethmnUitaKKklq93+TEDzD:IlQ3sdbtKUitaKHCsEDzD
MD5:	6FC8AFFCA0D3B2C5BDC78E27C9425BCE
SHA1:	1348892B3663F4496C35732DDC4D853452F48054
SHA-256:	531C0795866BF6D1BD0E44A4239CFFB3F0FAC07CC911BEA226ADF84E9C3DDAA7
SHA-512:	B2CD1CFD5711BDF37C435EF0E6764C28A233184CE6BA3AE097441FE2A020B6E172E6DB335F4266DDC98788E86C0CF2145E5B09A125FFA4C166AFCA99DCF2004E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH6fc8affca0d3b2c5bdc78e27c9425bce.js
Preview:	'use strict';(()=>{function c(b){var a=e[b];if(void 0!==a)return a.exports;a=e[b]={exports:{}};return f[b](a,a.exports,c),a.exports}var f={6993:()=>{$(function(){$(".area-heading p a").each(function(b,a){b=$(a).closest("div.row").find("h1,h2,h3,h4,h5,h6");a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Area Heading";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body";b=b.first();b.text()&&""!==b.text()&&(a.dataset.biHn=b.text().trim(),a.dataset.biEhn=b.text().trim())});.document.querySelectorAll(".areaheading sup").forEach(function(b){0==b.children.length&&b.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})})}},e={};c.n=b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return c.d(a,{a}),a};c.d=(b,a)=>{for(var d in a)c.o(a,d)&&!c.o(b,d)&&Object.defineProperty(b,d,{enumerable:!0,get:a[d]})};c.o=(b,a)=>Object.prototype.hasOwnProperty.call(b,a);c(6993)})();

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32600, version 1.0
Category:	downloaded
Size (bytes):	32600
Entropy (8bit):	7.992324478082099
Encrypted:	true
SSDEEP:	768:DUDXjrIMcH1YcS3IOrOm4VZcd1T5JQ62Fd:IXXjREcnNa6O
MD5:	8EDA29C1ACD384ABB917790DCD92A049
SHA1:	A77A4763CB132C02AD9D2EAE4652F470B66374C8
SHA-256:	E8ED064E3AD6789015C7C3031D57E1A412C80BE1B42D72D06B2631D80F3481BF
SHA-512:	CA8E12B8FA45E5315075CAC8B02A8CAD956341C2D047F126462A5B11E4F20118353ED66971C3901D40A6D4C1F782C1818D12B2E7E5DA30A08C66A75AF25A53DA
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/resources/fonts/MWFFluentIcons.woff2?v=2.15.1
Preview:	wOF2.......X......2...~.........................?FFTM..$.`..<........x.....6.$..h. ..X..t[..Q.<.......B.....H.C.".....&....?'A..&o.S..n...IE..U.RY@,..5.5zB....K.....rU.n.!.f.8...p.q>....;-_."......... ...PO.9.\|....o../.d...0...."0n.N.Kf.E:mvu.SH..R..ECT.U_!(.\.v..0.%.....6.4....Tv.9...T..H(.....<k]"p."...CG.f..B...9?%+.......r.:\z.)...t...[.Z.N._D..g.......^....2Xg...z1......ek8.L6W`.....F.j.U.......0......n..P...t...W..;.0 ..C.$.R.v..mY.0.!.&.PZB.IH!!!@..F...B..B(..u......R..V.uT...,......z.wz^a.s........N{..EZ..(...Jw.'...."..2.(.f."...=.....R....D....".v..].^.5...M......k..j.J.y.I....5..9...R..a.U..S......mR..c.o.....L-S.<....X..d\$.DR...fw.n... .:..%x............y'...\|..rfAw.{.7...K..})..3.f.... S.~(...?U...H....b,:.....\|`..3 ..".Q..+.I&....AK.H...O.b../.\.......n.....#.....-"..A......00p.<$..!_....VG.....ds...BB4w.)C.t..F....#...x\|...\..Xu.T....N...?b....%.QQp.p..D..~....:.[.wQ..P.....{..........o_M...h\|%E.'t9M..w4._.Z..x..7. .t

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc_webkit_chrome/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.2186345351769665
Encrypted:	false
SSDEEP:	48:eO9EDRt44af4Pq9DB2X0bripiiiv9tzgTLB46OqvebaJYiyqjRqQDrWL:NEDP4Xfiq9Ekbripiii1hgTLDGbaJfP2
MD5:	92BA1CB9DA3DD68605F38095FC34BA98
SHA1:	03A31035B1F2601447E9D8C3ECBB62155F66868F
SHA-256:	16FB8ADD8FA6F36427821A7E6D013288A718D69077340CF398AF551D69F65D0E
SHA-512:	2ABD99A77639812E16F94F058EC836D99DE4320959C4A3C00D6E4E133230D297858BF8265379044507E61D173973ECAB1EE40014A798A3AF07A335A3B008CF78
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/content-card/v1/content-card/clientlibs/site.min.ACSHASH92ba1cb9da3dd68605f38095fc34ba98.js
Preview:	'use strict';(()=>{var f={n:b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return f.d(a,{a}),a},d:(b,a)=>{for(var c in a)f.o(a,c)&&!f.o(b,c)&&Object.defineProperty(b,c,{enumerable:!0,get:a[c]})},o:(b,a)=>Object.prototype.hasOwnProperty.call(b,a)},e=f.n(jQuery);e()(function(){var b;!function(a,c,h){var k=3<arguments.length&&void 0!==arguments[3]?arguments[3]:".aem-Grid";c.forEach(function(g){var m=new MutationObserver(function(n){n.forEach(function(d){d=e()(d.addedNodes).find(".f-play-trigger");if(0<.d.length){if(h){var l=h(d.closest(k)).text().trim();d.attr("data-bi-hN",l);d.attr("data-bi-ehN",l)}d.attr("data-bi-cN","Video Launch");d.attr("data-bi-ecN","Video Launch");d.attr("data-bi-bhvr","240");d.attr("data-bi-cT","Video");d.attr("data-bi-pA","Body");d.attr("data-bi-compNm",a)}});m.disconnect()});m.observe(g,{childList:!0,subtree:!0})})}("Content Card",document.querySelectorAll(".content-card .modal"),function(a){return e()("button[data-target\x3d'#".concat(a.attr("id"),"']")).closest

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34954
Entropy (8bit):	5.839886474774234
Encrypted:	false
SSDEEP:	768:YDoPc4JEp0zFt57zOowCdwQeQMv16+0kH/at7O9:1SIt5BunL
MD5:	2EA4A47DD31400F09D1478C420575516
SHA1:	17DF2F7B0BCD843714AED65936833D05D671E559
SHA-256:	01DFF1D188C76E5A68772C75F184D8C926D7AF9A6395558C858AC0E5922D15F9
SHA-512:	63276CCEC95C1396A583DC26142E74F8FF0E7E9C59009E960B802C00EAC0751A92E458002A1D400D25580A9EDFE7C5A82A9411A8901378A0D3623F7803893D20
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/page-bi-tags.js
Preview:	//<![CDATA[.._pageBITags = {.. "pageTags": {.. "uri": window.location.href,.. "mkt": "en-us",.. "referrerUri": document.referrer \|\| '',.. "browserGroup": "uplevel.web.pc.webkit.chrome",.. "enabledFeatures": "cartimagebgcolor:1,sc_helpv2:1,sc_uuid:1,muidfallback:1,sc_promocodecheckout:1,cartnocurrencycodecl:1,crossSellModule:1,noeligibilitycheck:1,sc_pidlnetworkerror:1,sc_autorenewalconsentnarratorfix:1,sc_allowupiforbuynow:1,sc_asyncpurchasefailure:1,sc_showvalidpis:1,RelevanceOverride:1,sc_dimealipaystylingfix:1,coreui_videomodule_useflexsize:1,removedeliverystringforamc:1,newvortexendpoint:1,sc_fincastleui:1,usepdpdcm:1,sc_purchasedblockedby:1,sc_cobrandingidurlparam:1,sc_preparecheckoutperf:1,sc_disablebuynowpmgrouping-storewindowsinapp:1,sc_setbehaviordefaultvalue:1,blockineligibleproduct:1,displayappliedfilter:1,sc_checkoutplaceordermoraybuttons:1,sc_buynowpmgrouping:1,sc_paymentoptionnotfound:1,disablealipayadd:1,pdpproductcompare:1,sc_imagel

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	27286
Entropy (8bit):	5.5452829950673035
Encrypted:	false
SSDEEP:	768:v8seqxYspb9EplD7zOowCdwSpNnf277+OLkH/aVCO:v8seq+c9EpNB+254
MD5:	7E5A23C337DA0B50C4007470ACB0E043
SHA1:	F8DE9B13112FEF399A4A4289545845C1EB4DED06
SHA-256:	8EB73E30842C8D3B95665EE77782C1FE357DE1A65E280F36F011A4519799F033
SHA-512:	4B425A9554F145DCAFD9E8469419D18E4C30821E5267728117FAD8E78831F11242EE6927AAA628FCC673F3F7FEFB61C2014FF7A0D63C43BEF03D08084B3969ED
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/index.js
Preview:	document.addEventListener("DOMContentLoaded", function(event) ..{.. const vpElements = document.getElementsByClassName('c-video-player');.. const vpElement = vpElements && vpElements.length && vpElements.item(0);.... if (!vpElement) {.. console.log('no video player element found').. return;.. }.... function tryParse(value, defaultValue) {.. try {.. return JSON.parse(value);.. }.. catch (e) {.. return defaultValue;.. }.. }.... function removeFirstSlash(string) {.. if (!string \|\| string[0] !== '/') {.. return string;.. }.. return string.substring(1);.. }.... function getPlayerDataFromUrl() {.. const paths = removeFirstSlash(window.location.pathname).split('/');.. const videoId = paths[paths.length - 1];.... const metadata = {.. videoId: videoId.. }.. const options = {.. // default options here. below is where w

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	dropped
Size (bytes):	463056
Entropy (8bit):	3.766543143949848
Encrypted:	false
SSDEEP:	6144:5+1Nqx4AtUHdOjyiwgSF2V2dpNdrRlW0A:w10hQlj1A
MD5:	13CF5D39051259F3BF0080F626C9CEE3
SHA1:	D9EB0BFCF6A54B6373209AEE93E2195FADCEB6C0
SHA-256:	83878F67FDA42850FE5DFC18BE86576199DFFD6F7381AE3D760437D12ECCD927
SHA-512:	D20833C1A3B18C40FC6020A2D682F5B6DA22404830A782D810374A96B359A48CA54E36A150212C6E8E52CA3EF29FE6A587CFC666D0F71717831F2BC196695B51
Malicious:	false
Reputation:	low
Preview:	..d.e.f.i.n.e.(.".o.n.e.D.s.C.o.n.f.i.g.".,.[.".r.a.w.O.n.e.D.s.C.o.n.f.i.g.".].,.f.u.n.c.t.i.o.n.(.n.).{.r.e.t.u.r.n. .n.}.).;.r.e.q.u.i.r.e.(.[.".w.i.n.d.o.w.".,.".j.q.R.e.a.d.y.!.".,.".O.n.e.R.F._.O.n.e.D.s.J.s.l.l.".].,.f.u.n.c.t.i.o.n.(.n.,.t.).{.n...a.w.a...u.t.i.l.s.=.f.u.n.c.t.i.o.n.(.).{.f.u.n.c.t.i.o.n. .u.(.n.,.t.).{.v.a.r. .i.,.r.,.u.;.i.f.(.t.).t.r.y.{.r.e.t.u.r.n.(.i.=.J.S.O.N...s.t.r.i.n.g.i.f.y.(.t.).,.i.=.=.=.".{.}.".&.&.n.=.=.=.".t.i.m.i.n.g.".).?.f.(.).:.i.}.c.a.t.c.h.(.e.).{.r.e.t.u.r.n. .r.=.'.{.".e.r.r.o.r.".:. .".E.R.R.O.R.:. .c.o.u.l.d. .n.o.t. .s.t.r.i.n.g.i.f.y. .{.0.}. .{.1.}.".}.'.,.u.=.t.y.p.e.o.f. .t.=.=.".s.t.r.i.n.g.".?.t.:.".".,.r...r.e.p.l.a.c.e.(.".{.0.}.".,.n.)...r.e.p.l.a.c.e.(.".{.1.}.".,.u.).}.}.f.u.n.c.t.i.o.n. .f.(.).{.f.o.r.(.v.a.r. .f.,.i.=.[.".n.a.v.i.g.a.t.i.o.n.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.E.n.d.".,.".r.e.d.i.r.e.c.t.S.t.a.r.t.".,.".r.e.d.i.r.e.c.t.E.n.d.".,.".f.e.t.c.h.S.t.a.r.t.".,.".d.o.m.a.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	downloaded
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	dropped
Size (bytes):	5749
Entropy (8bit):	5.208767114975909
Encrypted:	false
SSDEEP:	96:XvC4aXbZGT/c/0/ZmlQLkneRm+gMl7Iel3VOObBpqzySnV5xcmpk5hShhMguAtCw:XvC4ybZGTUcRmlQLw8m+gMlsenNbBpqh
MD5:	B8DAF2580363AD852F6156ED4833ED56
SHA1:	91C0E3E27EB955CCDFB54E1A7B09C38F6585E70F
SHA-256:	C21A3B39CF9490AE504DAF27D1FD31521E8E2EF1FD650071BBDBCA579AECFD0E
SHA-512:	E222443B4F513E627FF4307D9E51C3C0C5FB56504B1781A07A1B709E845B840082D378FC881CBD5389E681DCEB5ECFF164566F7C0962FDEE08C01CBFFB443E50
Malicious:	false
Reputation:	low
Preview:	'use strict';if(document.querySelector("#LivePerson"))$(window).on("load",function(){function c(){b\|\|(b=document.getElementById("lpSS_89316509127"));h\|\|(h=b.getAttribute("data-domainUrl"));d\|\|(d=document.getElementById("lp-iframe-container"))}function y(){$("body").attr("data-islpinitialized","false");z().then(function(){var a=window.WcpConsent;a&&(a=a.siteConsent.isConsentRequired,$("body").attr("data-isConsentRequired",a))})}function z(){return new Promise(function(a,e){var l=0,t=setInterval(function(){100>.l?"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent?(clearInterval(t),a()):l++:(clearInterval(t),e())},50)})}function A(a){m()}function f(a){b.contentWindow.postMessage(a,h)}function u(){c();n\|\|(n="true"===b.getAttribute("data-isOfficeCommercial").toLowerCase()?"Office365":"Store",b.getAttribute("data-topicName")&&""!==b.getAttribute("data-topicName")&&(n=b.getAttribute("data-topicName")));f({action:"Topic",Topic:n})}f

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45864)
Category:	downloaded
Size (bytes):	141640
Entropy (8bit):	5.431806404570356
Encrypted:	false
SSDEEP:	1536:5FZ5EDQvTPRUbx3jog/MhA57JvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFoje:jE6rg/MS5vNn3vIPzDk80ZjT0qcePg7
MD5:	2C84DC46AE92EFFD601BC08F9A43F341
SHA1:	E9A6BA8F18D6EE282078000928A04B02295515DA
SHA-256:	F40DC11D5E09B51360622E17A3339A9CFADA343DA7030D275033513329326A91
SHA-512:	75A50FCBE93F39853A78A8F12777AA7A0DE23A5C825EFF891A60ADE0E0C7866BDB5544F130D49DE5FCF55B148F149EAA5F92E3A07666D5B41E6124D0F6A8B0C5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_LITcRq6S7_1gG8CPmkPzQQ2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	dropped
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	downloaded
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH5ee9e4e4e0a5fd39092e63d2d102b12b.js
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	5.091749196392858
Encrypted:	false
SSDEEP:	48:/C3MMaVlqSuqRYLINV/JUcxRwOycrCLcd4DfNVwt2V3ci0Aoq+vefQK/ov/0tvIc:66Vl7ROlSR4cuDDT4hsovefQK/M/0FIc
MD5:	6BC698C78C74D43AE7E47AE3BEED9603
SHA1:	238E57D61D40B60BF8204E9F0FFE49850D91FD2A
SHA-256:	9CBA79F04B5D3D5A076B6CBE883E5494CC08E495C60F262B00FFD25A184E89D6
SHA-512:	56C966CFB522134798C6EFA8E9751C6F936F9CF2B27E7A35688C55EA0CFF267E4B1D51A1983C452AF0C9C311C2293A24D2EC36358959FD4B14C57AC9D710EFB8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/chat/v1/chat/clientlibs/site-performance-enhancement.min.ACSHASH6bc698c78c74d43ae7e47ae3beed9603.css
Preview:	div[data-module-id]{min-height:1px}.div#lp-iframe-container,.lp-iframe-window{border-radius:5px}.div#lp-iframe-container{border:0;bottom:24px;box-shadow:0 5px 15px 0 rgba(0,0,0,.25);height:500px;min-width:300px;max-width:350px;padding:0;position:fixed;top:auto !important;z-index:1031}.html:not([dir=rtl]) div#lp-iframe-container{left:auto !important;right:24px}.html[dir=rtl] div#lp-iframe-container{right:auto !important;left:24px}..lp-live-person .c-flyout[aria-hidden="true"]{display:none}..lp-live-person .c-flyout[aria-hidden="false"]{display:block}..lp-live-person .c-flyout{font-size:15px;position:absolute;background:#fff;min-width:128px;max-width:296px;padding:12px;z-index:1001}..lp-live-person .x-hidden{display:none}..lp-live-person .lp-iframe-window{border:1px solid transparent;height:500px;width:350px}.footer{padding-bottom:25px}..lp-live-person .proactive-chat{top:40%;border:0;box-shadow:0 5px 15px 0 rgba(0,0,0,.25);max-width:359px;padding:0;width:360px;z-index:1001}.html:not([di

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	downloaded
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignInManager.Main.min.js?v=l3zJiCulB2MzPfZOmNJrw8YKFdbvpKLB_nBXmYXt34Q
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/a9241eee-a729-4513-97b4-5b87c381c21b.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	downloaded
Size (bytes):	1602
Entropy (8bit):	5.074626749222841
Encrypted:	false
SSDEEP:	48:cyDvwreaxxzZ77DWqstabe02UqXqsuVAez:TDsD5s826sS
MD5:	2CAB542E06C6FF4B5B3EBD343CCEB9E7
SHA1:	86D7B941DC09149AAF0A5AD96CAA619F75926CFF
SHA-256:	32A2E610B5C62DB33C2ADDD9DF8D9F8AE9FE3B8FA59C0FB22E99C255E6503C46
SHA-512:	076946DBD2CD36715E8A9A5D827D28D492B52140BEB8AAA04BDAE32711043D8826EAE424BF7498195AFA8FBAB1B0038D13133BDE4CE9A9396502514959169467
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-thirdparty.min.ACSHASH2cab542e06c6ff4b5b3ebd343cceb9e7.js
Preview:	'use strict';$(document).ready(function(){function c(){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.contentSquare){var a=document.createElement("script");a.type="text/javascript";a.setAttribute("src",window.partnerScripts.contentSquare.entryFile);a.setAttribute("id","content-square");(document.body\|\|document.getElementByTagName("body")[0]).appendChild(a)}}function e(){if(null!=WcpConsent&&"undefined"!=typeof WcpConsent.siteConsent&&null!=WcpConsent.siteConsent){var a=.WcpConsent.siteConsent.getConsent();if(null!=a&&a.Advertising&&a.Analytics&&a.SocialMedia&&GPC_DataSharingOptIn){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.meta){a="/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-partnerscripts."+window.partnerScripts.meta.partnerJsHash+".min.js";var b=document.body\|\|document.getElementByTagName("body")[0];if(0<a.indexOf("ACSHASH")){var d=document.createElement("script");d.type

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	dropped
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Reputation:	low
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	4.797025554625103
Encrypted:	false
SSDEEP:	3:1RXfHzRXBMgX/UfVgVISfKxW4qUu5UtgseBWBZ8VNZOjmeJRNnXE1V+o+:1RfzsgP0KOFMLs9cVNKmV+o+
MD5:	C033B611D87D511847501ADE7913431F
SHA1:	00F10AB304A7868DE517E53D013318CF86AFC442
SHA-256:	077F44F97FD72895582436A74517EB4C08A342E8C8EC1D2A672B0F92B32B1C46
SHA-512:	37B560264EE4109A65DDA234D3679A18FA8B7251EE772AD10E8AF98B00B1C8D0A5F7370496CD5BAC26843807D378CE3C6AFD4638C82DA36DAE06E78BDFBC68AD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/content-card/v1/content-card/clientlibs/site.min.ACSHASHc033b611d87d511847501ade7913431f.css
Preview:	.content-card .card-body .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6341), with CRLF line terminators
Category:	dropped
Size (bytes):	25483
Entropy (8bit):	5.997823934558386
Encrypted:	false
SSDEEP:	768:h8EQ+D8jD6h7zOowCdw2YB6c7+Z6EkH/anOik:KDeB183IU
MD5:	9B1985D7ED25B601EE5DA21590824CE7
SHA1:	2B71037C9426729436A01AACE103C3B9016E80E4
SHA-256:	9B2FC7A60784111F7AC916A60DAD4DB56C49D40C1FB80BBAED0FDA97206192ED
SHA-512:	BFB6CB6F33012F0ABBD1C23D55A07F5B9502A63D7492CCAA882B7EAC6BDA9FA06131ED386060494F802DFF5579E2458D5934D0BAF674D309214465BC0BABB4EB
Malicious:	false
Reputation:	low
Preview:	if (require(["jqReady!", "window", "document", "location", "deferExec!"], function () { window.location.host.indexOf("businessstore.microsoft.com") != -1 && msCommonShell && (msCommonShell.as = { callback: function () { } }) }), window.location.host.indexOf("businessstore.microsoft.com") != -1) { var p = document.createElement("nav"); x = document.getElementById("headerUniversalHeader"); x.insertBefore(p, x.firstChild); p.outerHTML = "<nav id=uhf-g-nav><\/nav>" } require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-content-placement section a, [data-ocms-id] .m-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouseup click mousedown", function (n) { n.stopImmediatePropagation(); n.preventDefault() }) }); require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-hyperlink-group-content-placement section a, [data-ocms-id] .m-hyperlink-group-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouse

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.638635865911561
Encrypted:	false
SSDEEP:	48:+pYjJYaLX5dse88RhfapFxBHxkIRsGRMJMC8FZkFQWEOGpazojzWdTdQH:+ajvHse7hQb/XMJtFQZpaz+zUw
MD5:	1FE70777CC319D0377B6962623FC57D6
SHA1:	8EB8034BDC5CD98C931AC910253BBEA2FF595C67
SHA-256:	196B5C9E52DC3F07FC16631E271777839388BE976146B355649A2E101B8AD6C6
SHA-512:	0E070DC7998CA563E745FD337A08CBB3BC1C152BB86B92DC24FAED16F65BEE5D214FBCA3DE0D992CDDA377A8923CFC2A5171383F872181A12F412A62EA76E7A3
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/OneNote-CC-H-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D............X.....................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................{mdat.......niP2......T..yF..d...!R..n6.T...s.Ls..{.X..K.Om..r.'..\....l.[.1.?.....3..... *%....h....k{....9.@.......PiMm...4...:.....^D..^.h.....0GOWs9...5...#..~.~.@.r..:....e......? c..D.?V.A..j.....r..6...?.5K.L._.T...Y....k.rz'..Q.....L..i........;...9....}......$T;...e....b.:D3/j...=...j.O...$w.JM.r-H(..."._.........0.31U..F..Fu.Q...[\ly................[8.'..n.3.;[PqY..1............nh...B2......Q.......kQ...80RrpD...8...I(".U.....j.v+....e_...l.....42]..3..G.'..c.......^.\,.[. :..a.c..4p.{.J..n]E........7..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14377), with CRLF line terminators
Category:	dropped
Size (bytes):	34954
Entropy (8bit):	5.839886474774234
Encrypted:	false
SSDEEP:	768:YDoPc4JEp0zFt57zOowCdwQeQMv16+0kH/at7O9:1SIt5BunL
MD5:	2EA4A47DD31400F09D1478C420575516
SHA1:	17DF2F7B0BCD843714AED65936833D05D671E559
SHA-256:	01DFF1D188C76E5A68772C75F184D8C926D7AF9A6395558C858AC0E5922D15F9
SHA-512:	63276CCEC95C1396A583DC26142E74F8FF0E7E9C59009E960B802C00EAC0751A92E458002A1D400D25580A9EDFE7C5A82A9411A8901378A0D3623F7803893D20
Malicious:	false
Reputation:	low
Preview:	//<![CDATA[.._pageBITags = {.. "pageTags": {.. "uri": window.location.href,.. "mkt": "en-us",.. "referrerUri": document.referrer \|\| '',.. "browserGroup": "uplevel.web.pc.webkit.chrome",.. "enabledFeatures": "cartimagebgcolor:1,sc_helpv2:1,sc_uuid:1,muidfallback:1,sc_promocodecheckout:1,cartnocurrencycodecl:1,crossSellModule:1,noeligibilitycheck:1,sc_pidlnetworkerror:1,sc_autorenewalconsentnarratorfix:1,sc_allowupiforbuynow:1,sc_asyncpurchasefailure:1,sc_showvalidpis:1,RelevanceOverride:1,sc_dimealipaystylingfix:1,coreui_videomodule_useflexsize:1,removedeliverystringforamc:1,newvortexendpoint:1,sc_fincastleui:1,usepdpdcm:1,sc_purchasedblockedby:1,sc_cobrandingidurlparam:1,sc_preparecheckoutperf:1,sc_disablebuynowpmgrouping-storewindowsinapp:1,sc_setbehaviordefaultvalue:1,blockineligibleproduct:1,displayappliedfilter:1,sc_checkoutplaceordermoraybuttons:1,sc_buynowpmgrouping:1,sc_paymentoptionnotfound:1,disablealipayadd:1,pdpproductcompare:1,sc_imagel

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	dropped
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Reputation:	low
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15396)
Category:	dropped
Size (bytes):	15441
Entropy (8bit):	5.11317096226596
Encrypted:	false
SSDEEP:	384:pcdYt6g5LhlvLlbbbxGd7GIpaexhvWHt/YVc8:pcy3vLlbZnIpaexhv6RKb
MD5:	F92C3CD31AC3F23E9256DBC2A7DB7454
SHA1:	FF753C1D040C5CB370C9C4770D1FD967C9D5FA6C
SHA-256:	80A45B8AB3685DD11B1193D214BE8695389409BE7D5C795561A4395E286FA06D
SHA-512:	CB2DD870F1C26F3B2B88EEB932096A512C3B2442E42190703DB0624EC6A950CA6DCD2195D3C5160A6C602C76EF933C45F4BA1781D5F7CA787EB43F9300B4F877
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	dropped
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9892), with no line terminators
Category:	dropped
Size (bytes):	9892
Entropy (8bit):	5.250146010774664
Encrypted:	false
SSDEEP:	192:sEy9khiW/NNP4lG+H/Q/9aX2loUgYRN3t7TMzpsvJ/7w6kjrgRN3t7TMzHELsjji:sEy9sKubfRN3t7TMzpsvJ/GrgRN3t7TD
MD5:	3DE36F700A9FD7B27D7CF9968D108388
SHA1:	9589A684E072A97298664E70A787008BCBD20B6E
SHA-256:	027DBE31BC494E14ACAB76A221273E52D1D8273F29A5A46055B36D74D6EB369B
SHA-512:	4BFB1365BF756D4A8239C28429DC09263C25DDA33B37623553102F6A767601C2037B9B237CFF755197C35305AAAAE5895FF9E4822B21F7D8A7592FAC6CC6F73D
Malicious:	false
Reputation:	low
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lightbox=function(){function a(){var a={css:j},b=lpTag.taglets.lpJsonToDom.convert({containers:a})[0];return b.className=b.className+" LPMlightbox",lpTag.taglets.utils.appendToPage(b),b.id}function b(){var a=lpTag.taglets.utils.geObjById(i);if("undefined"!=typeof a&&null!=a)try{a.parentNode.removeChild(a)}catch(b){a.style.display="none"}}function c(){var a=lpTag.taglets.utils.geObjById(i),b={name:"opacity",targetVal:.7};lpTag.taglets.lpAnimate.animate(a,b,{easing:"easeOutQuart",duration:1e3})}function d(a){var b=lpTag.taglets.utils.geObjById(i),c={name:"opacity",targetVal:0};lpTag.taglets.lpAnimate.animate(b,c,{easing:"easeOutQuart",duration:1e3,callback:a})}function e(){i=a(),c()}function f(){d(function(){b()})}var g="1.3",h="lightbox",i="",j={backgroundColor:"#000000",backgroundImage:"",opacity:0,filter:"alpha(opacity=0)",position:"fixed",top:0,left:0,bottom:0,right:0,zIndex:107108};return{_V:g,name:h,init:fu

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	downloaded
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1458)
Category:	downloaded
Size (bytes):	304045
Entropy (8bit):	4.784398006290098
Encrypted:	false
SSDEEP:	6144:Gn/EURJ/Wf+GBzdSPluZGlzdSfluypngvv3fpI4YjnR:GcLpngvvwR
MD5:	72D7180388042D6AB3D1F0A570395BB6
SHA1:	C6D98A2FAD3FF4D845B4E3981C4C1DE68E031BF8
SHA-256:	E867E672F9C71AF31D4C7BD0B1FE9F72941332EFBD2710D03900E329199E47F5
SHA-512:	50E6D2945E0ADD2805A865A90DC60D7837F1E77C52AA81893FE9F58BE8C77E2E3C30839594203613ECAD17B96DF7AE47392D4008F0C1FD184219827209179D7D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3
Preview:	<!DOCTYPE HTML>..<html lang="en-US" dir="ltr">.<head>. . .. ..... . . . . . . . .. . Start of ADDITIONAL DEBUG INFO cv.html .. CVToken: CASMicrosoftCV1a74d484.0. End of ADDITIONAL DEBUG INFO -->.... <link rel="dns-prefetch" href="https://cdn-dynmedia-1.microsoft.com"/>.<link rel="preconnect" href="https://cdn-dynmedia-1.microsoft.com"/>.<link rel="dns-prefetch" href="https://web.vortex.data.microsoft.com"/>.<link rel="preconnect" href="https://web.vortex.data.microsoft.com"/>.<link rel="dns-prefetch" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/>.<link rel="preconnect" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/>.<link rel="dns-prefetch" href="https://c.s-microsoft.com"/>.<link rel="preconnect" href="https://c.s-microsoft.com"/>.<link rel="dns-prefetch" href="https://analytics.tiktok.com"/>.<link rel="preconnect" href=

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2230), with no line terminators
Category:	downloaded
Size (bytes):	2230
Entropy (8bit):	5.1220413514345156
Encrypted:	false
SSDEEP:	48:UhdH51FtNZlLC1hdGKhhHH1FtNHt1h9hKhZS7zJRLkVbS01S0hSjSTMJcUSjSLpY:Q//JLCFGeV/ttD7rAc0MP+QuD+LpY
MD5:	4D56AF8ACF934242A6D0C2D5FD5785E1
SHA1:	9D58373C57C53221C4762B87BDC186F6E38384D0
SHA-256:	6F26F0CC605A8C789C557B2956CE78D147D5D2CC16D2F09B3A606306BCA3F4DE
SHA-512:	1ECA9E9FEF9757337739BC530C87AAA8B9209A14C16F570FC8041618274330E3649F6D0A7E9FA97DC45DC8BB8FDE61A18E06F98E8A48E7BC5F22D4D53CC217A3
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
Preview:	.searchBox .searchBoxForm{position:relative;margin:0}.searchBox .searchBoxForm .searchBoxInput{width:100%;height:3.1875rem;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1rem;padding-left:1.125rem;padding-right:3.625rem;border:.0625rem solid #a3a3a3;border-radius:.125rem;box-sizing:border-box;outline:0}html[dir=rtl] .searchBox .searchBoxForm .searchBoxInput{padding-left:3.625rem;padding-right:1.125rem}.searchBox .searchBoxForm .searchBoxButton{position:absolute;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;cursor:pointer;padding:0 .25rem;top:0;right:0;width:3.125rem;height:3.1875rem;background-color:transparent;border:none}html[dir=rtl] .searchBox .searchBoxForm .searchBoxButton{left:0;right:auto;transform:scaleX(-1)}.searchBox .searchBoxForm .searchBoxButton .searchBoxIconContainer{display:flex;color:#0078d4;justify-content:center}.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	353852
Entropy (8bit):	5.944949400585535
Encrypted:	false
SSDEEP:	6144:8k6NPL7utJz2M9W2gvizNh9PnEZWXUNA2d9C1:8hEJz26WGhJn4GS90
MD5:	4CE03DAE6DBC7449C10A185ADFD796CB
SHA1:	6383824EF591BEF183D38C7E18FEEE9B94256F82
SHA-256:	0D438BC5167BE88ADFFA8952057F9837E035E693C7A5FA255E907E48E59545D0
SHA-512:	264EA8842CD4F7203E93BFC591135488C6328442AB58374099FA72B5F7308920999AAD8D44A0BF6C81AD96F5319B9AAA4E3F38A7F8A4B989AB30FD7A169B9CE7
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/60270350/configuration/applications/taglets/.jsonp?v=2.0&df=undefined&s=store-m365-en-us&b=undefined
Preview:	lpTag.callback({"taglets":[{"name":"lpSecureStorage","type":0},{"name":"lp_testingTool","type":0},{"name":"lp_sdes","type":0},{"name":"cobrowse","type":0},{"name":"scraper","type":0},{"name":"lp_ada_enhancements","type":0,"parameters":[{"id":"enhancements","value":"{\"options\":{\"debug\":\"false\"},\"logoCSSFix\":true,\"surveyTabFix\":true,\"headerTextCSSFix\":true,\"menuKeyCloseFix\":true,\"minMaxRoleFix\":true,\"agentIsTypingFix\":true,\"offlineCSSFix\":true,\"inviteKeyCloseFix\":true,\"offlineWindowNarratorFix\":true,\"cancelBtnCSSFix\":true,\"muteBtnNarratorStateFix\":true,\"engagementFix\":true,\"overrideStyles\":{\"cancelBtnCSSFix\":\"color: #000 !important; background: #fff !important;}#lpChatButton a:focus,#lpChat a:focus, #lpChat button:focus, #lpChat input:focus, #lpChat textarea:focus, #lpChat select:focus, #lpChat .lp_textarea_field:focus, .lp_confirm_button:focus, .lp_cancel_button:focus, .lp_action_item:focus, .lp_dialog_input:focus {outline: #000000 dashed 1px !importan

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14627), with CRLF line terminators
Category:	downloaded
Size (bytes):	34372
Entropy (8bit):	5.931056415719769
Encrypted:	false
SSDEEP:	768:waxLTFDg8vvUEKdSKxjI8BxLHBja6/xuVFh56vJ7zOowCdn6GBnHmlg+DBIHAJxo:3xLKkUEKzjI8BNHBjamxuVMRB6GIl/50
MD5:	0ED23ADC4DA873A157378C425B236059
SHA1:	0297A21C5D5CA7FADD403E3B6D5CE913AA1B9E3D
SHA-256:	67986184568950851D87AA755B3D6FEC658A0F1D55133AC11F81E3E7F142EF1F
SHA-512:	7A68980D121A977C5CCDC9D855E097CC6AFCB7142D4DB7D761329228CE9983C2783C3A6294934085EBE8A632E568E62CC705BE9D60B67FE443C12A0EB2F0B221
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/lazy-sizes.js
Preview:	function _preLoadErrorHandler() { if (arguments) { var n = { Page: window.location.href, Message: arguments[0] \|\| "", Script: arguments[1] \|\| "inline", LineNumber: arguments[2] \|\| 0, UserAgent: window.navigator ? window.navigator.userAgent : "" }; _preLoadErrorsBuffer.push(n) } } var _preLoadErrorsBuffer = []; (function (n) { var t = window.onerror; window.onerror = function () { t && t.apply(this, arguments); n.apply(this, arguments) } })(_preLoadErrorHandler);../! lazysizes - v2.0.0 Copyright (c) 2015 Alexander Farkas.. Released under MIT license, http://github.com/aFarkas/lazysizes../..(function (n, t) { var i = t(n, n.document); n.lazySizes = i; typeof module == "object" && module.exports && (module.exports = i) })(window, function (n, t) { "use strict"; if (t.getElementsByClassName) { var i, s = t.documentElement, f = n.Date, ft = n.HTMLPictureElement, e = "addEventListener", r = "getAttribute", o = n[e], u = n.setTimeout, et = n.requestAnimationFrame \|\| u, c = n.requestIdleC

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	dropped
Size (bytes):	143368
Entropy (8bit):	3.949506106648749
Encrypted:	false
SSDEEP:	3072:csiNi5JqER2ERi5/4lBXFDcoAdPYT4g2epaOkTEgTJPKKwPecO/ZSUZUWu/XiKXC:csiNxdPsaZPZeXxXHW/zNilXdk
MD5:	6CBA26AFE3E9C36155A322327243717B
SHA1:	19D393E7004E78C083EAB7602D4936C2EB0DDE39
SHA-256:	763D5A901D6EB0D340574F02D964D10BB08D96BCFE79B890B3E7ACEF51241C73
SHA-512:	25623B250EC7B7E77531D5E5A50DEC29D254EA8D880621879F37C9F8AD04C790F8F5CF37EA96D2A9165F5875D3217D482560F9AE1C9A7E9682EF7F0FB75F1559
Malicious:	false
Reputation:	low
Preview:	..v.a.r. .W.c.p.C.o.n.s.e.n.t.;.!.f.u.n.c.t.i.o.n.(.).{.v.a.r. .e.=.{.2.2.9.:.f.u.n.c.t.i.o.n.(.e.).{.w.i.n.d.o.w.,.e...e.x.p.o.r.t.s.=.f.u.n.c.t.i.o.n.(.e.).{.v.a.r. .t.=.{.}.;.f.u.n.c.t.i.o.n. .o.(.n.).{.i.f.(.t.[.n.].).r.e.t.u.r.n. .t.[.n.]...e.x.p.o.r.t.s.;.v.a.r. .r.=.t.[.n.].=.{.i.:.n.,.l.:.!.1.,.e.x.p.o.r.t.s.:.{.}.}.;.r.e.t.u.r.n. .e.[.n.]...c.a.l.l.(.r...e.x.p.o.r.t.s.,.r.,.r...e.x.p.o.r.t.s.,.o.).,.r...l.=.!.0.,.r...e.x.p.o.r.t.s.}.r.e.t.u.r.n. .o...m.=.e.,.o...c.=.t.,.o...d.=.f.u.n.c.t.i.o.n.(.e.,.t.,.n.).{.o...o.(.e.,.t.).\|.\|.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.t.,.{.e.n.u.m.e.r.a.b.l.e.:.!.0.,.g.e.t.:.n.}.).}.,.o...r.=.f.u.n.c.t.i.o.n.(.e.).{.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .S.y.m.b.o.l.&.&.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.&.&.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.,.{.v.a.l.u.e.:.".M.o.d.u.l.e.".}.).,.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,."._._.e.s.M.o.d.u.l.e.".,.{.v.a.l.u.e.:.!.0.}.).}.,.o...t.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	14850
Entropy (8bit):	4.924023505398329
Encrypted:	false
SSDEEP:	384:SQBjgyWlFicKg7vJSgCCYP8wUP8u3dJB9A/hWxB:VBjgyWlFicKg7vIgC/P8wUP8u3dJB9z
MD5:	8CD39B0628EAF5B88C939EFF71B68325
SHA1:	277A609DB2B26439C06D082413E4AD5E5E5F04AD
SHA-256:	AEEC7B2255C36AA415CF4BAB8C69C1BCEEF92D9625FBE2578B71C1F4F50275E2
SHA-512:	EE85F483B2D9FF6E194E9D64BE47F32EA375C5E7547804C333B1E0BE62492628959AF57696CEC332F9D07F3D67DC4A490630667D1CE6951138E53D420C49703D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v1/buy-now/clientlibs/site.min.ACSHASH8cd39b0628eaf5b88c939eff71b68325.css
Preview:	.buy-now [data-tab-content] {. display: none;.}...buy-now .active[data-tab-content] {. display: block;. overflow: hidden;.}...buy-now .BuyboxCompareChat .buybox.second .link-group .btn-primary {. color: #0067b8 !important;. background-color: #fff;. border: 2px solid #0067b8;. text-align: center;.}...buy-now .tabs {. display: flex;. justify-content: left;. list-style-type: none;. margin: 0;. padding: 0;. border-bottom: 1px solid rgba(0,0,0,.2);.}...buy-now .tab {. display: inline-flex;. max-width: unset;. min-width: 250px;. height: 80px;. text-align: left;. border: 1px solid;. border-bottom-color: rgba(0, 0, 0, .2);. padding: 0 25px 0 25px;. font-size: 20px;. font-weight: 600;. margin-right: 24px;. align-items: center;. background-color: #f5f5f5;. cursor: pointer;.}...buy-now .tab a {. color: black;. text-decoration: none;.}..buy-now .tab.active a {. color: white;.}...buy-now .tab.active {. background: rgba(0, 0, 0, .79);. color: #fff;.}...b

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Reputation:	low
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	downloaded
Size (bytes):	30289
Entropy (8bit):	5.2611894534770975
Encrypted:	false
SSDEEP:	768:Q2u2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:QbM0S0/ks2JdImYFcw662A86vzyR
MD5:	27083AE98ADB75A1F14AD0D4D4082257
SHA1:	A3C3446B00C521B8818C8FADE4A0DB7E96A24AF3
SHA-256:	CFA632D87DC2E23D51A9623DF59A25FAFD14F109FFC2D97D62BEFD5343F34A6A
SHA-512:	D48CB15587211761101ADE364FC3779EECBE4A70F99735C928D6CA5E6CDD8F2EBCE796BDC27F7CBEEC5AFC9364EEF2AE902FE54DCD05F92E8AB9B2D616C97D5D
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=OfficeProducts&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	dropped
Size (bytes):	2343
Entropy (8bit):	5.278059604921528
Encrypted:	false
SSDEEP:	48:2pCPKZdbWp170LQPJS28EVTCRU/Qxk49VMglbQ0i9rN:ZSeLgYYEwp7nitN
MD5:	CA0820E0B24021397AC8910BBD5A1F49
SHA1:	B08C0445D5BF68E10F013F4413CE6BDF5776616E
SHA-256:	11785773FA80E71FF0D843D5FA7B4474063C260D220890D7716A51F07F989D2A
SHA-512:	D7105E66514EDAF8E9C3F4FD7A085C88A0319C3D5B516641165A8D558DD6EE170D99D5326C9C2089D70ED38F007482FB64D58AA03237AF696EA2635D89BC28E4
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function b(d){var a=f[d];if(void 0!==a)return a.exports;a=f[d]={exports:{}};return h[d](a,a.exports,b),a.exports}var h={9382:()=>{$(function(){$(".footnotes-component .py-2 a").each(function(d,a){a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Footnote";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body"})})},8724:()=>{function d(e,c){var g=document.querySelector(".pagenav .bg-body.stuck-depth");g&&(e.preventDefault(),(e=c.offset())&&window.scrollTo({top:e.top-.2*g.offsetHeight-10,left:0,behavior:"smooth"}))}$(".footnotes-component a").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)?d(e,$(c)):(c=this.getAttribute("id"),c=$('[href\x3d"#'.concat(c,'"]')),0!==c.length&&d(e,c))});var a=0;$("a.ms-rte-link").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)&&(d(e,$(c)),e=c.substring(1),e=document.getElementById(e))&&((c=this.getAttribute("id"))?e.setAttribute("href","#"+c):(c="__f

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1214
Entropy (8bit):	7.8269014191467186
Encrypted:	false
SSDEEP:	24:gfKzILi+tEeoBxc6moBTwwX4GMkgIPD5LOgr1dnAVucTp5hQbHupMfLUxl2/:bcW0EeoByoBTHMwDDBhAXTp5CuX2/
MD5:	93B4DB64705AD4AC6578A68E87F78A8F
SHA1:	230CE6B9DABB89A32240BDB14C28F24BA34F2DF9
SHA-256:	BCFA60E1354A5F8DC1151183CFF259E5954EFCDB7D3D6FBA5FB120F1BDE1710C
SHA-512:	F1122EAE13D5E5097829DA6222660E8FFAAF90AE0A8C9AF19F6A42F3BE41B44F9CB407EF7842FB3C4355F2D3FCE0662362451CF791921E741F1FFB834EF363D6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0....K.K.>E..D"...<..(.D..^P.l./~..!..r~..o...Bw...G....\.C..=@?...z.ym..\|%..~.{^4k[..4......?.}..@z ~...\..w...5.H..n..T..C.X..v3.f.m..1.C...CJ.G...#_...1...%.....\(.K......;...=...d.K .8X%?..x......l...+...va..._.S..M+.._=..........$"3...Vi.\|%.......wV..S.....c.j....5..cb.....F}6..r..G.[.4j.........]....w."...Z..Z.....J..S#...E.....m.....uz..Iko.\..\.r....7.....>.;..>.5....t..i.K.#..1..rw6t...o.....o TT.v`).?.....k`..Kq.....3F...r&.>..28_T...=..].f.^..J......V........B......K.(.r..y.d...&.Dt...9....X..wi0ob...;.........i.2E...Th......?....i..^.-~....N.x..V"...B..K...W.U..5\......n...0}.v...C.....{...fE..7.D\..?....N;?.5L1...x7yc..v.Bb..8W.g{....T\|..#eV.....g'&d.x..CM..A.e...y..x.<...j...j...&..GZ....-.>.}.JOzuU....].{.."L.1.V.`\|."..f...7...8%H.em....s3..(.k....6.+{.c..H.z..0..@.O...}.-].......<........z..\|...YA...k.}.3.....a...m.hBj...^..i$....Gh2....S.%....i"np9.B<..4.p..C..q./.u.e.t..I,..>.i~\|....o mh2VK...,.e.U..b...)

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	4.587004430912269
Encrypted:	false
SSDEEP:	3:JmDMMLG6RwF/D0rTCZIV1AAFELHL1FslIHDfFTo/Zc8nFAyGTPmdo4yHzIFtG5GG:go0rLlFwG2ZTo/lFAVjbnHkLj50n
MD5:	AC1B918B4EC455FA06668A1475496728
SHA1:	57CD7F570979E50BEADBA3A5BDD714BC673E3D0E
SHA-256:	3E7D2ECDE4E09D07D16DB98DA3A8C37D40EEABFC7B9BB0EE5203972C72119E12
SHA-512:	5BB83414A0E40B0D55113E7B1FDE25F16D7ED68E3B3C61A5FCFF403E8435D43738341CEB76BF89FAC64026A4EB5717AFE94631C12C961800F5FD962BC57EDDDC
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v1/comparechart/clientlibs/sites/compare-chart.min.ACSHASHac1b918b4ec455fa06668a1475496728.css
Preview:	.table-responsive.compare-chart {. z-index: 1;.}...compare-chart .compare-chart-table a.simple-link {. font-weight: 600;. text-decoration: none;.}...compare-chart-v1.compare-chart .sticky-sentinel{. width: 0;.}...comparechart .compare-chart {. overflow-x: auto;.}..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30132, version 0.0
Category:	downloaded
Size (bytes):	30132
Entropy (8bit):	7.994040282339949
Encrypted:	true
SSDEEP:	768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V
MD5:	4C38C2A78502AF8DFBFE0F71CC49A1AE
SHA1:	4B8C845263B3696E28CF3F313E0214E22688A750
SHA-256:	1232BBDBC5D205F3C5A40EFA5ED92839C79E7879D5168445CC47645BB93F7D1B
SHA-512:	E60FFEA855BBA4241DAF68AF6BD3C1967211A215EF281C7DAC8311756A0781D00F529FF0AC5CE789238A4215EB1540C6C61C69D650CB2027C3C72CD475DD7B9B
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Bold/latest.woff2
Preview:	wOF2......u..........uZ.........................`........\.....$....6.$........ .... ..-.......ZAj.bf p..................."Q..vG.{..9h`..xD.j.VS.....Y.g.."..D,#.C1.\|.........2....V.-v............&~;.As.m....=.@....=...w....".q..A..~..pN.q...y8...Kw.\.:}''.'zjX..%V,0...Zmf.?......9.\.w...f..,.....ag..,..q..$..r....0..El......".....].J...D:I\|:9z)$.V......L...#..\s7._...@....i}..lY....-..N.;.DC..,`v9.VCw.u.3..>.......yY.!~..8..<..{...M.B....g@...K;.....].Z..Y..^g...A{<....i..n..C...4.<.b..J..d..x...@...}.f....U.( ...`...0eF.Sh/.1T..J.]W<..].>T....>..,wv....~....%.:..{`K..NR.O.a...pS..m....DS...Z>...T..T%........3...7...N.sl...wb..............$q0$E..@p.J"..v.........+G..$..@..o.%...v..S.\tn.un...wS......M..m1..D.d.#FD.3...........c..f...#R.......~....Q8@.......}(..Im....u......=......c.....',e3a.13.pc....0......p.N..._...O.a...../.0.. ,.:.\7.....Bg......4.-.P...(..%....de+O.Q......@.m.Lq..D..\|V...X{....X..!Ii.Q.M..8..G.3.~o.GS9.....~.?.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1578)
Category:	dropped
Size (bytes):	337204
Entropy (8bit):	4.9709486402799286
Encrypted:	false
SSDEEP:	6144:NqP3gQQQZQXXUXpXr5ZHb/d/6yO9QrHhFB9NdvTH:75eYXUXpXfHb/d/6yO9QrHhf9NdvTH
MD5:	283B5D1DBF0B9FB647D9468B36C3FB4F
SHA1:	BD89DC41E2DC37A57B6147EDA5EE0564E571EBB2
SHA-256:	8AA6D7B165A080A5B7A8D267C11B2708A71E94491617342115A750256AA4C75C
SHA-512:	3092DD8BD6E45BAC3DAD5C9A8ABD4CA908700D3B628D144897189456415B7AACDE5DB4D3F1522139B6086E15FBCC1995797BE6A52D2118804448D09DE26527C5
Malicious:	false
Reputation:	low
Preview:	var engagementFix = (function () {. var engEl;.. function focus(eng) {. //Jaime MR test change setting upstream. // Run if a button was detected. if (eng.engagementType === 5) {. // Look in dom for a role of button. We only need to do this once because each button load will cause this to run.. setTimeout(function () {. var button = document.querySelector('[role="button"]');.. if (button) {. button.removeAttribute('role');. }. }, 200);. }.. if (eng.engagementType === 23) {. document.querySelectorAll('[data-LP-event="close"]')[0].click();. }.. engEl = document.getElementById('chatEngagement');.. if (engEl != null) {. setTimeout(function () {. document.getElementById('chatEngagement').focus();. }, 200);. } else {. setTimeout(function () {. var engageme

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3176), with CRLF line terminators
Category:	dropped
Size (bytes):	22142
Entropy (8bit):	5.9269859945107255
Encrypted:	false
SSDEEP:	384:rSWrA3pqOqNERT17pgMnQaWip7zYdCuhywhJiHuiwxJRQZ5YZTmbjeIkXRh8Kxup:rSWr6LR59gMnQaZ7zOowCdwxPQZ5MTe1
MD5:	FEBCCC48A770D434D36A19080AAAE5C2
SHA1:	FB20413664EC4439E5040B4DF52D456C5D86063D
SHA-256:	F3036460BC9DAFFAFF078BE0ADE99FC6E5BE25E41DD6FD4785CB2CA92D2FC755
SHA-512:	FB2AC2CA6076360AE2667C4E9BEE4CF71B7A92DA889F3A7C54C9185D9E6BC7DC808527F4AAC66B51C8D478CA5AA6296DA56EF12849EAB97BE9E561A67857E022
Malicious:	false
Reputation:	low
Preview:	require(["window", "document", "location", "deferExec!"], function (n, t, i) { var r, u, f; if (i.host.indexOf(".xbox.com") != -1 && (r = document.getElementsByClassName("video-player"), r && r.length)) for (u = 0; u < r.length; u++)f = r[u].getAttribute("data-player-data"), f && f.length && r[u].setAttribute("data-player-data", f.replace("autoLoad", "autoload")) }); define("uhfUssCategoryService", ["require", "exports"], function (n, t) { "use strict"; var i = function () { function n(n) { this.market = n; this.responseCache = {}; this.ajaxCall = function (n, t) { var i = new XMLHttpRequest; i.open("GET", n); i.onreadystatechange = function () { this.readyState === 4 && this.status >= 200 && this.status < 400 && t(this.responseText) }; i.send(); i = null } } return n.prototype.getServiceUrl = function (n) { return "https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories" + ("?clientid=7f27b536-cf6b-4c65-8638-a0f8cbdfca65&scope=games,apps,devices,software&query=" + n

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1826
Entropy (8bit):	7.84919939218005
Encrypted:	false
SSDEEP:	48:FZj+w9UzU1t6ZjirPjb6YKHjiawlyhm9pnyJeBcOyPgn0QCpa:P+4xEICYKl6y+ylcn0QCk
MD5:	E265C7CF0763336C1294F658FE2C648B
SHA1:	3B703FF0E8678F8725365A012F30944BBDEEF5CA
SHA-256:	32E5ACB69D39499AEED6A1108D7AA4C936E2D393E44B0937EB838433ADE9510F
SHA-512:	00C1420CE79D8C7564C76CD5185E2921DEA1A0E20866CE662CEA016BB91D4429F7D7A88C7419EA2DBF57DC3BAFB81D2D8AE47C92536267D6994BB94708B1F824
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH.....o.m#Az...A.....PyA.8..M..Y0(8..]).%.\|"vG..a.....nk;..m.m'...U.m.._..........O..?\|eSkm...[.....E..V....`{~f...6C`......\...H.3....q...{..?..)h..`......n.Q.0......U....^./..F..m.~x..,..8e...aP.q\....7.E$..8e.q.aH.....s....;`..q.aD.ot.jd...:...g0...:U..!...Da.S...3]......4.....p..Pj...<....tO...@....:.#.w.)...7..`.<?.}..i8(.y...l%.pL..G.m...8%&ZJ.vx.ii.....)....-L.i.1S..t..5M.1..}....0...l....U..N..m...pR..WU.+r%........[t..dY.....r..o...x.w..5..G.`._K<..2....:}b..Ji.<.f.[......4.L.(.4Q.....R5.....;..A.y.C....9.o./tz.A.i...;........^1..8.>E...h7.i....o.9....Y..m...):g......~.}.O.Px...c'OX?ydO../;.VP8 p........o.o.>Q&.E..!....8....P5E;g..9..?..U.......0...0.....~.....z...............O.......H...`.M....s........._....I.....g....~.......(./(.......8.C... ..c.{...V.`.f...=.TY.d. AxS..Q<Fg........b..N.F..^M@.f.z5.....vpN...._.Z.).'..6.'.*..]W...:o.....s....,.$..m..x.&op..o.{H....=1.v.qK..,c.d....

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	dropped
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	dropped
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3500
Entropy (8bit):	7.774579037615692
Encrypted:	false
SSDEEP:	96:+ajKtvNYmFsK56t+8Z3wLnM6ihPd+NPNZfFu:+aUVJqK5u+0wXk+HZfFu
MD5:	0C5EAD76743E397982475BE13CA98748
SHA1:	FE5D2D74BD5DB065AE5A640C9C33CFA464E4E4E2
SHA-256:	F5FB9EB44881B5CD0C021550A3DF2E8ACF7FA7905F41CA4463C48DE174793033
SHA-512:	65C839390C48F3749722A5879F58CBDB7E9BCD23C35427384C13C61C00D38414D436910705993452927FF29F5150C528212000DAA6CBC83158446CD7183A566A
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Clipchamp-CC-H-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D..............................!...Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma..........................mdat.......niP2......T..yF..."....g.....K......1...k.Xr..0Nj.T.`s.o...(..?..@y ...`.#D .LO....!J6FT.gX....B.i=.,..'.M.8LU.....&r.6...c..[....B.u..n....=....o.{aA.\|.}..s7..<s.TXV..Q.'..w..-.m.J.q>.R...Kh..u\t,q.2Qi.>0gu?q.M..."...Q..A.Y_l...e....o[\Io.,..PDF=.T.J..z.m..$...&\.._...8.......r. .H....U=...A,..B..`..Zm".....G.v...A~..g?..T.&...l....\?T@<....D...;...:..].\h....J:b.{......>.....P....T...f.x.g..B.;.?%..Q....}...S.C.uQY.. ...!{....".........N..j..e&#4BGg..i..VL]*O.u........B.W&..Jf;...;HbM@.L:.Nn$..U..w...

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365?ocid=cmmttvzgpuy
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/f4e85874-2a1a-438d-9c3c-17b069c454c0.png
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	7.753628280164637
Encrypted:	false
SSDEEP:	24:0qhIlp61EXC1aFWXWQpXxwecacgLnjqc+7DYiNNl:3Op61Uj8XWkhwwDXyl
MD5:	B665C2E078EBD73711D1A0CF23B8A717
SHA1:	5E13E0371C4C35A06B23C072AE097A151E8454C5
SHA-256:	CC9F6227E9E58BB888A8EBD2F6671D9E9333CD3FFD1E42A74D726732CCC1CE46
SHA-512:	518A8E1268BB3C10F5196FF0AB0EAFA9B8736459F519CF04883C5E7D572551165B3339C546E54C295AF78E16288AFB7E4041CFE975E242D8E0C9BEAB47DF48E0
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Twitter%202x?scl=1
Preview:	RIFF....WEBPVP8 .........@.@.>9..C.!.......Z@.x....?.t'.'.../.......g.V.G...)4%.........R.....p.o.M.....~.?................'.....D....D9^I=q.lT9..sV....]]...".....7......)....A......\|P........,9.q....1"R.MG..&.Q5...fx5..+Rwey.aY.&..i..p.1...J..1>}[.%+.B?.P.....KHWl..7..;...(#..A....V...z(...o]Z.$....._.?.^.Z.4.B..Y.+.....j...~.D..Ip.Yg..t^.Q..^S.F...g.k3Hm(F...w..D....."B.....@Q...5.........zUy...;C..6M..:........R.>7k `.....{.?.S%/.?...../d....O.\|l.t...g}..P4.:.1.Ad..4..&q.nW.N....!......f.........X..o.=.2.U..kx.?Y....:....N Z.&i...........x.ME.)..kH'o..an9L,.[.........BHC..8a.....f..........].70...+_e.y.RI.....#p8.....h!....a..".Y.U..9[....[...e....7x....Y.jg...v.~....$....)....[t.Z....8v{.4...*...N...k.>6...+.P..S).q..u....-z.........I..a.........Y..L\|..8W...s.E.BR..th.`.Z1.;1..R,_.V..a>..C...Do./O...yn......H._.p".............Ei.f.h.8...F.b:..-<A_...zs......6.K..P...,(..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	73501
Entropy (8bit):	7.274239603253508
Encrypted:	false
SSDEEP:	1536:m5++++++++++++++++++++++++++++e3XsuNwDM17iYdtYGb40EyUPP6+BpdMhn9:V3XsumI1DEyUPyOpkM7YVVVVVVVVVVVN
MD5:	471B948CA93626961E6ADE6DE66FB747
SHA1:	F70E8C1A90732C23BFFA5DC0C417FDF0274EA3F3
SHA-256:	98861B25409C0C097A5F1FA61535701E58F2B0C9F7CC951B0AE1E988238D38E1
SHA-512:	1AD51DF041DB63A5130376D4C645EC16D2C3D2BA0F0635F185C04929AE3D96415273974B03D0898DC057AB50397EED9DD5A4807AA4D6B07D95B7E9520C494502
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3
Preview:	......Lavc58.18.100....C...........................................................##$++3..............................................................................!...1Q2aqA".#.R..BU...3..s..r4bCS..$.T.5e.c...D..Vd.f.%......................1Q!A.a....q....2"...R.bB.#.r..3.....c......8...."...................?...k]1.<...Gq_f>..#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....k]1.<.......4..;.5..GM}#.._H.H.t..;.5..GM}#..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (801), with no line terminators
Category:	dropped
Size (bytes):	801
Entropy (8bit):	4.516243092751944
Encrypted:	false
SSDEEP:	24:kwgwPextGGTpab5j9BB8kbco/WIGGaTpEzT8:kwgwPextd9mjTBnbco/WIGl9En8
MD5:	D459D0E471843E016818EA2BF4238F70
SHA1:	ED6F44AB79AEA3A9B9388D9D171229171083E880
SHA-256:	44DB7AAE1580763F035EE30F6DCB5DA102C29E2B304180698EA7BD25212C0FB1
SHA-512:	68A35ECC4B42D637B51E1527F1668AC2FF060AE00C5343E1D67DB2C6AB959EAF6133C42BFB6033C8CBD89EEA6404153DC9DE09894C0F081A4B7D4CE3D739877C
Malicious:	false
Reputation:	low
Preview:	lpCb88598x81007([{"enabled":true,"whiteList":["microsoft.com",".microsoft.com","microsoftstore.com.cn",".microsoftstore.com.cn","office.com",".office.com","googleusercontent.com","bingplaces.com","translatoruser-int.com","liveperson.com",".liveperson.com","liveperson.net",".liveperson.net","lprnd.net",".lprnd.net","lpsnmedia.net",".lpsnmedia.net","static-assets.dev.fs.liveperson.com",".azure.com","signup.azure.com","azure.com",".moscnuat.com",".lpnet.com",".azurewebsites.net",".geologic.al",".microsoft365.com","microsoft365.com","checkout.microsoft365.com","stores.office.com",".googleusercontent.com",".bingplaces.com",".translatoruser-int.com","lpnet.com","moscnuat.com","azurewebsites.net","geologic.al",".checkout.microsoft365.com",".stores.office.com"],"deleted":false}]);

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3176), with CRLF line terminators
Category:	downloaded
Size (bytes):	22142
Entropy (8bit):	5.9269859945107255
Encrypted:	false
SSDEEP:	384:rSWrA3pqOqNERT17pgMnQaWip7zYdCuhywhJiHuiwxJRQZ5YZTmbjeIkXRh8Kxup:rSWr6LR59gMnQaZ7zOowCdwxPQZ5MTe1
MD5:	FEBCCC48A770D434D36A19080AAAE5C2
SHA1:	FB20413664EC4439E5040B4DF52D456C5D86063D
SHA-256:	F3036460BC9DAFFAFF078BE0ADE99FC6E5BE25E41DD6FD4785CB2CA92D2FC755
SHA-512:	FB2AC2CA6076360AE2667C4E9BEE4CF71B7A92DA889F3A7C54C9185D9E6BC7DC808527F4AAC66B51C8D478CA5AA6296DA56EF12849EAB97BE9E561A67857E022
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/vp-attributes.js
Preview:	require(["window", "document", "location", "deferExec!"], function (n, t, i) { var r, u, f; if (i.host.indexOf(".xbox.com") != -1 && (r = document.getElementsByClassName("video-player"), r && r.length)) for (u = 0; u < r.length; u++)f = r[u].getAttribute("data-player-data"), f && f.length && r[u].setAttribute("data-player-data", f.replace("autoLoad", "autoload")) }); define("uhfUssCategoryService", ["require", "exports"], function (n, t) { "use strict"; var i = function () { function n(n) { this.market = n; this.responseCache = {}; this.ajaxCall = function (n, t) { var i = new XMLHttpRequest; i.open("GET", n); i.onreadystatechange = function () { this.readyState === 4 && this.status >= 200 && this.status < 400 && t(this.responseText) }; i.send(); i = null } } return n.prototype.getServiceUrl = function (n) { return "https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories" + ("?clientid=7f27b536-cf6b-4c65-8638-a0f8cbdfca65&scope=games,apps,devices,software&query=" + n

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.7572927927059716
Encrypted:	false
SSDEEP:	3:GAJzRWWXPxYAFDJLn:5zR/XPxYA7Ln
MD5:	3BA83E5651FA69097B1F5BDDD9CF4334
SHA1:	0B7E734F76965C5533022971179EF8B072A1715B
SHA-256:	4A1643EF46E69EE61A1507BFD8356E6EF13BD3FDC1DE88B4176B7F8368213361
SHA-512:	1EA803CF1418C2726724A04007350958086962CA949DE42497DC351081128483FAA83547B7CC685F06C660B6446D3A6D44F1D0D4216A2636A5ECB73B6534D3E6
Malicious:	false
Reputation:	low
Preview:	The requested resource could not be found.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17023), with no line terminators
Category:	downloaded
Size (bytes):	17023
Entropy (8bit):	5.3316276717113915
Encrypted:	false
SSDEEP:	192:Tbk8rLfMtWCoD+pIaPV+8NUIWXlcfVk9z5FJxoYWBg3xx8TtYdR0cMobzwjn:nkzQCoD+q2/K/J7xB6Y0cM3n
MD5:	84A6FA0B49E9D3E94222341313F9080A
SHA1:	34518E71DBD34CC403E719F1BA55A89FE78C6998
SHA-256:	461FA42E31FA9F5FF7FFFBDBB681263DA80E1DA88957E99E8A0FEB6A48D151EF
SHA-512:	BF79826C62A5E4E1A5B4E4B8B08227F9509730343FF80ED3EEB4D623B648E45A1993AB2538ED9A99637B150BAA7DAC39E83A079D8C6D7F4FCC7471A562932E68
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/library/svy/store/broker.js
Preview:	if(void 0===COMSCORE)var COMSCORE={};void 0===COMSCORE.SiteRecruit&&(COMSCORE.SiteRecruit={sv:"scor",testUrl:"broker-test.js",configUrl:"broker-config.js",builderUrl:"builder.js",CONSTANTS:{STATE_NAME:{IDLE:"IDLE",DDINPROGRESS:"DDINPROGRESS"}}},COMSCORE.SiteRecruit.Utils=function(){var r=COMSCORE.SiteRecruit;return{location:document.location.toString(),referrer:document.referrer.toString(),loadScript:function(e,t){t&&!r.allowScriptCaching&&(e=r.Utils.appendQueryParams(e,(new Date).getTime()));var i=document.createElement("script");i.src=e,document.body.appendChild(i)},cleanURL:function(e){var t=e.split("?");if(1<t.length){var r="?";if(/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(t[1])){var o=t[1].split("&");for(i=0;i<o.length;i++)/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(o[i])\|\|(r+=0==i?o[i]:"&"+o[i]);e=1<r.length?t[0]+r:t[0]}}return e},getDevice:function(e,t){var i=new RegExp(e,"i"),r=navigator.userAgent,o=new RegExp(t,"i"),n=self.screen.availWidth,a={

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1720 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13016
Entropy (8bit):	7.883155506636877
Encrypted:	false
SSDEEP:	192:1usWVOBxMoGH4u9YRcVnk3rPnmE+59UOy+tYwOjPMZdC8NhfQyQYLWrBvo04uE:GKx3GH/9Y0cmAOXtYwOadVhfyYLyP4uE
MD5:	F5B4B4F04F1924F9470DC3C0B3E4FC01
SHA1:	28D187B90F70638832771600CD556BC85B418A37
SHA-256:	98FB37F9F0DA54BB17E1322E1A49D5D683854A0BD3DE47C01EB3F0CCBB8B2999
SHA-512:	676E6866C149E56699CA65887D4DB5903CD6F84D32987215F218082E4E441340931221BDED2A78512DEDF417848379DD7E45BF4F87804BC7FEFF7CB3632CB53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.....B.uk....pHYs...........~... .IDATx.....\.u..+{)....b...G9d....hL#....."p-[K.J.6G.;..i4..q.8.0q.vk...QVk#...3.lq...a+....J.....b..vQ....b..)...s..7....w.}.... w~.}3.....k.^.h.....X.z}.a.9<...............-o......c.-..s.Ti.......^x...g_.i...=........\R?0S....sg.....G....o.J.m...].b....u...w.Z...[...}.l...1.~..B...7.\HT?0S...n....y"......z}.^`.4.T....Y......?7w.;..A...X...s..Um..~`..V..G.J,$.5...Mg..#.\|...S...O.?..u..7]{....nxK.....?2.<.....N..i...?....=.......q....>..c[..f...#.jG..F.!6.......G.}O.~..$..w..+..,....M.>.}....6T$1g?.Z......1.l_5....6.-......-.W.$..B"9!V.q.JCd....G.I.C8...... 4....K....mH....d.&..IT..<.~...,Hp.%.v.@.~.7k......Z.Y......p.^#.....l.35..5I`j'%..1..x.........={.o....bye..;v..1./~.w[..{@.N...J.mG..z...[w.=x....K....C..\......;....{o....Y..?...K;c..~...u.)m.M...m-.g.}O.MU.7.~._.eK~..UI 6Ht..l6.........F2v....q.zV..TZ..w}v.....h.t...T%..>5.7.$.{A...lsY..2.K..f.b.>....)...K...RL

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1246
Entropy (8bit):	7.808846010085192
Encrypted:	false
SSDEEP:	24:MTdxpgq3k47p11dMKevQVzC4jdSLCbw8/vSU3wJqcc+Saqpt:yvRbN7dMKf/jdaCdamwJbc+m
MD5:	0B0D324D8294AB9E1C36EFACB6276980
SHA1:	B7599E4CDD88F31A4A56C610D3E86223D95BAAE0
SHA-256:	0FE6AA8A56A4B66BA0B2D23C8AF6F1F94A894E5525C5E193C7FD70EF05A7E5E6
SHA-512:	C08A4BBDB1F2ACB74FAD8B2B51CD0E3343D38959153A62FD5E98B4591548E92344131C9ABFC742B3E51FCAE5D8FE8C98032B9EB5D2039690598B0E825093436B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........K.K.>Q..D......\|8....c.....n....K.#.'...s..5y....\|..{&...k....................[...._...>..r.......R..}3...g.....V.5u..V..../...~."...~.>y._...........B{..-kRW.d..=...F.......~. >Jr.pc...]..............gL.v$i.o.T..!P.....z..Go.....GE[......w..^.. ...M..].o....n.+WM.)..4.....?.\|Q3..c.u....2O.N.....`..n,$`? ......P..{.tK..TP.....e.J...X..4..J\.<...7..CU....<g6D..]%......QO.--Q#..\|.fe.&.1U...d.%m?.5...I..@.*E...k<.....,...IP.]T.O..8./...=~..X)......L....U........N.x0.<u.........x.......c._!...GdA<.....F.q..mj... ..O...5,#..".dPTO..9.....+.K2......m....Bl....K.#.>;s....8NG...l..% ...8............\|t=x........&..\|p.....~...G....?.j.Z.30v.m..a...i.N...A./-.....J.2.]zPI..j\|3).PPr!..s....Zv......#/.,z.jM..Kr3...8.H.hH......d.t...........,.!rP.ZQ...N....1.K...v.(...C.%......F-rf.FDW..m....w.....^....M.y...:..u^.. .........,.B..6!D$/.......:>.........ZD.^..l8....[&\.h....'.....#..#......`...s...<....P...Ih.......+\|

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	dropped
Size (bytes):	99505
Entropy (8bit):	5.20600737523251
Encrypted:	false
SSDEEP:	1536:ixTfTfE8PWCgGDbn5lHij6D4/55p2/y+XlkpttBJjm:ixTfTfE8uCPIJkSm
MD5:	895E2A12062F1EE44D7D72D266904BDE
SHA1:	896B8B40961C524472FB84C4760160267A3B89A6
SHA-256:	D2AEA4BA12C00A853C03EB8EA9575338D1A21D15314B39B9A7AA039016E6FC93
SHA-512:	5673B54ECFF13BB7263EA98A554B8DEB04C5C2151B164F0A3A1411D9BB624C0395147D618C7C3381F263EAF5EECAA0E7EDC479DB9ABDC1A611110C2DC4610D2A
Malicious:	false
Reputation:	low
Preview:	// *************************************.// config file for at.js lib.//************************************************************************.// SET TARGET PROPERTY HERE:.const at_property = window.cas.exp.target.propertyToken; // Workspace Name.// *************************************************************************.! function () {. window.tt_getCookie = function (t) {. var e = RegExp(t + "[^;]+").exec(document.cookie);. return decodeURIComponent(e ? e.toString().replace(/^[^=]+./, "") : ""). }. var t = tt_getCookie("MC1"),. e = tt_getCookie("MSFPC");. function o(t) {. return t.split("=")[1].slice(0, 32). }. var n = "";. if ("" != t) n = o(t);. else if ("" != e) n = o(e);. if (n.length > 0) var r = n;. if (n.length > 0 && at_property != "") {. window.targetPageParams = function () {. return {. "mbox3rdPartyId": r,. "at_property": at_property,. ...(win

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 149676
Category:	downloaded
Size (bytes):	51912
Entropy (8bit):	7.994903470793642
Encrypted:	true
SSDEEP:	1536:CdjxrhowZmrSe9zUmoyfhKC4bl0v+bu08vpJfqw:CdhhvZorz3hWlRz83fb
MD5:	CD9AEEF65F998998C2A62AD11AB1FE52
SHA1:	0313ADE2716716ECA82B7CF3428EF4735EA7AEBE
SHA-256:	56C9F3CB9D325F78A6C2C541935EC990809D4E6336139840F7EB41D802C21D4E
SHA-512:	16E0ADDD9759610E6D2A808E7D7C30428C5CBC3C2FF0AC65401E30B5E7130ECD1ED57DA83D5125ADD173C24EE42F398DD0D56ED87A9493EDDF05A79D6265FC7E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js
Preview:	...........i[.H.(......KKma........n....3...l.e$...E...~b.L.d....<.~...)32.KDdDdd...k...se........W........x.g.............W.AR.......^..+QX..J...x..^.'.G...oR...c%}.+.8....Ie.$).....bBu.r...K...A.>.....J....<?..0J.._..!.6..0.+.p...`.P9..q.D.....?x..$3H...x._I..2....Q...R..g....C.!T8.../t0.....t..D..5BU.....F..h&Z..'.........Yu..l..r.L....8.T"..+4X.......@2y..c/.!.......?.aj...T..R......].4.N...-U..$~M.A..g....I.l..;...z..4.&...8H.f.. z..F...K../.../..?..p.c.T.f}hA.0z.P~.B....._..?...?@.D.Gg..S.@..\....6....\|..f.oQl>y0.vl.nxS..=.....n...v...M.p.>..j...&....H55..4J_.~..K.C.....T.....[...M\|..>.Mg../................=;.M.&.s=...........Z.Z...R.2...;_.;o8.E[.B......&..b?..a..k..@.I.......'.'.Z....\|.h.B>..&......s`...].gi....Z..A8\|}5S...... ).+J...Co..n.........!.....+H=.c.;cE... A/Ev../..".J.~..H..a.?....*tS1M.x.d....F>......TS..`V<.U..,..vH.S.....n@"..hm....\|>2....u\|;..taJV.0J...gZ..........a4.v..\|o...^_...O.&.../W...{.M.....M.BJ.....

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17023), with no line terminators
Category:	dropped
Size (bytes):	17023
Entropy (8bit):	5.3316276717113915
Encrypted:	false
SSDEEP:	192:Tbk8rLfMtWCoD+pIaPV+8NUIWXlcfVk9z5FJxoYWBg3xx8TtYdR0cMobzwjn:nkzQCoD+q2/K/J7xB6Y0cM3n
MD5:	84A6FA0B49E9D3E94222341313F9080A
SHA1:	34518E71DBD34CC403E719F1BA55A89FE78C6998
SHA-256:	461FA42E31FA9F5FF7FFFBDBB681263DA80E1DA88957E99E8A0FEB6A48D151EF
SHA-512:	BF79826C62A5E4E1A5B4E4B8B08227F9509730343FF80ED3EEB4D623B648E45A1993AB2538ED9A99637B150BAA7DAC39E83A079D8C6D7F4FCC7471A562932E68
Malicious:	false
Reputation:	low
Preview:	if(void 0===COMSCORE)var COMSCORE={};void 0===COMSCORE.SiteRecruit&&(COMSCORE.SiteRecruit={sv:"scor",testUrl:"broker-test.js",configUrl:"broker-config.js",builderUrl:"builder.js",CONSTANTS:{STATE_NAME:{IDLE:"IDLE",DDINPROGRESS:"DDINPROGRESS"}}},COMSCORE.SiteRecruit.Utils=function(){var r=COMSCORE.SiteRecruit;return{location:document.location.toString(),referrer:document.referrer.toString(),loadScript:function(e,t){t&&!r.allowScriptCaching&&(e=r.Utils.appendQueryParams(e,(new Date).getTime()));var i=document.createElement("script");i.src=e,document.body.appendChild(i)},cleanURL:function(e){var t=e.split("?");if(1<t.length){var r="?";if(/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(t[1])){var o=t[1].split("&");for(i=0;i<o.length;i++)/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(o[i])\|\|(r+=0==i?o[i]:"&"+o[i]);e=1<r.length?t[0]+r:t[0]}}return e},getDevice:function(e,t){var i=new RegExp(e,"i"),r=navigator.userAgent,o=new RegExp(t,"i"),n=self.screen.availWidth,a={

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	downloaded
Size (bytes):	530455
Entropy (8bit):	5.155958154904355
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe0dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyD
MD5:	9D7D4837CA0F716D17814E2733B0F9EB
SHA1:	10C4CDDC1347F1A20B2481917D676F1FD9A3EBF9
SHA-256:	D5AD7D29B9608839E63959EEA4A26F5F053E796AC0CAC9EDE5FF1F5F08F70236
SHA-512:	1CC93E948124DBA8D450A4B68966FB47C6EE13105432EBC213500ABEECE5D606DBCAAAC6BBBF5C08A2612E4E3DD22F7E0A217BCB5A6022E38B0D61E6E29E9635
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH9d7d4837ca0f716d17814e2733b0f9eb.js
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1020
Entropy (8bit):	7.73178843605843
Encrypted:	false
SSDEEP:	24:EqCN5i3CTc+SOgsWXfqrSoepQfdeyDckl:ErctBsgCWoeCFLv
MD5:	E4F74AA4D8B22043B8379F9F206FD2DE
SHA1:	C47BE6AF7537849B42D1F457DD50D9B78F5C2504
SHA-256:	374E698561B453F126CF795BC870D2C06E362FB35EBC2E0D4DE812D9606FDA97
SHA-512:	AA2440750CF56BD689E2DAF518ACD83D4FF6BA2E0C31F8E62560AC4A843764FB08B319192C4A20716D1135E8FFC0E3794B61DB0A49C5C5DF2D9FE9A20C1902CD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH........m$..K.z}....PAE=..n.....~K...`..$I..l..m..?.z.Y..G.m...~.B.DF..g..7.c....m.....[`=..1....)0Z}.....%.nisJ.c..C...6.oRwy..L.@.i.6[..Mo.uQ.......`0.........r..?........VP8 ....P....o.o.>Q$.E..!....8...._.g....P..E;q;..=@o7z.~.zd{,yL...^"q..O9.F...B.U....fS.-.........\yR....bg.@.2..z.R...[.>...N;.sR7..'..#............D........vp.=.K.G.....g9L-....m.@.i.m..r}..<.1...[...+L.ZU=....l0.B..eV.XZv.?__..A.....R%...^2.....g......Y.9}.".....^....6..W..o....k..3.\|q.^..c.-7K?...I.okg..T.YI.\Y...]..@.$B...,...;.....F1.5.....J^.9?w.Fl.......e.(..........z\.o..,... ....q.0EB<......9..........s\|....O....g....#..e}...W.w..........q.....eX..0v.3T.E.K\|-........2K...C....>..)^....C...Z..m`>5..'.gZ...ht.KC.....Q...l.:c....j..$.j.......~....]^z.DLg.8.]8.*......A.M..8....\|..O..W.n.Up.%>..S..c.....H..HM........9..p.4g..@.....l..i`1.g....~...#.%..n...ez...9..<@`.....F....m9....AB,L....;...._\.W...Z

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 77x77, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1988
Entropy (8bit):	7.8834294907663125
Encrypted:	false
SSDEEP:	48:BJ1HaiIgKUdP3TPjEj3zK0SmvjE+mKwniEE:LvtTPIFLCliEE
MD5:	3B9153D439DA369D93348D9BF56F1E83
SHA1:	D186F6B8B00CF5AF9095E770207D428024FA0B36
SHA-256:	6E08F922CEB66ED81BC471B96434255AD1E791575F36657B8510FABB09061460
SHA-512:	2314EC0372349616D8B3F873F4153EE3CAA98A8BEF23F36F6B9453422A0AB245271047C5680ED0FEC1A8E1AD80A4E59C0ED67DB112380A1F67105BB7352FFBC9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P!...M.M.>Q .D#.!...H8....ev.n?@...;Z...fi;...._0...>.....?.u.z...~.zN].}C.............../A{........../.n5{my.#..W....~i...........~...&...q....G)..XI.DK.y.......aZlx.l....zf..7.....X......Q.1.f...j..A.a....@..X..j....tl.q.4:..yK.....W9..U.7&.\|..>?Kf.w_.6.aKi.o........r....b..M.m..4..U..(...5..z.1...E.?k..E......1c...c..f.%...C.@...Cq?.........b...8....r....k..G`q^...U..a....A...n(B......S~...%.7./...I?(2.....A.}..e.......F....3..&.)"....c..w.W.../..>.uS.k..K.....M)...:...[w`m.G.P....X!....%\..7;.....$;..;(..s.IJ.=.O.6...y...c.P.........].0.u..M.U....k..5....Fg.Mgd...3..M........S.M..5<#z-..}.W..W</$..ph$\|3..e>.......{.a....b....j......... .....Q.l1..I..(#_D'.......S"`O...J............2Zm....d.;.g...wJ3......T..]y#}.'4....?e7$..A..>td..M$..N.:.g........o3.3........U..mi...V...%f..........d.S7....m...7.....9M....V5X..%...fy...S."[Y..'8....WV.....N.......\.....l...r..Y...E...J.\.N....,\|.....s\.x...l.B..V...u3.j9....

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389), with CRLF line terminators
Category:	dropped
Size (bytes):	22309
Entropy (8bit):	5.876846394375398
Encrypted:	false
SSDEEP:	384:uFOqfjOQtBMksqArywtp7zYdCuhywhJiHuioHlEzvBWR72T/+9TMlnvpJqvcttO4:uFr7/MkWlf7zOowCdoFuvE727+YvpkH4
MD5:	291735DEFEA0BE4AC2352B2B18155CC1
SHA1:	0DAF4629D3C5BF605E2319BADF6AB905044E6FAD
SHA-256:	3D008DB15468A8C605F4C91823680B2E62183E5AA389E465CBB3C14E847F684A
SHA-512:	0BBBA50CE4C5165E4206ACB64000B962B7633CE0687FE022D2EDFA01569326DCE18C1A9F66842C5D8782F53D99806ABE148BFE60D98E7F3146A924F1E151F835
Malicious:	false
Reputation:	low
Preview:	const baseURL = 'https://www.microsoft.com/videoplayer/';....requirejs.config({.. paths: {.. "platform": baseURL + "lib/onerfstatics/onerfcomponentfactory",.. "telem": baseURL + "lib/onerfstatics/onerfonedsconfig",.. "redtux": baseURL + "lib/mwf/slider".. }, bundles: {.. "platform": ["requireJS", "ariaWebTelemetry", "html5Shiv", "html5ShivMin", "modernizrMin", "pictureFillMin", "RedTiger_telemetry"],.. "telem": ["trackHelper", "jsll"],.. "redtux": ["copyrightHeader", "iController", "iCollectionItem", "videoClosedCaptions", "videoControls", "keycodes", "viewportCollision", "utility", "swipe", "stringExtensions", "removeFocus", "publisher", "observableComponent", "htmlExtensions", "handleImageError", "componentFactory", "breakpointTracker", "actionToggle", "additionalInformation", "alert", "areaHeading", "autosuggest", "backToTop", "banner", "biProductPlacement", "obsoleteCarousel", "checkbox", "combo", "compareChart", "contentPlacement", "

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (476), with no line terminators
Category:	dropped
Size (bytes):	476
Entropy (8bit):	5.856447458258293
Encrypted:	false
SSDEEP:	12:cOgd2z3utLPneSZRafe4WTggFBKu9fvtgizoLJq8Zbj:cO+w3utrne8RK/WTggFUu5vtTGJq6
MD5:	7D44C520C37FFBD0EAC5C4B3D3E63049
SHA1:	795DB04D626E137B439338D53D93F08E9BD152D8
SHA-256:	B2E091D8F5F42FECE940CC4FAA3B8386A10753364193E3DFAF706BF2A188B3CA
SHA-512:	CEEEC60CFDC65DFFFF20A4C66A141C4DC80EF2CE3F2EEBF5DA37F2A5D6A2B2C4B6927051B76BE53B31F69E0930F800FB5A3257C26851904AF47E01D5E315DAE9
Malicious:	false
Reputation:	low
Preview:	!function(){if(!document.querySelector("#lp-origin-trial")){var i=document.createElement("meta");i.id="lp-origin-trial";i.httpEquiv="origin-trial";i.content="A77GUxMF2gPljjeX2xdlt25iXAGDqu3SWLRaxp24NcNGz++ZE9fkggbPexLArxAguTbk/8W5OtGUm5ki+fqC0wMAAACSeyJvcmlnaW4iOiJodHRwczovL2xwc25tZWRpYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=";document.head.append(i)}}();

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4873
Entropy (8bit):	5.2268236765669895
Encrypted:	false
SSDEEP:	96:p6+5cDrFRe+/zH/pMWtPfHGHPiBwXA4nHjnwwX8ntj29X8nvDMwtKcDneTbZoDy:k+5cDrFQO7pMWtPfmHPiBwXznHjnwwXp
MD5:	ED927CF0F8A1BE103DF48446270416EE
SHA1:	F7B2BE7FC2B063AAC03E76DF9F3E19D615970213
SHA-256:	EBDD298DFD39A35E5F54469F12953081A17CBEA55F3A4A79C0FD4997D804F7D5
SHA-512:	FCA692C8C7B104FB00C2E6D90C1A0D52A0FF93CDA626338D8FA114A0E9DCE2504DF9282868F98A46648A6E616A96ACD14CAD0460D72477421C8F5EE8F7D34256
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
Preview:	.teachingCalloutPopover{position:absolute;z-index:10000;top:45px;width:336px;right:2vw;color:#000;background-color:#fff;border:1px solid #000;box-sizing:content-box}.teachingCalloutPopover .caretArrow{position:absolute;display:block;width:1rem;height:.5rem;margin:0 .3rem}.teachingCalloutPopover .caretArrow::before{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrow::after{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrowPosition{left:215px}.teachingCalloutPopover .win-icon{font-family:"Dev Center MDL2 Assets";font-style:normal;font-weight:normal;line-height:1;position:relative;top:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}#teachingCalloutDismiss,#teachingCalloutMessages{color:#000}.teachingCalloutHidden{visibility:hidden}.calloutMessageHidden{display:none}.caretArrowUp{

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2204
Entropy (8bit):	7.822161106312027
Encrypted:	false
SSDEEP:	48:c/6OXLRUeECSupeHh+XNIJVB8e69ZRte6F5VoxPxH4mB8buOz:cSipAB+XNIO7Rte6XVePR4HuOz
MD5:	63F209DF826F187C9EB6EA5C02CE0DF8
SHA1:	F7F7148B01CDABDD1555EAE8E7E7676ED38EA92B
SHA-256:	55BB42006E6FC43811ADDBB2061577D3F9DF22FDC63AC5F743529DA08D337500
SHA-512:	2F5168DBD8551023241B74B64DC8A1FA9B28388F989F7C26B30EE7A3593A79F9E4944009399576E799786EA3B4E16B3B3379373E56861A3A0AAEDCE87C298F53
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-M365-Office-Mobile-App-logo-111x111-1?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	.PNG........IHDR...o...o.......`....pHYs................NIDATx..olUg....9..u...[...[..h.tFc...A.0...%..-......-........1...H"8..J...uqnf....d.[.c.-.........\.4......{y._z.{.y....s.{n..b1....X...3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<....&V...'.Z:.#N..LR...G....)w]#!v.;.vN.}g.......0...8.....Ly+.:7...........]#.#..{.vFX....yuk.o.N>..[...X(.C.{...B}2..l..@.....o.}.....8;+.1....pq<..\|...\.._.Pdmo...C..]...>...@.G{.....3.."O..;7....K..A._T0.A.Q....\..x......:d..CS..U.......=.M.^m.xs..W...\|..G`...6..S<w...R...?..~.?......3.]...<...z..;..0.....G`..j...../..f...P.M..pD.....#.d_.. ...g..[p\|..........t................>...c.......TD/.....Qy$...R)..%.+.......T..yO...9nF`a.4fq..n<\|...u..,w/4..r?.......zS.....D....s..x.....Y;^q.'.,;..r...!......\._a\D......?.V..:.T.]._3 ...K._*U...U...[...!.....d....>n..'x."..\...A..s[:..p7.g\{.s.....t.O..'...Y..Q_6.@U..R.[.-..P.......7..3.}x......o.\|.T..B%..RC.p-....&B....AY...."/.%;.\.<#

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1166
Entropy (8bit):	7.804358401965295
Encrypted:	false
SSDEEP:	24:gG/dV6nzLY68an/Dk853+fn8R7WB1RqpDm4sn9kbo63:tsLYFa/X5q8RKB7qLG9363
MD5:	393ED96929DF4D3B861C71FD37D220CA
SHA1:	E95D35FB398807BD6BD7357046698FF4BC3BAE5E
SHA-256:	25849A4CFCAB967FDD64FA8B45727EFE1E4BF89BDBE0EB838F05603F01ACB97F
SHA-512:	E8A449D953ACD644AEBD92D7CA225414030055EAD96A989480D00102E96943E82A8B9506FA8D5DD699AB22102340F811C4360E8BA6D321DF08847D73348349D9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 z........K.K.>M .D".!....(...e:..k....n....\|.o.7...W>`.....i\|.y.zS.........P.."..+...?.!..._....N.)......'.......2.)\.....{..o\.H3..~.....,kl>..4..&...M?.{[....j.....gs.........=ywN.4.~q....b.m..>=...Gz5..L9......U.Q6?......../..~..[..K;..F....OJ.p.L..j.V?.D...]).u.^.('..O'...X....#...\|.f..eh8Z..Z8./.>..Y7G?..ix...l..jC...=;u....~e1..\|...#.r..t^....l.......<...?.<.....N.$.3.B.;W.....T...#...z..L.....g...i.....Z;D;.ZA.N...s.{3.J..=.g..C(...j..x...A.9.fc..W.?.#...S-......(=..3.......0.H..".qr.....n.3..w....{..3....w[..N.^..\....Am>.G.......H..qz.......M.......Y..[....%}.U.........Y.=z.../.........'ks.k..=...X.l.wf..\|..D..>.g.4.]..7>F...J.....%s...I]lZ.^..w[..\|.]?W.?0..~..#.(p. W'.v.A/pD..Uq...>A..."..i......H.}.Bh_fyg.1.k......p...H.....B(.Idy.>!G...U...C..p.uV...<.NV.8&w.3.&..eb..YZ..:...J.......#qw...4o...5}*}...G......=..QJ....-....=.$.n..b.n.[G............b...%...h..W.K.......".`=.#o .~..Y..b...`.-.U..T...A..-...

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29388, version 0.0
Category:	downloaded
Size (bytes):	29388
Entropy (8bit):	7.993008091542256
Encrypted:	true
SSDEEP:	768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e
MD5:	6E75A94D5F7170A1AB532D32C2A35755
SHA1:	9C1B6FFF544089941BBEDDBCF529C3F0B46D853A
SHA-256:	D87D0A7A7FE2C36D1DC093BFE56E9B81B311988789DBD3B65ABF811D551EF02F
SHA-512:	27CDBF98A3F42510EAEB28437E3C4661734B685D63EFF5E47364AC46B73DE617894EDCB19DDD9AFD955DE192CFD8BB755998ED609EC2C279E9AFAB3DB2583175
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2
Preview:	wOF2......r..........rq.........................`.....P..5..... ..m.6.$........ ..<. ....Z...Vf...-B..H.......`..^........1.......,.)..D.g.m[.......'...QQK..l!Q.......^.]Q.;...I:$..{t.C.".6.".........z....I.<.OX..%....iT.D.m.N;5y......../6jd.....iP.. m.z.....ltv...r..L....V/.%VfVfeqw..%u.,....Z.,z.....t ...5w.}..e..K.c..G.....6E...F.Q .&."&.....bd.hl.m.J.M......,..._6-.E..o.?..U.=?..l..%r....r..-k$..\|....5..[d...d........2.H...-..?Yp....9x\|...Z/z^G..=...?...l..79...S.r...uj.....u.'..jT...._&..xW`.)..Yakd.....O9.J..+..83.>!..'.`Hg...\|t..YXf..'m..B.....(,;.....2#.)..........:......W.3.....\|Q..f...Z.0vW.L.HE...c<.. U..0..?!.d..W......V./rDn{...B0..t.1...W m...@..Q.L.7.._s....m4..yk.....j.fJ..C........"....-..U.V.n..B..Zg....3..........u...nT....M7@...IQ..(..r........!...v^.s..R.... GH..&...~.......k._..?Y'.O......v...E.,....E...9..%.M...o.w..v(.a.K.h...A.......`...}^.h...PJan..Cl...t...E.@..J.c........+..@..6}OA...Q.\..E....0..2........vgK.O

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	dropped
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	dropped
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meCore.min.js
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 19567
Category:	downloaded
Size (bytes):	7118
Entropy (8bit):	7.969483056551195
Encrypted:	false
SSDEEP:	96:1JGRkN0TScf+4VozzFbsJnpmX9SuMOvwMwF8Xt/55ft7UXngzLWfn77A6iBeR:r2BVK1sJni9Sivq8X1XSX4WfnPA60m
MD5:	23A130FD6A6A4D521F68F6C77C1406D1
SHA1:	684E6D6E1761BDD1F5E8B87B483DDB822881154E
SHA-256:	A4C7A17478D3D3A921F14DC7D7B6E35C0FF4FDBAF410501FCC725B8F49E876F8
SHA-512:	F94F713EA1DF0B1CE15C28DF6BCE647F979095F180DF7A080D2672311BCC227AC9915B7753C2368672E4334F11DB8241DE29F7E1C45473697E399BA8BA81F844
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3
Preview:	...........<kw..........X.B`;....8`'N..M..`&.%5.AHD.....}....ag..]..Z.....w.h4..7[..h..........s....G.......n.k.R7...k.......m.....k.3.#....ZXE...[...2(..6%c..........d.fc`..,.J.%-..{.C.....D.. I.k.....,.~..aA\|....#){c..c......O..S..L8h6..?.4........$c.g3.[P.%$SH3.QdD.\?$cK&\|..Yw.;G...#Y....~.k.m&...g.......xf..}@.@...3..0AH..YC..y...Q-..u......e........P_.B.3..$}.]...8.bOi..Cb;q+PfO...CA.9p2.J..,......p9..0.S.ua..Zth...s.H..N....q-.>....^..^....mL.#.L.s%../.......[]...2:E...W...mJ..OT..h...y.(.O...g..e=r.g(>9y..-.....7.y7s.......)lI......K.."......H.@A..q`..I.........B.._.......".y...Z.Ls..k..Du.;....U9P`..E.F.6.Zqu3."...b.F..X8..?...\..}..sh.]V.l.h..PLye.%...O.X..C..5....J9F.h..@7U.k.<..O.`2.../z.H..Y........e.'g.j..o....V.....!'3....K.vdT.j5.o...4..Y..*.T]..d.f.....'.....q]/...V<... kl.,...BX...T.#.......- .N.`..$.. A..d.....f.j.]..Z..DAY..,.>%...S7.t...~6t.YPM.....%kFE..Uw.8..V."...+.s..h...A.S.};L.1.H....$.>HQ...Og.1..J.c)..6.X/a<.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	40535
Entropy (8bit):	5.329172101529111
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlb:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SZ
MD5:	F50D31809ACB60FA6C9D03A6DCDC1EF6
SHA1:	9AA762F1FF4DA9D6F058FDB63C07AA38BF66DF3B
SHA-256:	0B22C718AA3DF8AAF8D98526EAD4A61CF6179A64F962495734A4E208AF52B902
SHA-512:	A35E0E94CD1915E9BA7CDAA65F5061E437C08A3689125A6D3DA32C709B26645D01388F0F9ECF714C3C1BFA488AAE32EC973EAAF9F95065E28E050C47CD7B8A1D
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.38.0-release_1323031802/ui-framework.js?version=10.38.0-release_1323031802
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (387), with no line terminators
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.0802884301148685
Encrypted:	false
SSDEEP:	12:c7IYNgvlLL9EIHCdEIHYEEIHLcJk7JcBAX2x8p:ctyh/E46IJkYE2ep
MD5:	1D54EF912663F344CFA7B55B016DD0C7
SHA1:	56324935CFF42275A7F485205AAE477546E2B38B
SHA-256:	77B19B52E3DA15B983971599A97A0030D4984B5C3148AE70E4770112A337CA65
SHA-512:	BEE3005D4B0C7587D1B6C95CC4C41B7F4DCC7F36A325C7DFEF57E41CE4C8FC3700DAE34C4DE0F2B165DDE17201C7FB5799754CADC74D713A03F60552A779AB67
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/modal-component/v1/modal-component/clientlibs/site.min.ACSHASH1d54ef912663f344cfa7b55b016dd0c7.js
Preview:	'use strict';$(function(){$(".modal-component .modal").each(function(a,b){a=$(b).find(":header");b=$(b).find(".link-group \x3e a");0<b.length&&0<a.length&&(b.attr("data-bi-EhN",a.text()),b.attr("data-bi-hN",a.text()));b.attr("data-bi-compNm","Modal")})});$(document).ready(function(){$(".modal-trigger").on("keypress",function(a){a=a.charCode\|\|a.keyCode;32!==a&&13!==a\|\|this.click()})});

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1140508
Entropy (8bit):	5.695121574391395
Encrypted:	false
SSDEEP:	12288:cJsxRIaFlA05vbVfIVhixlLgabqLj1DXyxoBUTDeD5jU29o7ogyfBDo/jVqPR9uv:fx1l75SW9C3zO/Ht7HmQBxD
MD5:	32E0F638811A157F86AFCC7383631136
SHA1:	850B615ED5656DDDC286B93164B6CC837179FE57
SHA-256:	C96903A387F97B19B3400BF476E1FA6CB93C9E377AD78DE4C25B98362A22CD98
SHA-512:	682F9208C3E28A066AEC7341F6540EC593B3ADFE402CB1FDD66A28EC3395FE45BE10B35E229FA528D18A3B735C5AC30FD541C2CC59851C601BC52AA1B14E31D9
Malicious:	false
Reputation:	low
URL:	https://amp.azure.net/libs/amp/2.3.9/azuremediaplayer.min.js
Preview:	/* Azure Media Player v2.3.9 \| (c) 2016 Microsoft Corporation */..function ObjectIron(a){var b;for(b=[],i=0,len=a.length;i<len;i+=1)b.push(a[i].isRoot?"root":a[i].name);var c=function(a,b){var c;if(null!==a&&null!==b)for(c in a)a.hasOwnProperty(c)&&(b.hasOwnProperty(c)\|\|(b[c]=a[c]))},d=function(a,b,d){var e,f,g,h,i;if(null!==a&&0!==a.length)for(e=0,f=a.length;f>e;e+=1)g=a[e],b.hasOwnProperty(g.name)&&(d.hasOwnProperty(g.name)?g.merge&&(h=b[g.name],i=d[g.name],"object"==typeof h&&"object"==typeof i?c(h,i):d[g.name]=null!=g.mergeFunction?g.mergeFunction(h,i):h+i):d[g.name]=b[g.name])},e=function(a,b){var c,f,g,h,i,j,k,l=a;if(null!==l.children&&0!==l.children.length)for(c=0,f=l.children.length;f>c;c+=1)if(j=l.children[c],b.hasOwnProperty(j.name))if(j.isArray)for(i=b[j.name+"_asArray"],g=0,h=i.length;h>g;g+=1)k=i[g],d(l.properties,b,k),e(j,k);else k=b[j.name],d(l.properties,b,k),e(j,k)},f=function(c){var d,g,h,i,j,k,l;if(null===c)return c;if("object"!=typeof c)return c;for(d=0,g=b.length;g

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:Hfn:/n
MD5:	BEB5075867AC37A3C8903AB23A5ABA22
SHA1:	86A41106441F795558A31574CBD24D5403E2F054
SHA-256:	BD38B37956C818D4084814F47B69B7798F07AF7889D3D13DEBBD2D76ECB86095
SHA-512:	976D88CFEF9792BC882CA8BB7F7F784BB97EA2046999D67C43DD4C2391943238BF9EE3DECD50DC2495829E65E9281D999E1272B188B489B1AFF59AECEE3E139A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkV74dSiH35ARIFDel_Cl4=?alt=proto
Preview:	CgkKBw3pfwpeGgA=

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65179), with CRLF line terminators
Category:	dropped
Size (bytes):	65276
Entropy (8bit):	5.3532603082235495
Encrypted:	false
SSDEEP:	768:A5D99eR7s83Hw4oUGaOGE477KiIY0MnZez7S7nM1En0wEJPddhMJCvOWIjQS31F:uDmFs83Hw47ZO7S7nwEYvoQSFF
MD5:	49357BD476BF9E4BF2A6992AB7374F1F
SHA1:	5D75E26D106AD28B5700FE46E13C2EA4BD467AD8
SHA-256:	264532AF47B2CFB6620970592478C442A0CD429BECCEAD9D062FF5A91284DC15
SHA-512:	622A895FA8E419D80D2EB6EF6D310897C303E1226D7B83F78FDF19DBECDABADEE9D54BFFB7DFF4CF325DFB385EF44FA6C5D6407B86C9F5B3D04E3EDA31EADD41
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.45: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4921
Entropy (8bit):	5.222250141174727
Encrypted:	false
SSDEEP:	96:Axtrozr9Guzre0kre0/Qre03yre0BYrxp8LUaWyUavdUa5aUaFCRpaO49Pag+MPx:Aetc050l0L0CrxKL4yZdPaPCRV49N+M5
MD5:	88F3A78DC9998D2E19C6B045DDBD4507
SHA1:	F8DCE60A4BB6E8693FDA595CBA1E29208E853531
SHA-256:	74E48756DB80C95BE13382BEA1E5D62C7BD9B808C135FD4E02E063485F674572
SHA-512:	39D415EB8ADEC62896941219D3803AEE5995D176EECD586C57DEC3ECF40EE30F49071373634B6CC13790F2104FB712937AC9573C24E349C4021975E69A263D7F
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?ver=63d3","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeEndDate":"9999-12-31T23:59:59","activeStartDate":"2020-08-31T22:25:51","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1878)
Category:	downloaded
Size (bytes):	131929
Entropy (8bit):	5.545514636252842
Encrypted:	false
SSDEEP:	3072:2lGkl+cD0g33uACmfB1Y+cejk5m0o84LFH51bH:pk8gnues5m0o3LFHfH
MD5:	2E2C90A3B10D38230A0EA58B5757CF8F
SHA1:	DC78586F900A7E9CB85A61918A13966D1B2AEC29
SHA-256:	4F1CD2F2C6D2ACE26286776EFF008ADBA3BA5A0B28AFCD1060DB1F9181572FF3
SHA-512:	019F307C35DEDE9127936736A12040B2272724C2A96CB91A2A185AE0D9694FFB6C92E1C7922873726CC5EA5B9812AABA8DA4F9208A94B31FE1212247FFB6F782
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=923371515
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ha=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ia=ha(this),ja=function(a,b){if(b)a:{for(var c=ia,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var k=d[d.length-1],l=c[k],m=b(l);m!=l&&m!=null&&fa(c,k,{configurable:!0,writable:!0,value:m})}};.ja("Symbol",function(a){i

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158)
Category:	downloaded
Size (bytes):	7935
Entropy (8bit):	5.175600779310663
Encrypted:	false
SSDEEP:	96:jJ/nMdaBU+hx1fQeWYZRRTaQV72viMhKz7pCCtS5NI2Tmtnm8Gu8Qf8otFtMmOeC:pBfQATbJlnheBIeffKIjd1hfNR2M
MD5:	864A24D7C4A1097F30B215E79CB41967
SHA1:	CE21463CB4C1509C45EDA1B12FF71EF4AB578DD5
SHA-256:	7756407C953FC5FB0B4B2E965A32B5D129D73266F26A1A37D107C8501EC85767
SHA-512:	A83980A658DD2CF73DD711FAA09DED768E6C85E64E5A868B396B69BB7C6964643128D517F01A7873B247211631C6C2DA9E16559BEE3D44795997AA24FBB8A5DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RE4EIXC?pid=ocpVideo1&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>. CREATED BY VID TEAM -->.<html lang="en-us". dir="ltr">.<head. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">. <meta charset="UTF-8" />.. <meta http-equiv="x-ua-compatible". content="ie=edge" />. <meta name="viewport". content="width=device-wid

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65188)
Category:	downloaded
Size (bytes):	1076664
Entropy (8bit):	5.680656723962722
Encrypted:	false
SSDEEP:	12288:FItZlNRkBr1mXD+66Vbk7+pHibXK+PldQvKL7:S+Br1mTDWzibXK+PldYKL7
MD5:	FFB6932D920EA51A69D8B25CC31D8BB5
SHA1:	C398875A78C36B625368CF43E9F4E0BA7FF38E7F
SHA-256:	7F4672B236E18575A35B891DA1781D2D4070F4F8273BDCF46DF70B196BC19CDD
SHA-512:	DAA0264BB6F8154DE69261E6A69AB49CE5A0AD77A292FDBEC6CB8CFE26920FE6F9070CB64598F9FF12F625BC35822E2F5A584839015898AB7C871D7B48C809DB
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.38.0-release_1323031802/desktopEmbedded.js?version=10.38.0-release_1323031802
Preview:	(()=>{"use strict";var e={115:(e,t)=>{function r(e){return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function n(e,t,n){e(null,{verifier:t,challenge:r(String.fromCharCode.apply(null,new Uint8Array(n)))})}t.Z=function(e,t){e\|\|(e=43);for(var i=window.msCrypto\|\|window.crypto,o=r(Array.prototype.map.call(i.getRandomValues(new Uint8Array(e)),(function(e){return String.fromCharCode(e)})).join("")).substring(0,e),a=new Uint8Array(o.length),c=0;c<o.length;c++)a[c]=o.charCodeAt(c);var u=i.subtle.digest("SHA-256",a);window.CryptoOperation?(u.onerror=t,u.oncomplete=function(e){n(t,o,e.target.result)}):u.then((function(e){n(t,o,e)})).catch(t)}}},t={};function r(n){var i=t[n];if(void 0!==i)return i.exports;var o=t[n]={exports:{}};return e[n](o,o.exports,r),o.exports}(()=>{const e=crypto;var t=function(e){return e instanceof CryptoKey};function n(e,t,r,n,i,o,a){try{var c=e[o](a),u=c.value}catch(e){return void r(e)}c.done?t(u):Promise.resolve(u).then(n,i)}const i=function(){var t

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.7576002313728605
Encrypted:	false
SSDEEP:	3:iAE3BMiX4RXBMgX/UfVgVISfKxW4qUu5UtgseBWBZ8VNZOjmeJRNnXE1V+o+:iAE36iIsgP0KOFMLs9cVNKmV+o+
MD5:	8396009A793FDA25F0AD1C495EC773F4
SHA1:	C0143C8B9F459323B1AE10D739835E5C8546DC0D
SHA-256:	D660C1B711D4F046EC54D6681BF6B8664875AFA538957C7A9A874A9D09001D4F
SHA-512:	C11201AF295FB01B5B585CB3BE448E0573ED5B96C4FB24B2E63809CDE741D2B1903F00FCA14F760262E7045C6FAC47545C4B3D4E45F94A4C28C51B59AD6ECC38
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH8396009a793fda25f0ad1c495ec773f4.css
Preview:	.areaheading .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	5.226026021317682
Encrypted:	false
SSDEEP:	24:YwXyyRRvV3I1VnkOSasiYbqIhB1ChqzRAmmOKZTo72O2bC2RRSfuH99Jy:5xR8JVfSRArrLZs
MD5:	00F6C26DE9C7C0A1E7B10D8BB358E008
SHA1:	6BEBC2E9F973ACEFCA9B12BC0C30B157546C1D67
SHA-256:	1A798269DA4C197C27EAC4EE1C2C84D59CEB41A72F5E670EBD59484653CE1BFD
SHA-512:	8757F804366A0BE2C5AA8360C4397C2348625A6FFF74F3139A03853F36014BC0A4B1FBBF018C5071DB730B6371F22BF5E79A54A5B02899BC872A5D82E227ACB3
Malicious:	false
Reputation:	low
Preview:	'use strict';(function(){function c(d,f,a){d[f]="undefined"!==typeof a?a:""}(function(d,f){d=document.getElementById(d);var a=d.innerHTML;a=a.replace("jsonElement",JSON.stringify(f));a=a.replace("//_pageBITags","_pageBITags");d.innerHTML=a})("mediapixel",function(){if("undefined"!==typeof telemetry){var d={},f={};var a=telemetry.webAnalyticsPlugin.config.coreData;var b={pageName:a.pageName},e=document.querySelector('meta[name\x3d"awa-market"]');e=void 0===e?a.market:e.getAttribute("content");c(b,."mkt",e);e=document.querySelector('meta[name\x3d"awa-pageType"]');void 0===e?e=a.pageType:(e=e.getAttribute("content"),"Premium"===e&&(e="PDP"));c(b,"pageType",e);d.pageTags=b;b=a.pageTags.ProductInfo;void 0!==b&&(a={id:b.id},c(a,"sku",b.sku),c(a,"title",b.title),c(a,"prCat",b.prCat),c(a,"type",b.type),c(a,"family",b.family),c(a,"rtg",b.rtg),c(a,"lstPrice",b.lstPrice?b.lstPrice.replace(/[^0-9\.]+/g,""):""),c(a,"rtPrice",b.rtPrice?b.rtPrice.replace(/[^0-9\.]+/g,""):""),c(a,"cur",b.cur),c(a,"sku

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 149676
Category:	dropped
Size (bytes):	51912
Entropy (8bit):	7.994903470793642
Encrypted:	true
SSDEEP:	1536:CdjxrhowZmrSe9zUmoyfhKC4bl0v+bu08vpJfqw:CdhhvZorz3hWlRz83fb
MD5:	CD9AEEF65F998998C2A62AD11AB1FE52
SHA1:	0313ADE2716716ECA82B7CF3428EF4735EA7AEBE
SHA-256:	56C9F3CB9D325F78A6C2C541935EC990809D4E6336139840F7EB41D802C21D4E
SHA-512:	16E0ADDD9759610E6D2A808E7D7C30428C5CBC3C2FF0AC65401E30B5E7130ECD1ED57DA83D5125ADD173C24EE42F398DD0D56ED87A9493EDDF05A79D6265FC7E
Malicious:	false
Reputation:	low
Preview:	...........i[.H.(......KKma........n....3...l.e$...E...~b.L.d....<.~...)32.KDdDdd...k...se........W........x.g.............W.AR.......^..+QX..J...x..^.'.G...oR...c%}.+.8....Ie.$).....bBu.r...K...A.>.....J....<?..0J.._..!.6..0.+.p...`.P9..q.D.....?x..$3H...x._I..2....Q...R..g....C.!T8.../t0.....t..D..5BU.....F..h&Z..'.........Yu..l..r.L....8.T"..+4X.......@2y..c/.!.......?.aj...T..R......].4.N...-U..$~M.A..g....I.l..;...z..4.&...8H.f.. z..F...K../.../..?..p.c.T.f}hA.0z.P~.B....._..?...?@.D.Gg..S.@..\....6....\|..f.oQl>y0.vl.nxS..=.....n...v...M.p.>..j...&....H55..4J_.~..K.C.....T.....[...M\|..>.Mg../................=;.M.&.s=...........Z.Z...R.2...;_.;o8.E[.B......&..b?..a..k..@.I.......'.'.Z....\|.h.B>..&......s`...].gi....Z..A8\|}5S...... ).+J...Co..n.........!.....+H=.c.;cE... A/Ev../..".J.~..H..a.?....*tS1M.x.d....F>......TS..`V<.U..,..vH.S.....n@"..hm....\|>2....u\|;..taJV.0J...gZ..........a4.v..\|o...^_...O.&.../W...{.M.....M.BJ.....

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	2343
Entropy (8bit):	5.278059604921528
Encrypted:	false
SSDEEP:	48:2pCPKZdbWp170LQPJS28EVTCRU/Qxk49VMglbQ0i9rN:ZSeLgYYEwp7nitN
MD5:	CA0820E0B24021397AC8910BBD5A1F49
SHA1:	B08C0445D5BF68E10F013F4413CE6BDF5776616E
SHA-256:	11785773FA80E71FF0D843D5FA7B4474063C260D220890D7716A51F07F989D2A
SHA-512:	D7105E66514EDAF8E9C3F4FD7A085C88A0319C3D5B516641165A8D558DD6EE170D99D5326C9C2089D70ED38F007482FB64D58AA03237AF696EA2635D89BC28E4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/footnotes/v1/footnotes/clientlibs/site.min.ACSHASHca0820e0b24021397ac8910bbd5a1f49.js
Preview:	'use strict';(()=>{function b(d){var a=f[d];if(void 0!==a)return a.exports;a=f[d]={exports:{}};return h[d](a,a.exports,b),a.exports}var h={9382:()=>{$(function(){$(".footnotes-component .py-2 a").each(function(d,a){a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Footnote";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body"})})},8724:()=>{function d(e,c){var g=document.querySelector(".pagenav .bg-body.stuck-depth");g&&(e.preventDefault(),(e=c.offset())&&window.scrollTo({top:e.top-.2*g.offsetHeight-10,left:0,behavior:"smooth"}))}$(".footnotes-component a").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)?d(e,$(c)):(c=this.getAttribute("id"),c=$('[href\x3d"#'.concat(c,'"]')),0!==c.length&&d(e,c))});var a=0;$("a.ms-rte-link").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)&&(d(e,$(c)),e=c.substring(1),e=document.getElementById(e))&&((c=this.getAttribute("id"))?e.setAttribute("href","#"+c):(c="__f

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	4.771569345292879
Encrypted:	false
SSDEEP:	6:HLyrDRMBYGXP7QULsgP0KOFMLs9cVNKmV+o+:OrDRu/sU4LUN+Z
MD5:	40203E0BB3E24FD4626D84825F55E9C5
SHA1:	3E0142F78901BBE4AB11204D50FF37AAB3EE6457
SHA-256:	91B08794829C8062E7B13FBFEA9BF1E07C86E8DF911FF418C057A4127265361D
SHA-512:	BF10EB47B28EB2C540E6C21AABACED853FF27006B174E92A518B0E630EC880BD50276C434D183FD61C97C491796AF882635C17E5428A9D06A853C3BE806A5F0C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/footnotes/v1/footnotes/clientlibs/site.min.ACSHASH40203e0bb3e24fd4626d84825f55e9c5.css
Preview:	.footnotes-component ul ul{list-style-type:disc}..footnotes-component a{cursor:pointer}..footnotes-component .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36748, version 0.0
Category:	downloaded
Size (bytes):	36748
Entropy (8bit):	7.993571055882259
Encrypted:	true
SSDEEP:	768:J1RjXb4nQ5CZV6qEfz1mfNwUcf0Rn//WAlsuqjCf8qs2opmUrYSRc:RXEnQ5fzAlVe0R//WAx7b//Uxc
MD5:	88749B8058F99835F5A6B87FCC9CEDA1
SHA1:	A491726E067475E187E270D4469A96E016BD30A7
SHA-256:	F447D199F99F6EC55B5308B737A69F384032D3D0C1D05FBC41782AA50ECEB92C
SHA-512:	D595CC3E4220CB879389138D34B2DFBC9DC40EA5E83A81944FA73CBDFBBFC70D53285F8A11CEB921F55C7171EFB4A1242AE1819F0A505C0ECA06772357B2AF65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/fluent/latest_v1_95.woff2
Preview:	wOF2..............M....<.........................`..b........W.6.$..<..4.. ..X. [..QD`...P.<DT.~X..I...."!........_..M\|..\|[.'...FR.EH?b......0...J.....k...K.....[...1ir.x.I)\H...0..8q..... i....u.~..1...F..Cd........px~.=%..D.H.....(..@A......N..p.\.v...m..[.nkW...m...O]....6.7.;.'$....D.4..q.?.E.\%5S.UjB...V)..x...Y.C.........o....j..4@r..P{.H......f.....8 ..Q....(......f..8p....\d.....R.4......m........%r.K.....F3..I...!.k8r.d{4.OD&...0...r..B.2e.4u.....Q._...lR.v...F..p...J%IQ.j.....alI.D..&.?..... .N...Z=...G.%..o.N..I6.."u.j._.!...N..L...).&I...../..N.n......J].%....5.p.H.#+..dw..".h.."..O...i.D.TI..I.&.J...%g..-Y,.-.-',O.....y.gm.l3m+......Q..Q..P..Q....m......0.#0..1.........q.wp.....'..#.(..L...SQ*I...5..4.6.f.M.....ct.....E.......$9.K..sRN.i8...\.+s5..-.+...<.G....3x=o...^.e-YG....&.G......B.R..".W.S..C.X.W.UT..t=.H7..X=W...Z.]......T'LR...05L]...7#.....7........>.>..Q....q.q..Y.peu.s.pmq.u..4.,.\.....g.t..........DB.!.<v..\|R..E.G.E.]5.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4075
Entropy (8bit):	4.690132965151433
Encrypted:	false
SSDEEP:	96:fdcVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoW:fdcVWNXK3XuXW5K
MD5:	BCBD2772C0ABF8663D70F9B2FDFE1356
SHA1:	E204CE7B2E7794FE694ACC266EF5DD44537E0A8D
SHA-256:	E6E3F69ACE18B39FCC62B9D2994A97992D13E618DC909C8576F38E78692286A6
SHA-512:	70F7C20EF81B5ABE854EA8FDF7F4F5F6C2A1BB013F8E85AD43E447A221B6947189C6EE9E07AE32FAD71E0C1DC4F3A957AB0A6722088BCB60D0204080753EAF26
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/4000034.js
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	406
Entropy (8bit):	7.346558285877001
Encrypted:	false
SSDEEP:	6:NZEdXbXlsQEYXrObkAe5G0I2uASkyR4II0oa2+bOBJQzCX+UVpd+KJlm5kB7rbTT:4aQ9bUKuUylJY5+UHd+AmKbTOoiBs
MD5:	DC90BC17C1D337EEBA7FC831209DF9C9
SHA1:	FA81315DCAD5820B14FF557BC102481271709975
SHA-256:	2360F2AB13E6195008D913606126C601BDE2D976F0C02C3E235F1621D3CB2CDF
SHA-512:	61EDD10357239B329EE4A257E6CFE93BC8F4F41DB23F657EF3C9A6718017F45D8EF4C8DA2E2E311D8E70E40F3A2EC1A13E66D60970AC7838AB85F9092A42918F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........*(.(.>-..B........bZ@..P.w~@f..;./..W.?........C.....V..=.. ..............>..%...q.H^9.#........\|...z....xb...F............1.M..o..];/...-....e9F.B...Q..J...jk...^0i[.?.E../e..66C.+.G.....?..~i..........D..@...)G..;....2.M......c.J..G.\|x.i.;........w.\.M[.....xt..#...0..Y.m.X..R_....E.C_\|(#G?.....Lk.a......G.....,........Z..>.......d.O.L...eh...A.......~....

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (26071), with no line terminators
Category:	downloaded
Size (bytes):	26086
Entropy (8bit):	5.432818104736514
Encrypted:	false
SSDEEP:	384:us282x+ZOj5jMGgKAztoDx3SF/uuRcFoyJD53QDCMkDoEo91YGtua6ca+D+oOLcG:arB/0FxO4Qcr9SGYafV5G
MD5:	A923FB946929633E387E4D2017006546
SHA1:	84D3DCF57A9EF34EA731A1B28F9ECE4B0B267A08
SHA-256:	67A664918FD7F224CCE362DB7078440CD693E1EF6B30EFF33C06F112C17102FA
SHA-512:	A974D3511DD1ED3197BC6A90F9561CDB83120E99D8276C38E32C79005E59C5C7048C8652E3DF5A1DB06191B3B6793A4C75A5C2060CC12ACB36D1E6F31C2E6BFB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo
Preview:	.@media screen{-ms-viewport{width:device-width}}@media screen and (-ms-high-contrast: active){textarea[placeholder],input[type=search][placeholder],input[type=text][placeholder]{border-color:WindowText}}header,footer,hgroup,nav,section{display:block}.font-bold{font-weight:600}.ocHidden{display:none !important}.clear-fix:after{content:".";clear:both;display:block;height:0;visibility:hidden}input{-webkit-appearance:none;-webkit-border-radius:0}#obf-EmailCheckBox,#obf-BasicFormScreenshotCheckbox{-webkit-appearance:revert}.content-wrapper{margin:0 auto;width:100%}.main-content,.ocFB,#ocAsstHelp{font-size:62.5%}.main-content #ocAsstHelp{font-size:100%}#product,#home,#category,#endnode{min-width:1220px;margin-top:10px}#endnode{margin-top:0}#universal-header-search-auto-suggest-transparent,.f-auto-suggest-no-results.f-auto-suggest-no-results{display:none}.grd{display:block;position:relative;width:90%;margin:0 auto;max-width:1440px;padding:0 1em;padding:0 1vw}.grd *{box-sizing:border-box}.gr

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	4.917938721766698
Encrypted:	false
SSDEEP:	12:cYdIRGdIg8dlHEGI2/d4EhAdJd3F6lZF6xN24TN2QEbWNb93e:cmJJaFEwl473FWZFuNBTN55p3e
MD5:	79F5C41AD31C7E07DA446CBB8E641601
SHA1:	9173199CF25F7D8EF0533565E14CF34A83C91E40
SHA-256:	5B0FBD4BFA965B3A5429396C618D757A06D8E00D1C79380CC0CD89DAAA022933
SHA-512:	16AB36CAFF34CFDD1ADBFA9F8D85082C890D89896DC3C43897858FEF522756A423E98A0C3D9D48F22C361A0A984B5990D7CFD10B33BD4B152721FA90CF85192B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASH79f5c41ad31c7e07da446cbb8e641601.js
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!!(document.querySelector("#storeassistantroot")&&window.storeAssistantReactJsLib&&(window.enableStoreAssistantChat\|\|"wwwdev.microsoft.com"===window.location.host\|\|"wwwppe.microsoft.com"===window.location.host\|\|window.location.host.includes("adobedev.microsoft.com")\|\|window.location.host.includes("adobeppe.microsoft.com")));.a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	181466
Entropy (8bit):	5.554874109955879
Encrypted:	false
SSDEEP:	3072:Sfyz+8hxjR20cgOl4L9nH2BrWNeE5Q6nRyWK/wCG4X5GFnX45Ti6ZssSBodxD4t:Sfy6gFXxH2BrWwejZcwC15GuTDZtUgu
MD5:	B4F0B5100B03A879DD5D2E97636EFC37
SHA1:	72C5001013A7514373D5CC4918B0A0D95C65617A
SHA-256:	5BACAEE30D72B76D83BC5FDD190BF027CDD4C270CF7D081E487ABFB8EA63EBFF
SHA-512:	99BF0AFAF3BB642032669DF2E934BE7FACE9A95DD79E9BF59E6D565E6355754796B1F389B32DD12AFEEC4A95B5E627ED58C8C355E9828452448F6B7EA9F2EDB1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHb4f0b5100b03a879dd5d2e97636efc37.js
Preview:	/. Microsoft Dynamic Proto Utility, 1.1.9. Copyright (c) Microsoft and contributors. All rights reserved../.'use strict';!function(Kb){function la(xa){var ca;return(n[xa]\|\|(ca=n[xa]={i:xa,l:!1,exports:{}},Kb[xa].call(ca.exports,ca,ca.exports,la),ca.l=!0,ca)).exports}var n={};la.m=Kb;la.c=n;la.d=function(xa,ca,P){la.o(xa,ca)\|\|Object.defineProperty(xa,ca,{enumerable:!0,get:P})};la.r=function(xa){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(xa,Symbol.toStringTag,{value:"Module"});Object.defineProperty(xa,"__esModule",{value:!0})};la.t=function(xa,ca){if((1&ca&&(xa=la(xa)),8&ca)\|\|4&.ca&&"object"==typeof xa&&xa&&xa.__esModule)return xa;var P=Object.create(null);if(la.r(P),Object.defineProperty(P,"default",{enumerable:!0,value:xa}),2&ca&&"string"!=typeof xa)for(var $a in xa)la.d(P,$a,function(Ua){return xa[Ua]}.bind(null,$a));return P};la.n=function(xa){var ca=xa&&xa.__esModule?function(){return xa.default}:function(){return xa};return la.d(ca,"a",ca),ca};la.o=func

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	502
Entropy (8bit):	7.465743629081189
Encrypted:	false
SSDEEP:	12:7wIkGa85QxcGqFzcZVr4PE/j+MFPh86DC9ft:7wIZNBQAPkBFxDC9ft
MD5:	419F88E695A62CEC374CBBE759F11754
SHA1:	69509DDECB1B082020907299471177772DB59070
SHA-256:	2C13442D9CAA9698D2D10443EB6F0CFC395DD220E60763AE0C3A4A6044DB7603
SHA-512:	381537E55704202899317E4780520F66EC65C0F6CDF59633E61B7E880FB056379DFD539A3CA2C890BED3087DAE0F56550071C7738B6F372BD0514531F31F2B49
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Blog-1?scl=1
Preview:	RIFF....WEBPVP8 .........(.(.>)..B!..V.T..BZ@..G...lJ........`X........?.?...............W..../IHB.....nXv.N[~+..l.h2{..6.o.....b...1.6.s...<.<...[Q..w~....S.7..........s`\|..Q.,..B.....V...i?.cH.r>.%..j#9..q.eL............s....q...d....... ....X{.,.".x...e........._.....g..#..9./.:J.......!w......,$.,.....yG.s5....d.....L..r.9......0.>....*..G.q......#...F.5........}.'R..W..'.W.........1....... .........:......y.c1l!.. .X..:.7/7..a...M,....N.x.....`.j.85P.}{Q...q.E..T....0...

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 352725
Category:	dropped
Size (bytes):	101932
Entropy (8bit):	7.9975103438672415
Encrypted:	true
SSDEEP:	1536:56VpoRXw24C1n+hsRGxvOVV9C+j0r/aBRl75/JRPfs1rWOJdm/2cvfUXnbb32UH:Dw24C1+d8a3iB75/JRPfs1ujvfafpH
MD5:	B7FE6DD421C792F445730D6D393E72D5
SHA1:	BE98E042D67B647FE56204CA47FA8A59936305A2
SHA-256:	429189DDEF576C4DF5A1C59C39B21A022CCEC185E922F67C54AF13E8ACE7D48E
SHA-512:	EBAB66208BD6903B849106C1329F5A78B0C226FC05CBF6674110397BDA6057ECFF9A18941E7D7D0DE2841E5E6BC54F41A5D283614BBCBBFA2C19C92D6386C623
Malicious:	false
Reputation:	low
Preview:	...........k[..(.}....0R......;.7.'a.m0.f."..+1.#.!....OU.E......y.................v.\|....7.&q......jn>..t...\|.X.k.....5...u...(..y}.][.u....6._._...$.,...C....(fX.>.U.z..d.6.C?...E9.{9.n..5..U.^......w-l(... <...7(`57r.]H......./.....1.>.b6.4...u..C.`q...x;....$.f.[....>..`...d.}..&.l2... ....s...(T..5..........k../.6.5~w-.9,.....>...o..3..X....2....o.Q0a. d45..5.].GW..p...Y<.... .^uB.b,.t.a{..{.\|~.Ot.4.Oy..&..'f..I'..81....!.....vU...$X...?......0.p..M...d.M/..o.......evE3..............,Ip..'..?fW..\|x.D..v.2...3...{[k....6.~.?Y.....i.v..Y.m.x...v.[j&a.R.xV.....#q....A..p.../...@....\|c..x..g=X.x:^...?*':..(......}.G.P.....4..]...GC@\|k.tk....^g.d...1.......Vs...rj.."a...1...q.G.\...y.0.X.[?.;......k..x........4u...~.CdB".....:$`.y)..c3m...vt=......$....B..`i...0.>e.....Ib...~8.E..e..:s.:..`...9..&\|..d......>....>..O..A...,./.....v7...n.(...B..........._3=.2.=#.._.}......M.n+A.l..P...$...`.....L../.....\|.j....,o.>Ru..?N.K...Mp%1..S......U.(?..u.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65179), with CRLF line terminators
Category:	downloaded
Size (bytes):	65276
Entropy (8bit):	5.3532603082235495
Encrypted:	false
SSDEEP:	768:A5D99eR7s83Hw4oUGaOGE477KiIY0MnZez7S7nM1En0wEJPddhMJCvOWIjQS31F:uDmFs83Hw47ZO7S7nwEYvoQSFF
MD5:	49357BD476BF9E4BF2A6992AB7374F1F
SHA1:	5D75E26D106AD28B5700FE46E13C2EA4BD467AD8
SHA-256:	264532AF47B2CFB6620970592478C442A0CD429BECCEAD9D062FF5A91284DC15
SHA-512:	622A895FA8E419D80D2EB6EF6D310897C303E1226D7B83F78FDF19DBECDABADEE9D54BFFB7DFF4CF325DFB385EF44FA6C5D6407B86C9F5B3D04E3EDA31EADD41
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.45/clarity.js
Preview:	/* clarity-js v0.7.45: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10387), with no line terminators
Category:	downloaded
Size (bytes):	10930
Entropy (8bit):	4.777922581824855
Encrypted:	false
SSDEEP:	96:4CGjCf1IQNnJ0DuXGJzhIGcjfkfN9xekArvsAJKom+tmTjotKfCYzwsm1L+mFb:4CGjCf3Nn2DuWPlPIvPm+trQfCYiL+wb
MD5:	509E44BDCA06692FD924908DE96BE75B
SHA1:	2B68EABA6109F02706D13775CBC357CA40785ABE
SHA-256:	37D8CC7CC2283BFB3B3804CDD23E4B62A98EF4C0AA1C38DFA5A515D91B9A132F
SHA-512:	44E648E2433C01B879CF952AD1ACBAEE97EF82C18F846429019EF343E5272B568BE3BD9CC530E244E1E282D7CF42A1D215E79756968A4D82B845F0E242551ACF
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8
Preview:	..icon-fluent{font-family:Support Fluent Icons;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-fluent{font-weight:900;color:#000}.supTabControlHeader .icon-fluent{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-fluent{padding-left:5px}.icon-mdl2{font-family:Support MDL2 Assets;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-mdl2{font-weight:900;color:#000}.supTabControlHeader .icon-mdl2{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-mdl2{padding-left:5px}.icon-accept:before{content:"."}.icon-actioncenter:before{content:"."}.icon-actioncenternotification:before{conten

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 630x449, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	12270
Entropy (8bit):	7.983869236566813
Encrypted:	false
SSDEEP:	192:5zETpGWcscBLMx7e6R32yDHnmgyxpbmXEe38Ye0KwMalw/+mtejtl1GfpXO71mDQ:5zETQWclBg9eWHmgyxpbmXAYeEjO+0ev
MD5:	205681076DDE42DE458029AE24F251B9
SHA1:	938C68ADD9690223160F220DAA54A46EDD8B69CA
SHA-256:	4CC12636F7EEB674169CC839E665248D245CE5C038A9A4B706A93AA34045ADFC
SHA-512:	C21805A70659C3AF9FC91C0CE7BB49B056CFDBA73C0624A4FA631BD088A821AB4697D602B304500E544A91C5F2E9227B39279EA5306F5C18098CF129C230D778
Malicious:	false
Reputation:	low
Preview:	RIFF./..WEBPVP8 ./.......v...>Q&.F..!."1y p..en.G..).?....T.\|......?..+..Sma.&%......^.7....._.y....j.......?'.^............A_..........k..........yo............../..b..?.....7.....?...?...?..rt.........o.98v?._..-.7...~P......<2.#..~v...9.z.x.i..?a....6.l<.y..a.....6#..6.m..X/p^..L.a.D... .g.p^..nK.Hy.;.N..........L._u.Gq..&q....i.l@=............>fLQ...+.!.o...7H5.KM}X......."...?...5Ya..\O.!.B.......;....0p:..~`.........e0G.}..g..f\3.........C^..t.4.H~.g......oa..W..I.&...\.t'.0.F(...`.a.......!..y_/.'.".F.E<...a..'Zh.v}f....t)...`...L...8s9[.{d....d.nP....\|@D....x....v64e....?Y.A^.it. ...n..:...Y.u..}.rx.<.V......i.../V8..[.U.j"..E.?O<..>...b..Ft`".Z.c.0].)eP.19....[F.v.Y3.tm.....Z...{..jv...b!^....Gh.G+...m....dd......B.a[.?.V.d..\|J..Z.}wB.p/._. ..0./...N.%+...O"].....GXW..v. E...>H..g.:o.;.....EI.".xy........6"@....?.(...fD....o.&.~...&..\|...O.T........=...Dq.}\..d.h:..;.<`.........s....\|ei}.l...CL..M..5.d.'...nZV.\|-....

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 19567
Category:	dropped
Size (bytes):	7118
Entropy (8bit):	7.969483056551195
Encrypted:	false
SSDEEP:	96:1JGRkN0TScf+4VozzFbsJnpmX9SuMOvwMwF8Xt/55ft7UXngzLWfn77A6iBeR:r2BVK1sJni9Sivq8X1XSX4WfnPA60m
MD5:	23A130FD6A6A4D521F68F6C77C1406D1
SHA1:	684E6D6E1761BDD1F5E8B87B483DDB822881154E
SHA-256:	A4C7A17478D3D3A921F14DC7D7B6E35C0FF4FDBAF410501FCC725B8F49E876F8
SHA-512:	F94F713EA1DF0B1CE15C28DF6BCE647F979095F180DF7A080D2672311BCC227AC9915B7753C2368672E4334F11DB8241DE29F7E1C45473697E399BA8BA81F844
Malicious:	false
Reputation:	low
Preview:	...........<kw..........X.B`;....8`'N..M..`&.%5.AHD.....}....ag..]..Z.....w.h4..7[..h..........s....G.......n.k.R7...k.......m.....k.3.#....ZXE...[...2(..6%c..........d.fc`..,.J.%-..{.C.....D.. I.k.....,.~..aA\|....#){c..c......O..S..L8h6..?.4........$c.g3.[P.%$SH3.QdD.\?$cK&\|..Yw.;G...#Y....~.k.m&...g.......xf..}@.@...3..0AH..YC..y...Q-..u......e........P_.B.3..$}.]...8.bOi..Cb;q+PfO...CA.9p2.J..,......p9..0.S.ua..Zth...s.H..N....q-.>....^..^....mL.#.L.s%../.......[]...2:E...W...mJ..OT..h...y.(.O...g..e=r.g(>9y..-.....7.y7s.......)lI......K.."......H.@A..q`..I.........B.._.......".y...Z.Ls..k..Du.;....U9P`..E.F.6.Zqu3."...b.F..X8..?...\..}..sh.]V.l.h..PLye.%...O.X..C..5....J9F.h..@7U.k.<..O.`2.../z.H..Y........e.'g.j..o....V.....!'3....K.vdT.j5.o...4..Y..*.T]..d.f.....'.....q]/...V<... kl.,...BX...T.#.......- .N.`..$.. A..d.....f.j.]..Z..DAY..,.>%...S7.t...~6t.YPM.....%kFE..Uw.8..V."...+.s..h...A.S.};L.1.H....$.>HQ...Og.1..J.c)..6.X/a<.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	918
Entropy (8bit):	7.758631574599825
Encrypted:	false
SSDEEP:	24:7u4rYtBvoHsbJIecLaeIacWoCBu9YGcbyc4Ucp3ll:dY3voMlB+aQOCBuTQleP
MD5:	173D80984367F7B3AA3EA90545A5F255
SHA1:	72CA9D80BC3C47377288807AA4A923806772B3EA
SHA-256:	240180CA94EF88847E2D92CD212ADF48976659B10D8A9B4BEB95F088B2139BC0
SHA-512:	6CE5C4F9EC30584868B88F8596676CD7464495D9A364D19E6FE8A976F70959A07BF74182AB1E63A7ACC9B6510CD60CF4C27A04533D0C9DA044CD35D35D9D80FE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0....K.K.>Q".E.......8....d.............w........}.g.............._@.-off..a.......e.K...h3..>...\|.ZL.!....S....!..f.{.qOhk.."....L'......q..k..=7.+.r.._`.4.N......?.!.O)...(~.....C.FZs....7.+.v.9..~H..O^.]...`ge...jn.\....L....e...O.t..0.....h.jj.uy..?...&.kQ.....d^.<O...K..=.].T...9.f.$...b..&.j...-.0...V......\|..[.O.....Kv..}...z..b........S....W ..i^..6Q6+.6./].)L%....9..$E..kz.$i.`..P...6..3...vO..b....g...b.4..rm[.R.p..L...v.YB!...}W.7.^z\|7.?...k\.e./PC.Q.F...[;....H..%w..^.,jO.........?.t.t....Sg.'.. :...BO...N.@49.L..2..S.\..S`...z.wLX..{...T.w...V.@y...t..K.).......U_./..............5..0.S.'R'..8...^)x.T..$..jWT..W#...P...j._].....:..A.!.m.#.j....ko...@.D.$..g.{..."j...,#F..y...9w..\|..9]..-....Cv0...fg...;..2A\|"59.......G.X......c.....0.`...r....-..h...1..j..(...e...}g8?.......F...:I.Ne..%.a&...xtW...T{...a.y9.....B.......

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.170914521951841
Encrypted:	false
SSDEEP:	3:S0KBRqSABJTiAUYFgW:S0H/TifW
MD5:	9F23F2E42529DC6328DDB0515A9528B6
SHA1:	9F99006DBD946A1331D006C036EC15C8F107C767
SHA-256:	215DD330DBAC4B685D846B2851CA780649411B1883CAB7740A89750C7E072E64
SHA-512:	66DA9CAACBFD30C7E22B74855A58C15F00A72B96F2C2B358E3D71F8AB45682BC588BEED70C5DF3BD3C8E6DD3D2E6EE03320EA9BC2FD5DC09AAD75D38B0776EAA
Malicious:	false
Reputation:	low
Preview:	HTTP method not allowed, supported methods: POST

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1350
Entropy (8bit):	7.78408071214036
Encrypted:	false
SSDEEP:	24:3rG2ZQYIZj8OnhXWBF9cSlruwm6hmK+z33H+BYkIVKomVZH0E5/:3rG2QYIh1XcPcShuX68nL3eYkmYZU8
MD5:	E3646CA4C91B4EBA0EF9C34B68C10EE8
SHA1:	FF82AA498D6625E6F0159CD7598FF09E19F7EA02
SHA-256:	8D013450CA90E6FDBDA607010CC6284FF2D6E6623A7E6F9E2B8848454CFC1762
SHA-512:	072DA3A4E09D59C62EA87F91106B886991C8B030F7CA2C0C81879468109A3D7555C10438C6D42D7769E4EE008E86E4CE44FB01BB16D159F84E0EFEC76069974B
Malicious:	false
Reputation:	low
Preview:	RIFF>...WEBPVP8X........n..n..ALPH.......m$I:....O.0DD~ (...Fg.U...3...YF...t...Nf.\.\E..c.3.m...5.Mn.m.....^D.'..3?XXh._....K.F.I3.g...DHl....I..T....)Q...G.....\|E.Y....mV(.X_....E....qE..U.5...q.(.q.d.@....%...TB.ex.....R. 7.0.7........d...0\.84..A.7....%..P..i.=.... .t".P.!.K.X.i.!.#MC...z!X.;..B..a...D&o.l...L..n@.y$ L..............ok....,.....?..y.A..&...3...Y/u..v5.WX.&.....j6..R./U.,V;.6.Q#a..r.....VP8 .........o.o.>Q(.E....K4h8....<c._.7.....4.u18.....`?d.`=..@=..@{..K.+.........q...e.k.....ev..\@.......0o........q...W....T:bc}..`......\.HyT...w.&.)_...:X..E.xK..3!...W2.+... .`...+..f{.......9..#..s...i....n.a......U.q~.....1.'.j.X..s.j.^{.09.b.}>[n...ko.....=...<..F....I..v.......?..$....K.#....:.J.7b.hY....d....b..............;).)..2...1lm.T...\|@..>..s.k..."..#.K......lx:..,..F.Xv.o...'... lW...n\.....8O..............L.?T.5........m.....Z\|{.%].....U3.5..$.B..D>.)'0...Ik.w.f0.6I<..G.@9q.........:...@......%.J...h+kn&T..(m..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27332), with no line terminators
Category:	downloaded
Size (bytes):	27332
Entropy (8bit):	5.48233759733871
Encrypted:	false
SSDEEP:	384:sQ43HT5jFkfHlHOF1cCVVbO8IkFzjBCK2be7R1G1E2Jnkef3:sQKU6OCb68IkFRCKSV
MD5:	4502CFFD9A049B7D23CF17CC2DE9B80D
SHA1:	2150B19E2378B68F766A958A1408E599C556BE44
SHA-256:	2823FBFA7B9256867E21AF1ECBFBB98583C8EF0E0B495F6F01D862EF58E3D93D
SHA-512:	28CE499A0787323277957763ADE1B7F5341E547CF82ECE2E4B7CD4F35B250B48F87596CF2E580D7400FE5FB35D73493D932781E851E254753A61EF123EB2EA32
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/tag/tag.js?site=60270350
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.13";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var c;a=a\|\|e();if("string"==typeof a)for(var d=0;d<Ha.length;d++)if(Ha[d].env===a&&(b.tagletsPrecomputed&&Ha[d].tagletsPrecomputed\|\|!b.tagletsPrecomputed&&!Ha[d].tagletsPrecomputed)){c=Ha[d].tagDomain;break}return c}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.h

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	140778
Entropy (8bit):	5.44675798903284
Encrypted:	false
SSDEEP:	3072:WqiL9gAam/uphj/wkMLfMZ4jMFHTuT8K7He:oL9g4UlIm5HSTL7+
MD5:	94FEEC31F6FD531C80B08FAE26EB275C
SHA1:	96F904FC6D751F8CFBA18D506CB1067CB0AC25FC
SHA-256:	1569DD95C870F769B2BC3909C52C08303956BEF7DFC288402D3B8BB13148BC10
SHA-512:	EBFC643C65EA79F4930AE22AA752C79252B91D97B0A5BB4407D262BAF76C2BA84A05D0064E095D4DFC9BBE727B38428FF1D741C045F0B5A85ED38ED0A1A3C3C3
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js
Preview:	/!. 1DS JS SDK Analytics Web, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var i,n=typeof globalThis!=n?globalThis:e\|\|self,r={},e="__ms$mod__",a={},o=a.esm_ms_analytics_web_3_2_18={},c="3.2.18",u="oneDS3",s=(s=n)[u]=s[u]\|\|{},l=(l=n)[u="oneDS"]=l[u]\|\|{},n=s[e]=s[e]\|\|{},f=n.v=n.v\|\|[],u=l[e]=l[e]\|\|{},d=u.v=u.v\|\|[];for(i in(u.o=u.o\|\|[]).push(a),t(r),r)s[i]=r[i],f[i]=c,l[i]=r[i],d[i]=c,(o.n=o.n\|\|[]).push(i)}}(this,function(n){"use strict";!function(e,t,n){var i=Object.defineProperty;if(i)try{return i(e,t,n)}catch(r){}typeof n.value!==undefined&&(e[t]=n.value)}(n,"__esModule",{value:!0});var c="function",u="object",fe="undefined",f="prototype",s="hasOwnProperty",l=Object,g=l[f],v=l.assign,y=l.create,e=l.defineProperty,T=g[s],I=null;function b(e){e=!1===(e=void 0===e\|\|e

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 72x72, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1336
Entropy (8bit):	7.836985315662581
Encrypted:	false
SSDEEP:	24:X5PVfVApJsZXS8q8l8dsfjPOAP1csq9PrImC3R4S69kzsFgk+LdklQLPRHOq68rT:zipJstS8T8YxHisxqS69SPXdyy5167Sl
MD5:	59551AF4312B06BED20AC0DBC6E3220D
SHA1:	0F8E555C18342CD89770DAA7D620B8F58130AF25
SHA-256:	752BDB769BFA76D106F33B06B522E80EB74037BFBBA8A6CD86DB1632B6101207
SHA-512:	D35DB3B1117C4167EB2FCF5368D2BC3FDDE3BCA34D8178DFE19CE8F2EB0065FFDD4469B764FE9E7D1326923C3E99993753AC15ECACADB340A02697EE5A556960
Malicious:	false
Reputation:	low
Preview:	RIFF0...WEBPVP8 $........H.H.>...A.......a-..7(/.?.;p..-.7...]..]......./v...N~R......tO./....>...}.?C....d},...C.I...../....#..O_._.....A..."KL....... ...}....=...s.....&~....D.......w..$...!.\|U....Qg....7].c...........w..m.......J,6.4M..2~n.bK.._.lc.............$.....2....X._.Q...{..[\|_.L.t...S=..w...0......c=&...AL.B..p....k.....Qu^.D..1g.qH...I.......%.YO].k'..#.....WTdk2/&?v.....$.c./..O....t>.oN..&.y....V/s.q]...y_!Q..}.M.....#./..=..H&G.4.\|...=d'...YD.l...V.f..ju..L.,...W9r..8E....[ G..il8.{..X...P._s.&......{y......g..Gj:..j....N.....LNP.S.[3i1...}.c<.k.......1/e...$....."...[_.S$.H.4B..b.....P.9!....)p....#..Y..vv.\|yA.!.9....`M.Q.K....9..!.+.q.D..I.T......e.FC..._\|.;0..g.9.)......w..............gz.]~.e...<^..0.&.Y-J02.Z.O........O...:.Y..v.di7%79.......}.%.+Wf..f......>.l.X$...0.m.[..G-C.............n.............bS.\.O.q...w.I.L..7.#.p......vM.".fI...^"D4.....K.&..J....g.J....{.6....*...2 /e..G.I......_.VI.-.m..n....9

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.343868368875436
Encrypted:	false
SSDEEP:	3:H+PKT/+DthGDthGRY:ezGG+
MD5:	48A7B7FF833AB1E337121EA8063665E7
SHA1:	CF841A2FB89FAC9D27355FE39F41619D75D19413
SHA-256:	37EB525CDD914FD20B1CF32EF4F5823DB403D67E3325EA098B64E9D3AF85E31F
SHA-512:	90A78328AC3178C1537A8D9EFEFE2941688783DAFD29DE1E1C12557AC5B38D6A56659AC9E516AE77D5EA1748E1D0B28E8CDD54D16393F19F6E74D3847FBC6262
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmetj_1dSiwuxIFDXoqIIkSHglPXFRxhTdsqhIFDZFhlU4SBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	CgkKBw16KiCJGgAKGwoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1118
Entropy (8bit):	7.772764450927152
Encrypted:	false
SSDEEP:	24:tWcBiJF9oGyQ7Um3g3DAt9fQTU8loa6f1A2WNZ9ujlfg:koE63EnKlY1A28Sg
MD5:	6AB5DB4B3FF17AB7C2F368003972A34B
SHA1:	0FF70AD3AF4CDC43E3ED1F4A505E450B9A4AA399
SHA-256:	BBAC9EC6DA00D54A354475695830F4A25D774BBF543190C3E307CDB1A5704679
SHA-512:	7EBF1105BB5CF4C69CE8731C211B3C66A30B7B307E9F69B86DDF79CCA0A4409F516A9FF89A802A1D13525E9D77EECF60C3A3FBA3F05B7B503431EC770F5D6397
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8X........n..n..ALPH)......$G:W....>....$.o.sr..w.u.Nb.{mZ.....9i9_N..?`.m::.....m.....=...".?.pf..._...bA0>...=.;.#.....{~../.......$.?.;.<jE....-.Z..GZ.......Ol..-.^#.N....c.52Z....d..4!..'.X".]B.5R\|..F.)...9{.z...~".v.C........ ....]+...LJ.[%..D.Z..B..b..P1..r.9.O...yt........?.wBM.W3:...!.....hBqZ.....VP8 ....0....o.o.>Q".D#.!...l8....._....{.]?@=.=.y@u...t...z@7.'..g...w.......~...z.\|`..'..3./..Q./.\.O...I.'Cn...aj.8..<;..........,)/.hp.......^. .U.L.\|D............\|..B3..h?.x..Z.D.\...G.`W...M.......S".g.v...Xl...\|b.G..c.s...gXWS.@.._6.7...9..]..B..@..+.9\|.........j'..f..m.......Vv.a9...6..Zl.4g.+.\|^........!.cWt.9.....1........w...r..x.....P.:..\|..bG.s..#.4.F.J.62la...`..eyK.,.bG...._=<....^..u.T..s..[..p.\|.a.e....../.=..\.......k.&.c.'....o. u.y...7..p......}n....z..<..\|]m...f.M..rO~f...=.?..`..'w..`..i....f.W{ ampE......_..8;...r.....s.e.v,..j....).<..5...g..5t./....x....%.)3.H..T.~Mk.?:3<..A....i..6 g....(.N...0/..7..\|.p.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789), with no line terminators
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	4.949297796790656
Encrypted:	false
SSDEEP:	24:s02Yxod02La21d02/YKdXSd02WwKnccd02+49XX3Xsd02wGy/rd02XLryWrrd02O:sAwzXH2+9WqXHXW4GuJ/v9M
MD5:	49696FC959CE2121F8FC42BC0A295EDF
SHA1:	353FE5D1F17B396C81383059C66E73574991A78B
SHA-256:	E0CFF5C0E0126AD78EB3DCDDA610AD22A32FB4AA37EBA19FEA990E8C3AB3918A
SHA-512:	AF4C277F64FD43CE18E94EE797FB7C4B3D19BD84B0741DFC30AE6E1FE77809EBB36CAA0341A4A86405D275E0AF63A951E488370F4A689636560049AA71084E05
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo
Preview:	@font-face{font-family:"Segoe UI Bold";font-display:swap;font-weight:700;src:local("Segoe UI Bold"),url(segoe-ui/west-european/bold/latest.woff2) format("woff2"),url(segoe-ui/west-european/bold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Light";font-display:swap;font-weight:100;src:local("Segoe UI Light"),url(segoe-ui/west-european/light/latest.woff2) format("woff2"),url(segoe-ui/west-european/light/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semibold";font-display:swap;font-weight:600;src:local("Segoe UI Semibold"),url(segoe-ui/west-european/semibold/latest.woff2) format("woff2"),url(segoe-ui/west-european/semibold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semilight";font-display:swap;font-weight:200;src:local("Segoe UI Semilight"),url(segoe-ui/west-european/semilight/latest.woff2) format("woff2"),url(segoe-ui/west-european/semilight/latest.woff) format("woff")}@font-face{font-family:"Segoe UI";font-display:swap;font-weight:400;src:

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	5.226026021317682
Encrypted:	false
SSDEEP:	24:YwXyyRRvV3I1VnkOSasiYbqIhB1ChqzRAmmOKZTo72O2bC2RRSfuH99Jy:5xR8JVfSRArrLZs
MD5:	00F6C26DE9C7C0A1E7B10D8BB358E008
SHA1:	6BEBC2E9F973ACEFCA9B12BC0C30B157546C1D67
SHA-256:	1A798269DA4C197C27EAC4EE1C2C84D59CEB41A72F5E670EBD59484653CE1BFD
SHA-512:	8757F804366A0BE2C5AA8360C4397C2348625A6FFF74F3139A03853F36014BC0A4B1FBBF018C5071DB730B6371F22BF5E79A54A5B02899BC872A5D82E227ACB3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-partnerscripts.ACSHASH00f6c26de9c7c0a1e7b10d8bb358e008.min.js
Preview:	'use strict';(function(){function c(d,f,a){d[f]="undefined"!==typeof a?a:""}(function(d,f){d=document.getElementById(d);var a=d.innerHTML;a=a.replace("jsonElement",JSON.stringify(f));a=a.replace("//_pageBITags","_pageBITags");d.innerHTML=a})("mediapixel",function(){if("undefined"!==typeof telemetry){var d={},f={};var a=telemetry.webAnalyticsPlugin.config.coreData;var b={pageName:a.pageName},e=document.querySelector('meta[name\x3d"awa-market"]');e=void 0===e?a.market:e.getAttribute("content");c(b,."mkt",e);e=document.querySelector('meta[name\x3d"awa-pageType"]');void 0===e?e=a.pageType:(e=e.getAttribute("content"),"Premium"===e&&(e="PDP"));c(b,"pageType",e);d.pageTags=b;b=a.pageTags.ProductInfo;void 0!==b&&(a={id:b.id},c(a,"sku",b.sku),c(a,"title",b.title),c(a,"prCat",b.prCat),c(a,"type",b.type),c(a,"family",b.family),c(a,"rtg",b.rtg),c(a,"lstPrice",b.lstPrice?b.lstPrice.replace(/[^0-9\.]+/g,""):""),c(a,"rtPrice",b.rtPrice?b.rtPrice.replace(/[^0-9\.]+/g,""):""),c(a,"cur",b.cur),c(a,"sku

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4370), with no line terminators
Category:	downloaded
Size (bytes):	4370
Entropy (8bit):	5.070419363669657
Encrypted:	false
SSDEEP:	96:yUD4Nf5fpk+9/FPV/A/xtrmAxdAe8RiM1MTMNOMx7UIF/A1ERu84jC7UO7Flt8zx:b4TJ96rrmAxdAe8RiM1MTMNOMx7UIF/o
MD5:	5F05B23BAD0F2D477C4E6B9266F99A74
SHA1:	E6CC0BE0A86B8330B4FD16CE8EB27614FB313B40
SHA-256:	70099F944DDCE86C3B9E24CE88C3C489EF4C63CEF20C4DA64A5DC33BBFE36512
SHA-512:	664E997252C7A41F8D4E7A3FD34592D25809AFCD4EF9FB7A2542F9A3C05FC8F841D5F7E58DBF0A6F00C255F43C6A36D6597DDF5C7A0FFC049994002CC851ECB8
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
Preview:	/! Copyright (C) Microsoft. All rights reserved. /.uhfupgradeBanner{display:block;max-height:110px;border-bottom:.5px solid #aeaeae;box-shadow:0 1px 5px 3px #ccc;margin-bottom:10px}.uhfupgradeBanner .uhfbanner-container{max-width:1640px;max-height:inherit;display:block;position:relative;width:92%;margin-left:auto;margin-right:auto;padding-left:1vw;padding-right:1vw}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper{display:flex;flex-wrap:wrap;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-content{width:75%;align-items:stretch;float:left;position:relative;padding-top:1.5em;padding-bottom:1.5em;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-controls-wrapper{align-items:stretch;float:left;position:relative;padding-top:1.1vw;padding-bottom:1vw;width:24%}.uhfupgradeBanner .uhfbanner-controls{float:right}.uhfupgradeBanner .promoHeading{font-weight:600;font-size:20px;margin:0;position:relative;font-fami

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	977
Entropy (8bit):	7.1708756868544326
Encrypted:	false
SSDEEP:	24:+cKYj6LJzSiTOPCTtOXS3PY/2hj1soPnsVeT0:+cKYjwJ2mCTX222wII
MD5:	1317A3DF8879D088EFCF7B8708DE0A41
SHA1:	E3909FAADA15803C7013893C27025E2B40129BA1
SHA-256:	54D513EEE6A82B780CCB312753DC70CA1416A6D18375E3928E1F4571E44055BF
SHA-512:	C1FDD053444AF70CCCF4D799AC58EAB8AC6F9B357C016F4A12DBE72D44D900A7520B35BF431C8FCA0A8556CA1C4A0E10F6EC3B3022BB86E35810795322527721
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Gldn-Editor-app-icon-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......Jh...B2.......a .@.....s.,....r.@L.$.%0%.+.R...p.K..~..=.D.......g.Z0w...9_4..b.".}.Sku..y8.^.{...q.rY.?....c......}>...m..qR5Y.TtXK.zU`..bM.....M.T....5o..z{?}(..v_.#4..77.B]L.3.25..........I.7.l...........)K.&~\|...xlJ$....\|YX.:k6...Wk....[]..M.U...@.w...BBC..@..N<eE@..)3.. ...C..z.r%`r...r.?h.......E....%.H.3........`.qJB..S.#vlb.2K.y.U..1.z.>.....$.)%.<4;......Y0....T.r....../..M..d. .h..AN.,(.tuT.^..MB....j...<.3w%.o.q...U.?R..L..SCW.?.,...u..h..........I65..!...PC.KLt..pw.e.e.:..h......J...~..)5..L.".........Q..Lr..n.C.\4...d(.>Y.#..U."+..ZA........l.#...G.Q.M9k....j..W].^Q.5....f..Y.....Q..(..Q1.:.9....#.7..5..7(.0..1.+TX....X..5..X.~....YW.>O.0..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1578)
Category:	downloaded
Size (bytes):	337204
Entropy (8bit):	4.9709486402799286
Encrypted:	false
SSDEEP:	6144:NqP3gQQQZQXXUXpXr5ZHb/d/6yO9QrHhFB9NdvTH:75eYXUXpXfHb/d/6yO9QrHhf9NdvTH
MD5:	283B5D1DBF0B9FB647D9468B36C3FB4F
SHA1:	BD89DC41E2DC37A57B6147EDA5EE0564E571EBB2
SHA-256:	8AA6D7B165A080A5B7A8D267C11B2708A71E94491617342115A750256AA4C75C
SHA-512:	3092DD8BD6E45BAC3DAD5C9A8ABD4CA908700D3B628D144897189456415B7AACDE5DB4D3F1522139B6086E15FBCC1995797BE6A52D2118804448D09DE26527C5
Malicious:	false
Reputation:	low
URL:	https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.js
Preview:	var engagementFix = (function () {. var engEl;.. function focus(eng) {. //Jaime MR test change setting upstream. // Run if a button was detected. if (eng.engagementType === 5) {. // Look in dom for a role of button. We only need to do this once because each button load will cause this to run.. setTimeout(function () {. var button = document.querySelector('[role="button"]');.. if (button) {. button.removeAttribute('role');. }. }, 200);. }.. if (eng.engagementType === 23) {. document.querySelectorAll('[data-LP-event="close"]')[0].click();. }.. engEl = document.getElementById('chatEngagement');.. if (engEl != null) {. setTimeout(function () {. document.getElementById('chatEngagement').focus();. }, 200);. } else {. setTimeout(function () {. var engageme

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	4.128123174442886
Encrypted:	false
SSDEEP:	12:goUnHzVl8+VJ22voEjxd/tiDwFnaIC5ir8jTo1ubjT3p6Cu:g/84vdr/tkwnaBiYvoIbvZ6Cu
MD5:	4E2C42B9D8FD251A1EA6DD1B2B99D50F
SHA1:	C1E7BB1B537AA8DEC3FC456ACC62F6BA8D06DBA4
SHA-256:	631CAA933DC9B93CBB81F3CBFF68DC01DE7C345C76262FEEB64715723CA411FE
SHA-512:	2B4C3BDB8219F05FA8348FBF94EB65F93710DAA513DB6E42D3BEB29894A9C0CCCA500EF27231386C1B2A7B22BA9679D344D3918E0D27DBE5D1B466F92870D7AD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/sites-modal-component/v1/sites-modal-component/clientlibs/site.min.ACSHASH4e2c42b9d8fd251a1ea6dd1b2b99d50f.js
Preview:	window.addEventListener('DOMContentLoaded', function () {. const ctaList = $('.modal .modal-body .link-group a');. const urlParams = new URLSearchParams(window.location.search);. const ocid = urlParams.get('ocid');. if (ocid) {. ctaList?.each((i, cta) => {. if (cta.getAttribute('data-bi-ct') == 'button') {. if(cta.href.includes('ocid=')){. return;. }. if (cta.href.match(/\?./)) {. cta.href = cta.href + '&ocid=' + ocid;. } else {. cta.href = cta.href + '?ocid=' + ocid;. }. }. });. }.});.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974), with no line terminators
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	5.078147905018725
Encrypted:	false
SSDEEP:	24:5hpNPWqBPWsQxmpqrqysQxmpqAYP6PAQxmpqIQxmpqNs7QRlDAALAGaCqDY7KXKe:572MYXsVGQyfZ
MD5:	8C4035FBAA828A7E23B8584328FE8F88
SHA1:	F222869596F1E3E94C131DE6E85BF233ED1EC511
SHA-256:	0F4950468225BC51D24014536FE8004392A415EF01F0DB92A258818E74F9C59E
SHA-512:	74D807189427397E2C8FC35D986616C1104E9125B39F885F61D9A1AA225D566AB3474061B39C64FF69886E5AEA8D6B4C9F28B4DCC9CB6F552D90DB0C651582DB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
Preview:	div.shimmer-effect{display:flex;width:100%;height:300px}.shimmer-line-container{display:flex;flex-direction:column;width:100%;height:100%}.shimmer-line{background-color:#edebe9;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.banded-wrapper:nth-child(even) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper:nth-child(even) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.shimmer-image-container{position:absolute;right:0;width:50%;top:5%}.banded-wrapper-reversed:nth-child(odd) .shimmer-image{position:relative;heig

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	5.462725306783576
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWWFPnq7usVYwQJXeBNZEWWg:omxe9ppFPq7uFwQJXeBfJl
MD5:	61ED0E072617B75F022D6CB53EA85DE1
SHA1:	027EB2B0F2A8BD9AD6BB5DA7D9F930C7DD8C9DF2
SHA-256:	24880FC6AA75969EABF4ABC448918057EA5331426BFEC56ED8E468647C928591
SHA-512:	269B93EA5906A33D584F9A5BF20EE44461D5488494CE2E1717A70F3E998BED8A4210A7BDC2D10937FEC3D6D9727033BF8E2DD80B69DA99D3A97269AE35CC94D4
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6089), with no line terminators
Category:	dropped
Size (bytes):	6089
Entropy (8bit):	5.4927105223990536
Encrypted:	false
SSDEEP:	96:tjo/sC63hUjG516E6xY6Z66v3fF8GhyU60urhRncv3FC+2FVjesryc0ll56/4:m0ZNStLZPv3N8GhG0u1Rncv3FC+UVjet
MD5:	59FA60456DB5679D15A03D811A40FE1F
SHA1:	93C70A005EA50B843040397E75E72D614C4447DA
SHA-256:	D3A62EDC0A5FDF2D6D0DA4BC51C5F6D52A7861D5322C42973F0B7F54D8711A4D
SHA-512:	6CD6D7438F52F98676E189D5F7A8C1D6186F5C4506DEF689F48CD6C639873D02D44E6CFBC13D6628D75C1F19F380ECDC43B835D5B4193FB82FE5758321F894E2
Malicious:	false
Reputation:	low
Preview:	(function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=true;var E,C=ClickTaleGlobal.scripts,D=function(){if(typeof ClickTaleOnReady=="function"){ClickTaleOnReady()}p(window.ClickTaleOnReadyList)};if(C){E=C.dependencies;E&&E.onDependencyResolved(D);E.notifyScriptLoaded("wr")}else{D()}}}function B(){window._uxa&&_uxa.push(["afterPageView",function(){if(_uxa.push(["isRecording"])){(typeof ClickTaleOnRecording=="function")&&ClickTaleOnRecording();WRPubSub.publish("recording")}}])}function A(F,C){var E=F.split(".");var G=window;for(var D=0;D<E.length&&G;){G=G[E[D++]]}return G===undefined?C:G}function n(){var C=e();if(window.ClickTaleSettings&&ClickTaleSettings.CheckAgentSupport){ClickTaleSettings.CheckAgentSupport(function(D){return D},C)}}function p(J){if(typeof J==="object"&&"length" in J){var I

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32653)
Category:	downloaded
Size (bytes):	301458
Entropy (8bit):	5.543087687755038
Encrypted:	false
SSDEEP:	1536:N9+xOL1qkrVJk5aRyMs2HkmKon8fDUfH+UYgzzxPix4X6TvneJaBFL+OET+Jdq/B:7Q2sfD9+AA69nLgIoF0NQiZ4bD
MD5:	1914B4D681FD819C84301317A731DB02
SHA1:	AE5B71603259DDCE84C89A34100EA2CB4F2167FD
SHA-256:	55BE24F55E4381C6583808E8A47A36837D3358ECBCFD86E385473456C1CDBA81
SHA-512:	1C8D6487B92379EB5D0C9AC272059C0C2FCC4C32620906ADAC48F5F46B46262E0870CD66FC29F04F32E630A5003717405B2B01473596D9537EA2864BFD02C1F4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-thirdparty/v52.js
Preview:	// For license information, see `http://img-prod-cms-rt-microsoft-com.akamaized.net/launch/store/launch-ENf7805d09fd1b455883333cdf34ee4ca2.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-07-03T19:59:05Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"ENf7805d09fd1b455883333cdf34ee4ca2",stage:"production"},dataElements:{isSurfacePDP:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var t=new RegExp("/d/surface"),e=new RegExp("/p/surface");return t.test(window.location.pathname.toLowerCase())\|\|e.test(window.location.pathname.toLowerCase())}}},isSurfaceCategory:{modulePath:"core/src/lib/dataElements/cookie.js",settings:{name:"test"}},isSurfaceBusiness:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return new RegExp("store/b/surfaceforbusiness").test(window.location.pathname.toLowerCase())}}},PageInfo:{modulePath:"core/src/li

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	591216
Entropy (8bit):	4.457159748744365
Encrypted:	false
SSDEEP:	12288:k8/e1j6gGD1sXRxMh2muS4NwejoZXaOrbpKjxagFg1g/oG8o7XdYCohcw9Tp+vKE:hDoYg
MD5:	831D94570D3BFCB11E9007DBC3E71464
SHA1:	38F81B54E32C68370C37C704F838A895A952B17D
SHA-256:	DF3D3F80AAE55064D2DF6F7EC5CB9C1F45F5BD75B4F81758E582FE271842FA47
SHA-512:	592FD31E6825F34AE158E68637E9369B9E62DE86CF82050961A96773591D7202C8D5DB9805A30C7FD7224E5D15EC5AFA9F6F4036F91E6C14E09E663DD9CD4D3B
Malicious:	false
Reputation:	low
Preview:	// onerfcomponentFactory.js....define("componentFactory", [.. "require",.. "exports",.. "htmlExtensions",.. "utility",.. "stringExtensions",.. ], function (n, t, i, r, u) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0,.. });.. var f = (function () {.. function n() {}.. return (.. (n.create = function (t) {.. for (var i, r = 0, u = t; r < u.length; r++) {.. if (((i = u[r]), !i.c && !i.component)).. throw "factoryInput should has either component or c to tell the factory what component to create.Eg.ComponentFactory.create([{ c: Carousel] or ComponentFactory.create([component: Carousel]))";.. n.createComponent(i.component \|\| i.c, i);.. }.. }),.. (n.createComponent = function (t, r) {.. if (t) {.. var o = r && r.eventToBind ? r.eventToBind : "",.. f = r && r.selector ? r.selector : t.selector,.. s = r &&

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	7.875769193349852
Encrypted:	false
SSDEEP:	48:c/6O0oVRuqFlbiJ4kaYeZdYSU3XCepyAjZLyFV8R9fNQiW92L4ZOBZluNkC:cSO0oVRTpkaYezanj0AhwC9lQiW92L4t
MD5:	3423D4EE734C51092D19E0D742CA3BE6
SHA1:	70779E50CE41B3C0F4212FF27598289D09B82BEC
SHA-256:	8D05A9A4BA388535E5D3D562CCB1596CC52447355765D126B73E224F76B829A9
SHA-512:	EF0C363CED2DEBF19C840538B27C6C68F0B33C1C15D6F6381BCE1C4EDCE444DAD08C8EBC20B0B7D923B93503211E51254D5EDC0F6F1C6B625AC4FEA48477E915
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Defender-CC-H-111x111-1?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	.PNG........IHDR...o...o.......`....pHYs.................IDATx..].]W.......P..QP..V.cI[b.,...c...C..`1i3.H..<......B.b. .(!.>64..dZ."."....I3.If.j2w/......~.9......{.>{.s.....>..;....a_.W.......<<...9,..ayx...sX.........<<...9,..ayx...sX.........<<...9,..ayx...sX.........sw6 ...........6J.vy..K.5J@.....x.Do...]k.>...D...o...-)...V.@@...U.%.4.q...Z..d...I.=./.....?.9.67...rJ.m%...9...c`.:.1!.U.S..l.0.../.<o...oK./A.u..A...Ii%(.q{A...g....`(...x...^_..O.r.."...Rm.p.........k.3.r..o ..o.Y....S..ix..-=..O..@.p.......f...6Jvh..... .u..../..r#.L#..?-}.D.9......%.Q._...S.....Z..p}z.3..Pi....r......D.o..]h........}....T..\..A... .Y...\|.Dk....... .F7!.C....f....y^TCq1R.5.l........u.Z..n.R..F.~w..6s-.9O.4E..X..C......0.R4.L...4...DX...a]..A.G.+D..K..yT..K^3n.^'yL ......]..R...7D.*v.E.p...X..f@c...mm.......?...@..y...,....6I.T...:...W.i.V..M.d/....d.%..+Dv..`n.....`.y..a.25'.j].D{o.C.W.S.....,.Z...qC[...E.......5k.e.+H.OX...a0\|.&...-^H......j.9,!2).N

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.189898095464287
Encrypted:	false
SSDEEP:	3:Uh1Kn:UDKn
MD5:	39A19D0882684989864FA50BCED6A2D1
SHA1:	5CED55DAC2E0427E9DC605CEC1FEDAB0949EB15E
SHA-256:	8FBEDED073249C3611742297EE96A976A95EE113F33B9A422A5D3A7A2DEB63E5
SHA-512:	E795CB7DE27B42948B7DDFF19F3B401A8F95753AC7D37D9B5F52D8DACD2AA43A2AD9EACEC29F77D28080E20C21C48B9FA88A733FAC108939FB2F0EB036C7AEEE
Malicious:	false
Reputation:	low
URL:	https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Preview:	/* empty css */

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32653)
Category:	dropped
Size (bytes):	301458
Entropy (8bit):	5.543087687755038
Encrypted:	false
SSDEEP:	1536:N9+xOL1qkrVJk5aRyMs2HkmKon8fDUfH+UYgzzxPix4X6TvneJaBFL+OET+Jdq/B:7Q2sfD9+AA69nLgIoF0NQiZ4bD
MD5:	1914B4D681FD819C84301317A731DB02
SHA1:	AE5B71603259DDCE84C89A34100EA2CB4F2167FD
SHA-256:	55BE24F55E4381C6583808E8A47A36837D3358ECBCFD86E385473456C1CDBA81
SHA-512:	1C8D6487B92379EB5D0C9AC272059C0C2FCC4C32620906ADAC48F5F46B46262E0870CD66FC29F04F32E630A5003717405B2B01473596D9537EA2864BFD02C1F4
Malicious:	false
Reputation:	low
Preview:	// For license information, see `http://img-prod-cms-rt-microsoft-com.akamaized.net/launch/store/launch-ENf7805d09fd1b455883333cdf34ee4ca2.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-07-03T19:59:05Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"ENf7805d09fd1b455883333cdf34ee4ca2",stage:"production"},dataElements:{isSurfacePDP:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var t=new RegExp("/d/surface"),e=new RegExp("/p/surface");return t.test(window.location.pathname.toLowerCase())\|\|e.test(window.location.pathname.toLowerCase())}}},isSurfaceCategory:{modulePath:"core/src/lib/dataElements/cookie.js",settings:{name:"test"}},isSurfaceBusiness:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return new RegExp("store/b/surfaceforbusiness").test(window.location.pathname.toLowerCase())}}},PageInfo:{modulePath:"core/src/li

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	dropped
Size (bytes):	530455
Entropy (8bit):	5.155958154904355
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe0dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyD
MD5:	9D7D4837CA0F716D17814E2733B0F9EB
SHA1:	10C4CDDC1347F1A20B2481917D676F1FD9A3EBF9
SHA-256:	D5AD7D29B9608839E63959EEA4A26F5F053E796AC0CAC9EDE5FF1F5F08F70236
SHA-512:	1CC93E948124DBA8D450A4B68966FB47C6EE13105432EBC213500ABEECE5D606DBCAAAC6BBBF5C08A2612E4E3DD22F7E0A217BCB5A6022E38B0D61E6E29E9635
Malicious:	false
Reputation:	low
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	211842
Entropy (8bit):	5.548839465294018
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+S/7qSASyntnh:2smT+X+NLJab+SzqSASyntnh
MD5:	C1338BAD680C7B30034BB2BEE2C447D3
SHA1:	E93C535395F25D15F4AA67E481DFCEAF94F25A1E
SHA-256:	906A3B2A89AA06A9C0DA125FBF248D1F9FD188511B44D4822D9E3FCFD28197E8
SHA-512:	AE28ACA7B8AAB00F7EAF2B5EBCE86F23DD1B91E711100110ED4E2B7B6A68A1284AF777EC87C652789BBBC50B5FA95A18A47A1D1F5B1FF65FDBC6E56EE6FA31E7
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	dropped
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	559
Entropy (8bit):	5.232580404602474
Encrypted:	false
SSDEEP:	12:uBDRWH7if9s/19sgZq5SN5wODFy22voE0u8iHQ20MOWl+Mg:uhRWbi69ykIS3DFyvjwKHlHg
MD5:	F51F0D5BCFE05F53A3624FA78B778F92
SHA1:	51678A70842C2C0E879FD843B5506EB0C2C2400B
SHA-256:	169009208AACA2EDD518249D85E3BE2CD332189F88AA24A467BA64A8098A9B9C
SHA-512:	E8C97A0B32ABDDB3A5887C732CB08B6524DAE4C6FF3AA0EB6DAEB7405D07BF6F64ACF8F83847E625B569BD9012416DDFF2BF1D6D7C7A3FDE6260F23E0BA7B606
Malicious:	false
Reputation:	low
Preview:	'use strict';window.onload=function(){var a=document.getElementsByClassName("dynamic-feature")[0];a&&(a=a.querySelectorAll(".dynamic-feature-component")[0])&&(a=a.querySelectorAll(".btn")[0])&&a.classList.contains("my-0")&&a.classList.remove("my-0","px-4","mr-4");a=$(".dynamic-feature-component .link-group a");const c=(new URLSearchParams(window.location.search)).get("ocid");c&&a.each((d,b)=>{b.href&&"button"==b.getAttribute("data-bi-ct")&&!b.href.includes("ocid\x3d")&&(b.href.match(/\?./)?b.href=.b.href+"\x26ocid\x3d"+c:b.href=b.href+"?ocid\x3d"+c)})};

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20235), with CRLF line terminators
Category:	dropped
Size (bytes):	42145
Entropy (8bit):	5.832732156117214
Encrypted:	false
SSDEEP:	768:br5zePPdX/PBRbqc6B/7sH8IJw1twGrtAABJ7zOowCdHwQFAeTkXRXuUmN:Qpe/MTw15JBeZd2
MD5:	5AA15DD22E0CEB5BA89D9370B02F22E7
SHA1:	B18DCC105C51A40610F0C1AEEAAC6C0389198F90
SHA-256:	26B284A2D2AF4D13D1C1E6C38709372C824AB11BEA50064DBCA326E91FAF2775
SHA-512:	2F3E9411B2D4240EC4799D07DCBD40B712663E9802550F469E49C218C0F4ECFDD7DA2F2D89800C5809AF434F2F50AC3BBB853AAA3C6184486D64E5D7AE640EFE
Malicious:	false
Reputation:	low
Preview:	/** vim: et:ts=4:sw=4:sts=4..* @license RequireJS 2.2.0 Copyright jQuery Foundation and other contributors...* Released under MIT license, http://github.com/requirejs/requirejs/LICENSE..*/..var requirejs, require, define; (function (n) { function dt(n, t, i, r) { return r \|\| "" } function l(n) { return st.call(n) === "[object Function]" } function a(n) { return st.call(n) === "[object Array]" } function u(n, t) { if (n) for (var i = 0; i < n.length; i += 1)if (n[i] && t(n[i], i, n)) break } function rt(n, t) { if (n) for (var i = n.length - 1; i > -1; i -= 1)if (n[i] && t(n[i], i, n)) break } function r(n, t) { return bt.call(n, t) } function i(n, t) { return r(n, t) && n[t] } function h(n, t) { for (var i in n) if (r(n, i) && t(n[i], i)) break } function ut(n, t, i, u) { return t && h(t, function (t, f) { (i \|\| !r(n, f)) && (!u \|\| typeof t != "object" \|\| !t \|\| a(t) \|\| l(t) \|\| t instanceof RegExp ? n[f] = t : (n[f] \|\| (n[f] = {}), ut(n[f], t, i, u))) }), n } function f(n, t) { return f

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6089), with no line terminators
Category:	downloaded
Size (bytes):	6089
Entropy (8bit):	5.4927105223990536
Encrypted:	false
SSDEEP:	96:tjo/sC63hUjG516E6xY6Z66v3fF8GhyU60urhRncv3FC+2FVjesryc0ll56/4:m0ZNStLZPv3N8GhG0u1Rncv3FC+UVjet
MD5:	59FA60456DB5679D15A03D811A40FE1F
SHA1:	93C70A005EA50B843040397E75E72D614C4447DA
SHA-256:	D3A62EDC0A5FDF2D6D0DA4BC51C5F6D52A7861D5322C42973F0B7F54D8711A4D
SHA-512:	6CD6D7438F52F98676E189D5F7A8C1D6186F5C4506DEF689F48CD6C639873D02D44E6CFBC13D6628D75C1F19F380ECDC43B835D5B4193FB82FE5758321F894E2
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/www/bridge-WR110.js
Preview:	(function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=true;var E,C=ClickTaleGlobal.scripts,D=function(){if(typeof ClickTaleOnReady=="function"){ClickTaleOnReady()}p(window.ClickTaleOnReadyList)};if(C){E=C.dependencies;E&&E.onDependencyResolved(D);E.notifyScriptLoaded("wr")}else{D()}}}function B(){window._uxa&&_uxa.push(["afterPageView",function(){if(_uxa.push(["isRecording"])){(typeof ClickTaleOnRecording=="function")&&ClickTaleOnRecording();WRPubSub.publish("recording")}}])}function A(F,C){var E=F.split(".");var G=window;for(var D=0;D<E.length&&G;){G=G[E[D++]]}return G===undefined?C:G}function n(){var C=e();if(window.ClickTaleSettings&&ClickTaleSettings.CheckAgentSupport){ClickTaleSettings.CheckAgentSupport(function(D){return D},C)}}function p(J){if(typeof J==="object"&&"length" in J){var I

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	38377
Entropy (8bit):	4.895773702678033
Encrypted:	false
SSDEEP:	768:70i7vMdqIe7d3DfxEhjYUDUEUVU369K6KcCLSpQeAi:70i7v/Ie7d3DfxEhjYUDUEUVU369K6K+
MD5:	7A7E9A6CA7D178006A937A510FFA048B
SHA1:	40AE414A13C3A548A99E12B95712E52733DC9AF2
SHA-256:	E8A204F56107DDAE54CD91117A904247618775B02A8EF8C6CD9A09D8B3CA4787
SHA-512:	C6D1579F9C5C242A7B2A325E86FEB3E916370CF3CDAF69B46646C3C1FBD7E5DD477B36B1D43AC610491C3D6259DA4168F662A83B7BFC4F7CF064A642F2295928
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/default-theme.css
Preview:	html,..body,..#primaryArea,..#primaryR1,..#videoplayeriframe {.. height: 100%;.. width: 100%;.. overflow: hidden..}.....m-video-player.full-width {.. padding-left: 0;.. padding-right: 0..}.....m-video-player.expand-preview-image .x-sfa-video img {.. width: 100%;.. display: inline-block..}.....x-sfa-video {.. display: flex;.. height: 100%;.. overflow: hidden;.. width: 100%..}.....x-sfa-video img {.. height: 100%;.. margin: auto;.. display: block..}.....x-sfa-video .f-video-trigger section div button {.. background: rgba(0, 0, 0, 0.6) !important..}.....x-sfa-video:focus {.. outline: 3px solid #FFF..}.....c-video-player {.. cursor: pointer..}....a.x-sfa-video .c-video-player {.. position: relative;.. padding-bottom: 56.25% !important;.. padding-top: 30px !important;.. height: 0;.. overflow: hidden;.. min-width: 320px..}....a.x-sfa-video .f-core-player {.. position: absolute;.. top: 0;.. left: 0;.. width: 100%

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20235), with CRLF line terminators
Category:	downloaded
Size (bytes):	42145
Entropy (8bit):	5.832732156117214
Encrypted:	false
SSDEEP:	768:br5zePPdX/PBRbqc6B/7sH8IJw1twGrtAABJ7zOowCdHwQFAeTkXRXuUmN:Qpe/MTw15JBeZd2
MD5:	5AA15DD22E0CEB5BA89D9370B02F22E7
SHA1:	B18DCC105C51A40610F0C1AEEAAC6C0389198F90
SHA-256:	26B284A2D2AF4D13D1C1E6C38709372C824AB11BEA50064DBCA326E91FAF2775
SHA-512:	2F3E9411B2D4240EC4799D07DCBD40B712663E9802550F469E49C218C0F4ECFDD7DA2F2D89800C5809AF434F2F50AC3BBB853AAA3C6184486D64E5D7AE640EFE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/require.js
Preview:	/** vim: et:ts=4:sw=4:sts=4..* @license RequireJS 2.2.0 Copyright jQuery Foundation and other contributors...* Released under MIT license, http://github.com/requirejs/requirejs/LICENSE..*/..var requirejs, require, define; (function (n) { function dt(n, t, i, r) { return r \|\| "" } function l(n) { return st.call(n) === "[object Function]" } function a(n) { return st.call(n) === "[object Array]" } function u(n, t) { if (n) for (var i = 0; i < n.length; i += 1)if (n[i] && t(n[i], i, n)) break } function rt(n, t) { if (n) for (var i = n.length - 1; i > -1; i -= 1)if (n[i] && t(n[i], i, n)) break } function r(n, t) { return bt.call(n, t) } function i(n, t) { return r(n, t) && n[t] } function h(n, t) { for (var i in n) if (r(n, i) && t(n[i], i)) break } function ut(n, t, i, u) { return t && h(t, function (t, f) { (i \|\| !r(n, f)) && (!u \|\| typeof t != "object" \|\| !t \|\| a(t) \|\| l(t) \|\| t instanceof RegExp ? n[f] = t : (n[f] \|\| (n[f] = {}), ut(n[f], t, i, u))) }), n } function f(n, t) { return f

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	916
Entropy (8bit):	7.720438442767581
Encrypted:	false
SSDEEP:	24:Yuoux1JrA90Wghgc24eKyHjpw3RI87lNi+uu5IGslN9pPySu:rvWghdBeee8BNi+15I9/fPySu
MD5:	BDE473695CDC46B3D6810A1F561FC99A
SHA1:	94F9B012FD1F881078446BBE05A7B1DA78CE25EE
SHA-256:	ED0EC0568B39A870748767E2515077EDEE489EBF64B8EDC64DF1B6615FC9B9D4
SHA-512:	47E0EA293636E61F8CB90F42E16F7D31ECA40713A5B07DC1DB8494C6E9250CC07F14F75D7FE408FB9352C132F2ED8C8B4C3D0E31A8526C3EB410E56D63A2C5DD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........K.K.>Q".E.......8...................<8..?P?c...:[...-.L.Y..$...#...].?.....I...V.y.g.P.P..;.34f.5.g...l.1..:.vS0......).....=.{../e.>.K..s...d.......2.Jt....&.9Wn.{.W. .5O..!...c.o.P....C7..@.N5.../..._.W.r......d......I. .`N._..".$.;.-p....kHBI..../x....]b....&...:D.....>.\..A(K.....>...*...t%..."U..\R....C..G.....u.I...o.....(..V../+5EV..S\|...@Q..:.....V.Rz..qCjz.....C<mQc...>x%...O<J............5..m7;.R.....b{4...q?.l.r...i?s.=.uw...C.jU...D..9..-.I...{..).(.0....LIE..@....-.0.v........H9.....:.&.....3..J...v.j...s...$c..........}...J.Y,F3...'....\|$..,..~.u.....v....u..MY..W.jJ.F.Iu..[..\|./.}^E..i..#&....\..<.A.. 0a.4].^.\|\"....1s...>...K[..c$.DU...j.........2.......2.z..!k..W..(..?.Y..A...B.vd.....z..j...B.:fD.A....k.......+to.&......q..B8$..s.....#.........FQ*P%..Q..b.2.^.."`...,e+.7.......P.. P..EU...e....=V..[\.i~.!.z.M.....\$.8J......

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	downloaded
Size (bytes):	463056
Entropy (8bit):	3.766543143949848
Encrypted:	false
SSDEEP:	6144:5+1Nqx4AtUHdOjyiwgSF2V2dpNdrRlW0A:w10hQlj1A
MD5:	13CF5D39051259F3BF0080F626C9CEE3
SHA1:	D9EB0BFCF6A54B6373209AEE93E2195FADCEB6C0
SHA-256:	83878F67FDA42850FE5DFC18BE86576199DFFD6F7381AE3D760437D12ECCD927
SHA-512:	D20833C1A3B18C40FC6020A2D682F5B6DA22404830A782D810374A96B359A48CA54E36A150212C6E8E52CA3EF29FE6A587CFC666D0F71717831F2BC196695B51
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfonedsconfig.js
Preview:	..d.e.f.i.n.e.(.".o.n.e.D.s.C.o.n.f.i.g.".,.[.".r.a.w.O.n.e.D.s.C.o.n.f.i.g.".].,.f.u.n.c.t.i.o.n.(.n.).{.r.e.t.u.r.n. .n.}.).;.r.e.q.u.i.r.e.(.[.".w.i.n.d.o.w.".,.".j.q.R.e.a.d.y.!.".,.".O.n.e.R.F._.O.n.e.D.s.J.s.l.l.".].,.f.u.n.c.t.i.o.n.(.n.,.t.).{.n...a.w.a...u.t.i.l.s.=.f.u.n.c.t.i.o.n.(.).{.f.u.n.c.t.i.o.n. .u.(.n.,.t.).{.v.a.r. .i.,.r.,.u.;.i.f.(.t.).t.r.y.{.r.e.t.u.r.n.(.i.=.J.S.O.N...s.t.r.i.n.g.i.f.y.(.t.).,.i.=.=.=.".{.}.".&.&.n.=.=.=.".t.i.m.i.n.g.".).?.f.(.).:.i.}.c.a.t.c.h.(.e.).{.r.e.t.u.r.n. .r.=.'.{.".e.r.r.o.r.".:. .".E.R.R.O.R.:. .c.o.u.l.d. .n.o.t. .s.t.r.i.n.g.i.f.y. .{.0.}. .{.1.}.".}.'.,.u.=.t.y.p.e.o.f. .t.=.=.".s.t.r.i.n.g.".?.t.:.".".,.r...r.e.p.l.a.c.e.(.".{.0.}.".,.n.)...r.e.p.l.a.c.e.(.".{.1.}.".,.u.).}.}.f.u.n.c.t.i.o.n. .f.(.).{.f.o.r.(.v.a.r. .f.,.i.=.[.".n.a.v.i.g.a.t.i.o.n.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.E.n.d.".,.".r.e.d.i.r.e.c.t.S.t.a.r.t.".,.".r.e.d.i.r.e.c.t.E.n.d.".,.".f.e.t.c.h.S.t.a.r.t.".,.".d.o.m.a.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.708611583181537
Encrypted:	false
SSDEEP:	24:cF5h8g1wVRvfBvRytXOjORraYAgxQyXLxwanf43tSKOKut44Hb:If8KwVRnGROjOkTgx9XdW3iPHb
MD5:	EA5F81175470F655A23E40E21858D629
SHA1:	42FF00908F886AFBAE308D2E2DBF4CE2CE00B8CB
SHA-256:	23713BA4DDFFF35A4D38062986DC4B57687E7B7E3D61AF2AD72944367610D82A
SHA-512:	1F49C611BF3904B34A841B1411764D9B56876C9C557169EFBA7DDB41D7C758182DBA01594F225AEEA5339CEDAE59837AD45B8A6B9EF6DE5124771D18BCF40202
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 z...p....K.K.>E..D"......(.D..d...E....8t.ug....R...._J.0........z..n.%.....Q...".j-.K...u....>../...M..JE..0n...I..lo...b.....G...&...=0,i.(.}YC5r !aQOn$...,.@...2P.V..};...5.....s#k.....?.....yx.....O...9......o.M+eb...H.m..U0..V.\|_.............&.6.w;8.m.[.P"z...~....y........h$x(.....!f=FS.d.PQf........._....l5!j..L]P.....q!.UJ../\.7a..r.dl.qWN.Cqfm_.Ee.h..n#..I.KM........t.9V.DV./.5>.H.....<..H.\|..Z?..#4..P......?t.]f........9x..s.3.,]..z.l........n...(.q.Yw....=.~.,...z........>.6haX.....H.,..6.A..x..W....a;C:5T. ....K........M.p9.h.1:A.[.9..E..$.9........t\..}q-~.g._X....W...S....p.U.(...&...=...<.._[.m...,...$p?~..n.....l.....4.;.A..2.?E...j_..2~..A..5......SeU..%..K(.o.<..0..V....p..2.t..)....%...0.X.e.Q.N.......5...k..DP$...&u.,..Z.~f.6e.r.>....nR.(..$..)....yJ.0......5.....J..^..I....%:...B...8.;(...WNK.:X..y.6+Z<f...C....

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4466
Entropy (8bit):	4.815200143314862
Encrypted:	false
SSDEEP:	96:G9DjiPeS9cXL1V04LCJ3t8Q/sWJMqRhSgVNtHYRq9JNK2zRri4KNpcrgcG8K5VNU:G9DIHeXLToJuQsWJhXSgVNtHWq9JNK2T
MD5:	608ED94DBBE53914E7284F9D0BF56B46
SHA1:	32EC37ED5ABE203EBEB3E552CDECAF2EA9014196
SHA-256:	188B658300213BE394E47A973D27D0FE5FD8F9A150EDEC30091C1F6C409C71D1
SHA-512:	A129758D575C5B3CD577955FCE4EC13454DB2439D0C20586002500C20F07C7FA8CC9D79739C84CA23D92F1F33B7E3E52F705214CAA3A38410FF44A2814163D5F
Malicious:	false
Reputation:	low
Preview:	{.. "agegate_day": "Day",.. "agegate_enterdate": "Enter your date of birth",.. "agegate_fail": "You may not access this content.",.. "agegate_month": "Month",.. "agegate_submit": "Submit",.. "agegate_year": "Year",.. "audio_tracks": "Audio tracks",.. "agegate_dateorder": "m/d/yyyy",.. "browserunsupported": "We\u0027re sorry, but your browser does not support this video.",.. "browserunsupported_download": "Please download a copy of this video to view on your device:",.. "cc_appearance": "Appearance",.. "cc_color_black": "Black",.. "cc_color_blue": "Blue",.. "cc_color_cyan": "Cyan",.. "cc_color_green": "Green",.. "cc_color_grey": "Grey",.. "cc_color_magenta": "Magenta",.. "cc_color_red": "Red",.. "cc_color_white": "White",.. "cc_color_yellow": "Yellow",.. "cc_customize": "Customize",.. "cc_font_name_casual": "Casual",.. "cc_font_name_cursive": "Cursive",.. "cc_font_name_monospacedsansserif": "Monospaced Sans Serif",.. "cc_font_name_monospacedserif": "Monospaced S

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=7850&fmt=gif&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3405
Entropy (8bit):	7.746365214902903
Encrypted:	false
SSDEEP:	96:+ajKwEjW5hEL8TWGeASJftZ5RpHn7lVhamJ9ksLUrXi:+aGwEjci2WGk3ZnpH7lVhZl
MD5:	C020494D9B4F0D820FFB8C9C16448CF6
SHA1:	585F1260BDA235E6A0251E5EEAC8E57FDEC0483C
SHA-256:	4BA9ABB6433C5815AE73A512CAE639AE674BF6D642DBF1487793ED3E65E4E248
SHA-512:	7E0FBB53D61256F2A236B9600563CBFD1AAE4715DF948B591D01C2CFCE6EC028EC205AAE429D2FFB0D624D97CA98D70C43C307E5EA8277307AD3D9D75EB0ED04
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-Outlook-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D..................................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma..........................mdat.......niP2......T..yF..e.s<b./..u......~.6\..Y_ C_.3..=..i..?\|.."....5............P..!n....}...T\|..s........3....a.3.b9.r......(...g.&..4..a..!.p.c..Tu......m..Tg..(u..i0...-.....].>\t...........1..Y.S..........I.%.....u....2...)...n..M_.....r_.......{..$%F.@...f2.......[......?......HQ.....?..._...@.J>...@...M...8..Sv..4f\|O..$..V....c.$..\.....wr.R..8V...[-".%./...$.../-.k...QS6.K`..bO.D>fr.....(^..,..+J..,C..H...R.......nh...B2......Q.......:.........f?.;.QE...Vj. 9.2N.n.LOst.0....7%....n.M.0..Q.$S.......-....

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	8534
Entropy (8bit):	5.160052403422936
Encrypted:	false
SSDEEP:	96:u6nAgcXkCYT5oCge9OALf96ALo6SCOMkNC6Mkf+tPedRCF/C2TaKsDlz:HnRhoiOe15o0OLs034F/VsZz
MD5:	A8CE5AE62F4EF2C11941E999622F3C57
SHA1:	F0C94EDC29F7B0E2A8A0313AD1D90F2D48E9570B
SHA-256:	F499FF822D5FAF2C4262DCBC346C0EC34E3AFF425DF95CD059CD93177E46D877
SHA-512:	CDFD97A23AE99F5F75D56E326E361BBD391BD6D3B88F1EDE9ACEACC7DD43CFF416223E4FC6106C6574D65AE51D134AD5028F77D71A2A6B13828F1BB562851E6F
Malicious:	false
Reputation:	low
Preview:	'use strict';var foundElm=document.querySelector("div.content-card-v2-component");.if(foundElm){var compareChartDiscountText=foundElm.querySelector(".cc-discounted-price-text"),ccWdp=compareChartDiscountText.dataset.wdp;if("object"==typeof msauth&&"true"==ccWdp){var productcompareUrl=document.querySelector(".product-compare-url").value;$(".cc-original-price").removeClass("hideText");$(".cc-discounted-price-text").addClass("hideText");if(productcompareUrl){var productsIds=productcompareUrl.split("productIds\x3d")[1].split("\x26")[0].split("%2C"),productsLength=productsIds.length;.for(let a=0;a<productsLength;a++)$(".content-card-v2-component .col")[a].classList.add(productsIds[a]),$(".content-card-v2-component .material-backdrop.container.compare-chart-sticky-content.sticky-show-stuck .link-group")[a].classList.add(productsIds[a])}$.ajax({url:productcompareUrl,type:"GET",headers:{compactticket:msauth.AuthTicket},data:{},dataType:"json",success:function(a){for(var c=JSON.stringify(a.prod

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44505), with no line terminators
Category:	dropped
Size (bytes):	44505
Entropy (8bit):	5.383751084832084
Encrypted:	false
SSDEEP:	768:sSAB8MuwhTxLNmYJyOBM6YlNzRwn/P91Y8xhg3oOItwfwRbB49YzTXimP6bhoh:+BfrpLMrlNytmSNtb
MD5:	8329B48328985D736A38BA3DB5315AB5
SHA1:	0C645EB379CAF87C172C61D84127740C3F0CF511
SHA-256:	7CD6D51841450D2AA7281979AF810D2C6BD32F6EDC64568DA6CF7C260691DD4D
SHA-512:	34CCF09D9618C737EF20BDAD3571242A66BA5DDA1AFA1E93C201A2AA56BA784A980B0A5126EF577B2F362483BF8ABB521A8F2A37FDA8E68ADE9A7841294E6048
Malicious:	false
Reputation:	low
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (452), with no line terminators
Category:	dropped
Size (bytes):	452
Entropy (8bit):	5.024945445284132
Encrypted:	false
SSDEEP:	12:cbIzEIHP6EIHPKO9zN1JT9bEQsNa29ophufdYN:cbIVvQvjh1JBbEBNa29Xli
MD5:	7A250BCCDECEA73EF18C154F9D245CB4
SHA1:	66D39A7FA6188F61258B70B39BB40D71FEFA359D
SHA-256:	3EECFAA9C0EAA7FB61CC255AE97AB887A24B016B1BA0EA14860A8E7C47CFD701
SHA-512:	1B1B7916B07C2B27DCC04CA3B0302E9E3C69E2C1B2BCCA3DCED3360A6219AD27C2965E23889F956480A3F2CEE32A095B30AFC99B53594EBE0913EA38E4F8BC93
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){function b(a){(a=$(a))&&(a.hasClass("collapsed")?a.attr("data-bi-bhvr",7):a.attr("data-bi-bhvr",8))}$(".accordion li .accordion-header .btn-collapse").each(function(){b(this)});$(".accordion-header .btn-collapse").on("click",function(){b(this)});document.querySelectorAll(".accordion sup").forEach(function(a){0==a.children.length&&a.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})});

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19600
Entropy (8bit):	5.790313764793093
Encrypted:	false
SSDEEP:	384:Ap7zYdCuhywhJiHui2mheS22hZ4JmIBMtbkaprj/42+MXgai:C7zOowCd2mheSlkSdrjP+Mwai
MD5:	D3B052243F835D67AF736C26A359533D
SHA1:	8D6F8CC779FE29A3C5AA41B1EEE41BCCA4DD84A7
SHA-256:	5214C3AC8AEF0E2CBFF68890171B67D42C710C87CDF50C4515B480E3DB570945
SHA-512:	5610327630E8C73595576A79CEEB1CEF014162BCE4237BB300F85C79514C155A2A99E46865BEB0D6E879D3465BB1677F7ED89D00AF7420D4779BA5458A194828
Malicious:	false
Reputation:	low
Preview:	function loadScript(url, async, defer, crossorigin, type) {.. var script = document.createElement('script');.. script.src = url;.. if (async) {.. script.async = true;.. }.. if (defer) {.. script.defer = true;.. }.. if (crossorigin) {.. script.crossOrigin = 'anonymous';.. }.. if (type === 'head') {.. document.head.appendChild(script);.. } else {.. document.body.appendChild(script);.. }..}..// SIG // Begin signature block..// SIG // MIIr4AYJKoZIhvcNAQcCoIIr0TCCK80CAQExDzANBglg..// SIG // hkgBZQMEAgEFADB3BgorBgEEAYI3AgEEoGkwZzAyBgor..// SIG // BgEEAYI3AgEeMCQCAQEEEBDgyQbOONQRoqMAEEvTUJAC..// SIG // AQACAQACAQACAQACAQAwMTANBglghkgBZQMEAgEFAAQg..// SIG // wICQeL6lBTAvIyDbUlJWb/8FTBOcmun3GMJyJMBUXT6g..// SIG // ghFuMIIIfjCCB2agAwIBAgITNgAAAd9zgZcWvjL9DQAC..// SIG // AAAB3zANBgkqhkiG9w0BAQsFADBBMRMwEQYKCZImiZPy..// SIG // LGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRUw..// SIG // EwYDVQQDEwxBTUUgQ1MgQ0EgMDEwHhcNMjQwMTIwMDEz..//

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	dropped
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	dropped
Size (bytes):	30289
Entropy (8bit):	5.260974426031687
Encrypted:	false
SSDEEP:	768:u2E2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:u1M0S0/ks2JdImYFcw662A86vzyR
MD5:	F04D3E51969894BD486CD9A9A1549EA6
SHA1:	6DB7ED2E034FE99F5013144CA91DD21408F7AC36
SHA-256:	33A747222E8AE5381AEB53C9671BB3EB309B7226587674CD6D901F99645A852B
SHA-512:	C7BE3DAB8EF8DBCB3A0AA6022F8191F155358E4E974F0E42F9CD88C372EE77EB4513A6CC54E373CFE90232D67C6B02406B4D281D8158C24B51C8AA433452911C
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	211842
Entropy (8bit):	5.548839465294018
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+S/7qSASyntnh:2smT+X+NLJab+SzqSASyntnh
MD5:	C1338BAD680C7B30034BB2BEE2C447D3
SHA1:	E93C535395F25D15F4AA67E481DFCEAF94F25A1E
SHA-256:	906A3B2A89AA06A9C0DA125FBF248D1F9FD188511B44D4822D9E3FCFD28197E8
SHA-512:	AE28ACA7B8AAB00F7EAF2B5EBCE86F23DD1B91E711100110ED4E2B7B6A68A1284AF777EC87C652789BBBC50B5FA95A18A47A1D1F5B1FF65FDBC6E56EE6FA31E7
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6125), with no line terminators
Category:	downloaded
Size (bytes):	6125
Entropy (8bit):	5.234103429010352
Encrypted:	false
SSDEEP:	96:W/M/m/i8V//c//55T/hAh6QcVsOZdNABvQUSZacKp3xAxgBxjGYnvDYn79NN7ZuV:W8mi89/M/5xE6QcVsOZdNAJmotp3xAxU
MD5:	97C18402D0D5AD89F12C548A55C8284F
SHA1:	412ACD023C48FA79C9F846040497C74C2EBEC46D
SHA-256:	464730FF27CB58E32D39C58E96330E89983298C72B1B4183A68E0B7FE4D4CCFA
SHA-512:	38C551DBEC500AA1C450FDADE3E24FA16E71066F7CD75E103E6787C8687838E89BE49181C491F1234D29D7CCECA2B9C0C9FA20010548AD4E5F83D66D0AD1F02F
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/feedback/feedback.css?v=Rkcw_yfLWOMtOcWOljMOiZgymMcrG0GDpo4Lf-TUzPo
Preview:	.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful{height:auto;display:flex;justify-content:center;align-items:center;gap:32px}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful #beginFeedbackHeader{padding:0;margin:0}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful .extendedFeedbackHeader{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:16px;font-weight:600;line-height:20px;color:#333}.smbArticleFluent #extendedFeedbackForm .feedbackButtons{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:14px;font-weight:600;line-height:20px;display:flex;align-items:flex-start;gap:16px}.smbArticleFluent #extendedFeedbackForm .feedbackButtonBlue{min-width:auto;display:flex;padding:3px 40px;justify-content:center;align-items:center;border-radius:4px}.smbArticleFluent #exte

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32681), with CRLF line terminators
Category:	dropped
Size (bytes):	217242
Entropy (8bit):	3.8595135714192796
Encrypted:	false
SSDEEP:	3072:7mWTl90STteLRFmnt81yi1oONt+jVh5Fp3f5rc7WGceLysIe3XQP8eVH2JMZJ973:JWUxC6hbhY1dL4
MD5:	5E6D4F6AE324C9E1E90FB0BC7DC5E812
SHA1:	284E6B07B12E2E6194C3C081997BAA4A57D03AF7
SHA-256:	C8CD5EE68E599B7D4427D0712378F26781A11B9DCE53720A60047F4F60EE3242
SHA-512:	1816E970576207DDF4AEA29646594C7D91D11AA9DD0DDE67CD6CC4EB9B81B2F5FC02F81F25683FE47E898325558DE87BE9579D21050DAFAA407B7F1ABC7553C5
Malicious:	false
Reputation:	low
Preview:	../..!. .j.Q.u.e.r.y. .v.3...5...1. .\|. .(.c.). .J.S. .F.o.u.n.d.a.t.i.o.n. .a.n.d. .o.t.h.e.r. .c.o.n.t.r.i.b.u.t.o.r.s. .\|. .j.q.u.e.r.y...o.r.g./.l.i.c.e.n.s.e. ../.....!.f.u.n.c.t.i.o.n.(.e.,.t.).{.".u.s.e. .s.t.r.i.c.t.".;.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e.&.&.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e...e.x.p.o.r.t.s.?.m.o.d.u.l.e...e.x.p.o.r.t.s.=.e...d.o.c.u.m.e.n.t.?.t.(.e.,.!.0.).:.f.u.n.c.t.i.o.n.(.e.).{.i.f.(.!.e...d.o.c.u.m.e.n.t.).t.h.r.o.w. .n.e.w. .E.r.r.o.r.(.".j.Q.u.e.r.y. .r.e.q.u.i.r.e.s. .a. .w.i.n.d.o.w. .w.i.t.h. .a. .d.o.c.u.m.e.n.t.".).;.r.e.t.u.r.n. .t.(.e.).}.:.t.(.e.).}.(.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .w.i.n.d.o.w.?.w.i.n.d.o.w.:.t.h.i.s.,.f.u.n.c.t.i.o.n.(.C.,.e.).{.".u.s.e. .s.t.r.i.c.t.".;.v.a.r. .t.=.[.].,.r.=.O.b.j.e.c.t...g.e.t.P.r.o.t.o.t.y.p.e.O.f.,.s.=.t...s.l.i.c.e.,.g.=.t...f.l.a.t.?.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...f.l.a.t...c.a.l.l.(.e.).}.:.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...c.o.n.c.a.t...a.p.p.l.y.(.[.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	downloaded
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/c0-247156/de-099401/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/1b-c96630/db-bc0148/dc-7e9864/78-4c7d22/e1-c35781/40-7b7803/cd-23d3b0/6d-1e7ed0/b7-cadaa7/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/92-10345d/79-499886/7e-cda2d3/db-f3b1fd/93-283c2d/e0-3c9860/91-97a04f/1f-100dea/33-abe4df/19-c0fae7?ver=2.0&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1818)
Category:	downloaded
Size (bytes):	183016
Entropy (8bit):	5.263183982792971
Encrypted:	false
SSDEEP:	1536:7Pv4giw/1v1MlRNUAHeVFd3F9mxCmy9md2svbrfEfGviIC9BhBjBO:7Pi+V/md2UrfEfxrNO
MD5:	BA20D43D734B61C9FA17484296EAA456
SHA1:	5039AF034AD5159ED61190F21ED6D335D1CB8BDE
SHA-256:	04E6B2C990C154374309F9C5EA586D0ECB20556D90E90E678E75371E3F71D670
SHA-512:	2F5C1AC501EB169E0228435AD210C77BF17FEF2F7257B8DD2A9578DC50CBE6212B3C889293F2B2F645F6D9BE14B3F42C478737EE1C2183EC3987389339BB146A
Malicious:	false
Reputation:	low
URL:	https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales
Preview:	<!DOCTYPE html>.<html lang='en'>.<head> ..<title>iFrame Cart Page</title>..<meta charset='utf-8'>..<meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'>..<meta name="format-detection" content="telephone=no"/>....<meta name='viewport' content='width=device-width, height=device-height, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no'/>...<style>.../Empty MR3/...body {....background-image:url('https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_75.gif');....background-repeat: no-repeat;....background-attachment: fixed;....background-position: center;....background-color: #f2f2f2;....margin: 0;...}....@font-face {....font-family: "Segoe UI";....src: url("https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2") format('woff');...}......* {....font-family: "Segoe UI", Arial, sans-serif !important;...}....body #lpChat .lp_dialog_container .lp_buttons_area .lp_confirm_button {....colo

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.992440844788031
Encrypted:	false
SSDEEP:	24:a4+A24uJEVdLV+awt+a9QdKCHXgc+a9aaXgc+a2XgcS:a4+xJEV9Vbwtb9QT1b9ac1bw1S
MD5:	CB3531F56366637C3E928C625264646D
SHA1:	3F6B2AC9B3A9C76EF8410FCA587105F1D95238A5
SHA-256:	47F3F44C9BC3F47A111D004476F051D5684D9FB7526EF3985A6540F6D6B16E93
SHA-512:	5E99E7DCADC11B1BD462D4CE8C1BF4334857E830EAFD4AECBD689F9C3869689D25A568C8B91ACEC69E7A6B1E2FD033DB47D7F84DC260F92BE3823203FCDB8D1A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/ArticleSupportBridge/article-support-bridge.css?v=R_P0TJvD9HoRHQBEdvBR1WhNn7dSbvOYWmVA9taxbpM
Preview:	.articleSupportBridge{margin-bottom:-40px}.articleSupportBridge .bridgeHeading{margin-top:40px;font-family:"Segoe UI Light","wf_segoe-ui_light",Arial,"Helvetica Neue",Verdana,Helvetica,Sans-Serif;font-size:2.4em;font-weight:bold;line-height:1.333;margin-bottom:15px}.articleSupportBridge .bridgeToken{margin-top:-30px}.articleSupportBridge .supportBridgeCTA{text-align:left;margin-top:-10px}.articleSupportBridge .supportBridgeText{text-align:left}.articleSupportBridge .phaseOneCTA{text-transform:uppercase;letter-spacing:.975px;text-decoration-style:solid;font-size:13px;text-align:left;font-weight:600}html[dir=rtl] .articleSupportBridge .supportBridgeText,html[dir=rtl] .articleSupportBridge .supportBridgeCTA,html[dir=rtl] .articleSupportBridge .phaseOneCTA{text-align:right}

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	dropped
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	73501
Entropy (8bit):	7.274239603253508
Encrypted:	false
SSDEEP:	1536:m5++++++++++++++++++++++++++++e3XsuNwDM17iYdtYGb40EyUPP6+BpdMhn9:V3XsumI1DEyUPyOpkM7YVVVVVVVVVVVN
MD5:	471B948CA93626961E6ADE6DE66FB747
SHA1:	F70E8C1A90732C23BFFA5DC0C417FDF0274EA3F3
SHA-256:	98861B25409C0C097A5F1FA61535701E58F2B0C9F7CC951B0AE1E988238D38E1
SHA-512:	1AD51DF041DB63A5130376D4C645EC16D2C3D2BA0F0635F185C04929AE3D96415273974B03D0898DC057AB50397EED9DD5A4807AA4D6B07D95B7E9520C494502
Malicious:	false
Reputation:	low
Preview:	......Lavc58.18.100....C...........................................................##$++3..............................................................................!...1Q2aqA".#.R..BU...3..s..r4bCS..$.T.5e.c...D..Vd.f.%......................1Q!A.a....q....2"...R.bB.#.r..3.....c......8...."...................?...k]1.<...Gq_f>..#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....k]1.<.......4..;.5..GM}#.._H.H.t..;.5..GM}#..

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	27286
Entropy (8bit):	5.5452829950673035
Encrypted:	false
SSDEEP:	768:v8seqxYspb9EplD7zOowCdwSpNnf277+OLkH/aVCO:v8seq+c9EpNB+254
MD5:	7E5A23C337DA0B50C4007470ACB0E043
SHA1:	F8DE9B13112FEF399A4A4289545845C1EB4DED06
SHA-256:	8EB73E30842C8D3B95665EE77782C1FE357DE1A65E280F36F011A4519799F033
SHA-512:	4B425A9554F145DCAFD9E8469419D18E4C30821E5267728117FAD8E78831F11242EE6927AAA628FCC673F3F7FEFB61C2014FF7A0D63C43BEF03D08084B3969ED
Malicious:	false
Reputation:	low
Preview:	document.addEventListener("DOMContentLoaded", function(event) ..{.. const vpElements = document.getElementsByClassName('c-video-player');.. const vpElement = vpElements && vpElements.length && vpElements.item(0);.... if (!vpElement) {.. console.log('no video player element found').. return;.. }.... function tryParse(value, defaultValue) {.. try {.. return JSON.parse(value);.. }.. catch (e) {.. return defaultValue;.. }.. }.... function removeFirstSlash(string) {.. if (!string \|\| string[0] !== '/') {.. return string;.. }.. return string.substring(1);.. }.... function getPlayerDataFromUrl() {.. const paths = removeFirstSlash(window.location.pathname).split('/');.. const videoId = paths[paths.length - 1];.... const metadata = {.. videoId: videoId.. }.. const options = {.. // default options here. below is where w

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	502
Entropy (8bit):	7.465743629081189
Encrypted:	false
SSDEEP:	12:7wIkGa85QxcGqFzcZVr4PE/j+MFPh86DC9ft:7wIZNBQAPkBFxDC9ft
MD5:	419F88E695A62CEC374CBBE759F11754
SHA1:	69509DDECB1B082020907299471177772DB59070
SHA-256:	2C13442D9CAA9698D2D10443EB6F0CFC395DD220E60763AE0C3A4A6044DB7603
SHA-512:	381537E55704202899317E4780520F66EC65C0F6CDF59633E61B7E880FB056379DFD539A3CA2C890BED3087DAE0F56550071C7738B6F372BD0514531F31F2B49
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........(.(.>)..B!..V.T..BZ@..G...lJ........`X........?.?...............W..../IHB.....nXv.N[~+..l.h2{..6.o.....b...1.6.s...<.<...[Q..w~....S.7..........s`\|..Q.,..B.....V...i?.cH.r>.%..j#9..q.eL............s....q...d....... ....X{.,.".x...e........._.....g..#..9./.:J.......!w......,$.,.....yG.s5....d.....L..r.9......0.>....*..G.q......#...F.5........}.'R..W..'.W.........1....... .........:......y.c1l!.. .X..:.7/7..a...M,....N.x.....`.j.85P.}{Q...q.E..T....0...

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	downloaded
Size (bytes):	8534
Entropy (8bit):	5.160052403422936
Encrypted:	false
SSDEEP:	96:u6nAgcXkCYT5oCge9OALf96ALo6SCOMkNC6Mkf+tPedRCF/C2TaKsDlz:HnRhoiOe15o0OLs034F/VsZz
MD5:	A8CE5AE62F4EF2C11941E999622F3C57
SHA1:	F0C94EDC29F7B0E2A8A0313AD1D90F2D48E9570B
SHA-256:	F499FF822D5FAF2C4262DCBC346C0EC34E3AFF425DF95CD059CD93177E46D877
SHA-512:	CDFD97A23AE99F5F75D56E326E361BBD391BD6D3B88F1EDE9ACEACC7DD43CFF416223E4FC6106C6574D65AE51D134AD5028F77D71A2A6B13828F1BB562851E6F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v2/comparechart/clientlibs/sites/compare-chart.min.ACSHASHa8ce5ae62f4ef2c11941e999622f3c57.js
Preview:	'use strict';var foundElm=document.querySelector("div.content-card-v2-component");.if(foundElm){var compareChartDiscountText=foundElm.querySelector(".cc-discounted-price-text"),ccWdp=compareChartDiscountText.dataset.wdp;if("object"==typeof msauth&&"true"==ccWdp){var productcompareUrl=document.querySelector(".product-compare-url").value;$(".cc-original-price").removeClass("hideText");$(".cc-discounted-price-text").addClass("hideText");if(productcompareUrl){var productsIds=productcompareUrl.split("productIds\x3d")[1].split("\x26")[0].split("%2C"),productsLength=productsIds.length;.for(let a=0;a<productsLength;a++)$(".content-card-v2-component .col")[a].classList.add(productsIds[a]),$(".content-card-v2-component .material-backdrop.container.compare-chart-sticky-content.sticky-show-stuck .link-group")[a].classList.add(productsIds[a])}$.ajax({url:productcompareUrl,type:"GET",headers:{compactticket:msauth.AuthTicket},data:{},dataType:"json",success:function(a){for(var c=JSON.stringify(a.prod

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4921
Entropy (8bit):	5.222250141174727
Encrypted:	false
SSDEEP:	96:Axtrozr9Guzre0kre0/Qre03yre0BYrxp8LUaWyUavdUa5aUaFCRpaO49Pag+MPx:Aetc050l0L0CrxKL4yZdPaPCRV49N+M5
MD5:	88F3A78DC9998D2E19C6B045DDBD4507
SHA1:	F8DCE60A4BB6E8693FDA595CBA1E29208E853531
SHA-256:	74E48756DB80C95BE13382BEA1E5D62C7BD9B808C135FD4E02E063485F674572
SHA-512:	39D415EB8ADEC62896941219D3803AEE5995D176EECD586C57DEC3ECF40EE30F49071373634B6CC13790F2104FB712937AC9573C24E349C4021975E69A263D7F
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RE4EIXC
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?ver=63d3","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeEndDate":"9999-12-31T23:59:59","activeStartDate":"2020-08-31T22:25:51","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16665
Entropy (8bit):	4.994689912697386
Encrypted:	false
SSDEEP:	384:BunBaB7zl+fRRQAMniuUkC0UkFPM08D7vwjPOPC:EqhiuU6POPC
MD5:	431D8804A7BA2AC0993A91964F19C890
SHA1:	1463EC1AD3B9B984E302EC5D57BB5AE841BB43B3
SHA-256:	60B7CE9C7EF5F284A139029735EEA3A618D4E35A3A3CC62BD73B82BF4BA7D9D5
SHA-512:	7974039890AC1F1521A3CE8D57BCEED9F530F1DDC74183D62DC02ABC545F53DD5259548C1465E049FCC47AC522CF0A9FA4AE36CF7ADC0F0463F2B6275AA7856B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/css/index.css
Preview:	.productplacementchoice .c-choice-summary {.. min-width: auto;.. padding-right: 12px..}.....productplacementchoice .c-choice-summary a {.. padding: 0 36px 0 0;.. margin: 0;.. color: #000..}.....productplacementchoice .c-choice-summary a:before {.. position: absolute;.. right: 0;.. padding: 12px 0..}....html img[class*=vp] {.. display: none;..}....@media (min-width:1779px) {.. html img.vp6 {.. display: block;.. }..}....@media (min-width:1400px) and (max-width:1778px) {.. html img.vp5 {.. display: block;.. }..}....@media (min-width:1084px) and (max-width:1399px) {.. html img.vp4 {.. display: block;.. }..}....@media (min-width:768px) and (max-width:1083px) {.. html img.vp3 {.. display: block;.. }..}....@media (min-width:540px) and (max-width:767px) {.. html img.vp2 {.. display: block;.. }..}....@media (max-width:539px) {.. html img.vp1 {.. display: block;.. }..}....@media(max-width:139

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/fbf6e41b-ddbe-43db-a616-7a8e48d43d18.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	dropped
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	dropped
Size (bytes):	941
Entropy (8bit):	5.237366916956353
Encrypted:	false
SSDEEP:	24:IlxCSV6Pfo4ydsethmnUitaKKklq93+TEDzD:IlQ3sdbtKUitaKHCsEDzD
MD5:	6FC8AFFCA0D3B2C5BDC78E27C9425BCE
SHA1:	1348892B3663F4496C35732DDC4D853452F48054
SHA-256:	531C0795866BF6D1BD0E44A4239CFFB3F0FAC07CC911BEA226ADF84E9C3DDAA7
SHA-512:	B2CD1CFD5711BDF37C435EF0E6764C28A233184CE6BA3AE097441FE2A020B6E172E6DB335F4266DDC98788E86C0CF2145E5B09A125FFA4C166AFCA99DCF2004E
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function c(b){var a=e[b];if(void 0!==a)return a.exports;a=e[b]={exports:{}};return f[b](a,a.exports,c),a.exports}var f={6993:()=>{$(function(){$(".area-heading p a").each(function(b,a){b=$(a).closest("div.row").find("h1,h2,h3,h4,h5,h6");a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Area Heading";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body";b=b.first();b.text()&&""!==b.text()&&(a.dataset.biHn=b.text().trim(),a.dataset.biEhn=b.text().trim())});.document.querySelectorAll(".areaheading sup").forEach(function(b){0==b.children.length&&b.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})})}},e={};c.n=b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return c.d(a,{a}),a};c.d=(b,a)=>{for(var d in a)c.o(a,d)&&!c.o(b,d)&&Object.defineProperty(b,d,{enumerable:!0,get:a[d]})};c.o=(b,a)=>Object.prototype.hasOwnProperty.call(b,a);c(6993)})();

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.708611583181537
Encrypted:	false
SSDEEP:	24:cF5h8g1wVRvfBvRytXOjORraYAgxQyXLxwanf43tSKOKut44Hb:If8KwVRnGROjOkTgx9XdW3iPHb
MD5:	EA5F81175470F655A23E40E21858D629
SHA1:	42FF00908F886AFBAE308D2E2DBF4CE2CE00B8CB
SHA-256:	23713BA4DDFFF35A4D38062986DC4B57687E7B7E3D61AF2AD72944367610D82A
SHA-512:	1F49C611BF3904B34A841B1411764D9B56876C9C557169EFBA7DDB41D7C758182DBA01594F225AEEA5339CEDAE59837AD45B8A6B9EF6DE5124771D18BCF40202
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Defender-75x75
Preview:	RIFF....WEBPVP8 z...p....K.K.>E..D"......(.D..d...E....8t.ug....R...._J.0........z..n.%.....Q...".j-.K...u....>../...M..JE..0n...I..lo...b.....G...&...=0,i.(.}YC5r !aQOn$...,.@...2P.V..};...5.....s#k.....?.....yx.....O...9......o.M+eb...H.m..U0..V.\|_.............&.6.w;8.m.[.P"z...~....y........h$x(.....!f=FS.d.PQf........._....l5!j..L]P.....q!.UJ../\.7a..r.dl.qWN.Cqfm_.Ee.h..n#..I.KM........t.9V.DV./.5>.H.....<..H.\|..Z?..#4..P......?t.]f........9x..s.3.,]..z.l........n...(.q.Yw....=.~.,...z........>.6haX.....H.,..6.A..x..W....a;C:5T. ....K........M.p9.h.1:A.[.9..E..$.9........t\..}q-~.g._X....W...S....p.U.(...&...=...<.._[.m...,...$p?~..n.....l.....4.;.A..2.?E...j_..2~..A..5......SeU..%..K(.o.<..0..V....p..2.t..)....%...0.X.e.Q.N.......5...k..DP$...&u.,..Z.~f.6e.r.>....nR.(..$..)....yJ.0......5.....J..^..I....%:...B...8.;(...WNK.:X..y.6+Z<f...C....

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	566945
Entropy (8bit):	5.427445847196822
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6OTa9/2y16gnu1:XQY22kuQ4/a/2y16gnu1
MD5:	0848B540E7CEFA19B6B90711E600470E
SHA1:	15A6D705E861BDBD6E4620F3982C4CDD6581BCD5
SHA-256:	5E8CB94E51F938396C62AAB378E9CCEB8D94C008730084188AAC207E8151697E
SHA-512:	6A33F5B167EBDB7ED2C21D1061603D61577A366B833155400A687CBD83E108910A4A58E29B36CAE96B51828E4D0D7C4BD714B4BF2C8C6834225839A5287288B5
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=Xoy5TlH5ODlsYqqzeOnM642UwAhzAIQYiqwgfoFRaX4
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	dropped
Size (bytes):	3642
Entropy (8bit):	5.399452635270733
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5Hvsy15vm9sgsTO7wdNTB:yjXPT2Sb15vkl7wdN9
MD5:	BE3F2A9F6A41FC40556EFE260FC861A5
SHA1:	EF6D673802EDF44C01EEA9DD86DF4E5ACD21757E
SHA-256:	C94F3B6AA377CFC8D9416F38AEDF1E49C43DE0BDC6726858720610827DF2DD3E
SHA-512:	05ED779F490E9F21153E0C6838198A9E5337C4361644E62A5C99BCA3978001840CAC2E947874983FABF15573FDDA548567176F77B0393A827E27E47ECB01792A
Malicious:	false
Reputation:	low
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	downloaded
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (801), with no line terminators
Category:	downloaded
Size (bytes):	801
Entropy (8bit):	4.516243092751944
Encrypted:	false
SSDEEP:	24:kwgwPextGGTpab5j9BB8kbco/WIGGaTpEzT8:kwgwPextd9mjTBnbco/WIGl9En8
MD5:	D459D0E471843E016818EA2BF4238F70
SHA1:	ED6F44AB79AEA3A9B9388D9D171229171083E880
SHA-256:	44DB7AAE1580763F035EE30F6DCB5DA102C29E2B304180698EA7BD25212C0FB1
SHA-512:	68A35ECC4B42D637B51E1527F1668AC2FF060AE00C5343E1D67DB2C6AB959EAF6133C42BFB6033C8CBD89EEA6404153DC9DE09894C0F081A4B7D4CE3D739877C
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/domainprotection/refererrestrictions?cb=lpCb88598x81007
Preview:	lpCb88598x81007([{"enabled":true,"whiteList":["microsoft.com",".microsoft.com","microsoftstore.com.cn",".microsoftstore.com.cn","office.com",".office.com","googleusercontent.com","bingplaces.com","translatoruser-int.com","liveperson.com",".liveperson.com","liveperson.net",".liveperson.net","lprnd.net",".lprnd.net","lpsnmedia.net",".lpsnmedia.net","static-assets.dev.fs.liveperson.com",".azure.com","signup.azure.com","azure.com",".moscnuat.com",".lpnet.com",".azurewebsites.net",".geologic.al",".microsoft365.com","microsoft365.com","checkout.microsoft365.com","stores.office.com",".googleusercontent.com",".bingplaces.com",".translatoruser-int.com","lpnet.com","moscnuat.com","azurewebsites.net","geologic.al",".checkout.microsoft365.com",".stores.office.com"],"deleted":false}]);

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	dropped
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	914
Entropy (8bit):	7.096519314263075
Encrypted:	false
SSDEEP:	12:+cK/gj6qWzaFRzC6lTIyR6+QH1Khkg4y2PZqArgtWi080IhJdA97K9rrmV7YJ3nH:+cKYj6Lmzt1m7HqUURg+4WdoGJ1n
MD5:	8F5270DD3FC732C95074796C0FDF90DE
SHA1:	1ECDA86497556785FB039A275FC692B720A5A321
SHA-256:	CB17B92479A8B5C004A582BC0AEEC79CF057FF664C26DE7AFDD8A978B91D4E3E
SHA-512:	8E732376EB710BB27F4BC1700511541CD2455C1D0325F9D714C66E95168A6B05E1FC485949C3293B79B1F2B9999B01AE6D27D41CF1177FAEC113E361A70C7E21
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Clipchamp-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................x...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......J`...B2.......1@.+<.~..9Y%.P.....V..&...^...$.Lm..r...VN....F.z..9.m....<...#..Wx....^^g..&Y..b1...8.t....x;.y..T..g.....9.]I.@rT....r.....l)......C.n...s...t`ncR.....?....F..l..QXBzg...7.#..r.....e([l...C...S....,..7c4+9].....nx.I9".\|.L... .i.kPX..);..>\.]..e.g....g........$.vj.......=.i...z.+....\|W..^?..w.l..&Py.q..%....W@..B......@.@.m..q..s.....K.t?..0%..P..e...._.H...B.....mD..rO.p."..._q.;/.......j..5D.....0..c^H..~.E.......Rc...(.$.\t..PNG......>6.....-.N\|.1...E<.Kz...%..M..c.]."Dc=.SF..}.u...6K....s.......RBm.A-uh.!......`,..?.I'r.:.A.Fa`Z/......Z7....h.&.#..*...\.y..."

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9892), with no line terminators
Category:	downloaded
Size (bytes):	9892
Entropy (8bit):	5.250146010774664
Encrypted:	false
SSDEEP:	192:sEy9khiW/NNP4lG+H/Q/9aX2loUgYRN3t7TMzpsvJ/7w6kjrgRN3t7TMzHELsjji:sEy9sKubfRN3t7TMzpsvJ/GrgRN3t7TD
MD5:	3DE36F700A9FD7B27D7CF9968D108388
SHA1:	9589A684E072A97298664E70A787008BCBD20B6E
SHA-256:	027DBE31BC494E14ACAB76A221273E52D1D8273F29A5A46055B36D74D6EB369B
SHA-512:	4BFB1365BF756D4A8239C28429DC09263C25DDA33B37623553102F6A767601C2037B9B237CFF755197C35305AAAAE5895FF9E4822B21F7D8A7592FAC6CC6F73D
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.60.0.0-release_5218/jsv2/overlay.js?_v=3.60.0.0-release_5218
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lightbox=function(){function a(){var a={css:j},b=lpTag.taglets.lpJsonToDom.convert({containers:a})[0];return b.className=b.className+" LPMlightbox",lpTag.taglets.utils.appendToPage(b),b.id}function b(){var a=lpTag.taglets.utils.geObjById(i);if("undefined"!=typeof a&&null!=a)try{a.parentNode.removeChild(a)}catch(b){a.style.display="none"}}function c(){var a=lpTag.taglets.utils.geObjById(i),b={name:"opacity",targetVal:.7};lpTag.taglets.lpAnimate.animate(a,b,{easing:"easeOutQuart",duration:1e3})}function d(a){var b=lpTag.taglets.utils.geObjById(i),c={name:"opacity",targetVal:0};lpTag.taglets.lpAnimate.animate(b,c,{easing:"easeOutQuart",duration:1e3,callback:a})}function e(){i=a(),c()}function f(){d(function(){b()})}var g="1.3",h="lightbox",i="",j={backgroundColor:"#000000",backgroundImage:"",opacity:0,filter:"alpha(opacity=0)",position:"fixed",top:0,left:0,bottom:0,right:0,zIndex:107108};return{_V:g,name:h,init:fu

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	dropped
Size (bytes):	181466
Entropy (8bit):	5.554874109955879
Encrypted:	false
SSDEEP:	3072:Sfyz+8hxjR20cgOl4L9nH2BrWNeE5Q6nRyWK/wCG4X5GFnX45Ti6ZssSBodxD4t:Sfy6gFXxH2BrWwejZcwC15GuTDZtUgu
MD5:	B4F0B5100B03A879DD5D2E97636EFC37
SHA1:	72C5001013A7514373D5CC4918B0A0D95C65617A
SHA-256:	5BACAEE30D72B76D83BC5FDD190BF027CDD4C270CF7D081E487ABFB8EA63EBFF
SHA-512:	99BF0AFAF3BB642032669DF2E934BE7FACE9A95DD79E9BF59E6D565E6355754796B1F389B32DD12AFEEC4A95B5E627ED58C8C355E9828452448F6B7EA9F2EDB1
Malicious:	false
Reputation:	low
Preview:	/. Microsoft Dynamic Proto Utility, 1.1.9. Copyright (c) Microsoft and contributors. All rights reserved../.'use strict';!function(Kb){function la(xa){var ca;return(n[xa]\|\|(ca=n[xa]={i:xa,l:!1,exports:{}},Kb[xa].call(ca.exports,ca,ca.exports,la),ca.l=!0,ca)).exports}var n={};la.m=Kb;la.c=n;la.d=function(xa,ca,P){la.o(xa,ca)\|\|Object.defineProperty(xa,ca,{enumerable:!0,get:P})};la.r=function(xa){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(xa,Symbol.toStringTag,{value:"Module"});Object.defineProperty(xa,"__esModule",{value:!0})};la.t=function(xa,ca){if((1&ca&&(xa=la(xa)),8&ca)\|\|4&.ca&&"object"==typeof xa&&xa&&xa.__esModule)return xa;var P=Object.create(null);if(la.r(P),Object.defineProperty(P,"default",{enumerable:!0,value:xa}),2&ca&&"string"!=typeof xa)for(var $a in xa)la.d(P,$a,function(Ua){return xa[Ua]}.bind(null,$a));return P};la.n=function(xa){var ca=xa&&xa.__esModule?function(){return xa.default}:function(){return xa};return la.d(ca,"a",ca),ca};la.o=func

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16352
Entropy (8bit):	4.989210940787624
Encrypted:	false
SSDEEP:	384:CGGBy8FZFejnyLSbr+4SbV6gpBdg71r1pzsl:8y8FZFejnyLSbr+4SbV6gpBdczs
MD5:	9CFAC5EA9165FE7AF811A476FF5BFD2A
SHA1:	1A8E2AAF9C9A74708236DBB71B714E8F95583F2E
SHA-256:	0E00B0AE9312DCC43DDC1A31B7ED955891D085B1184DDADB8266C79D5B8B9C43
SHA-512:	FB53F4C167BC3A84E06408471CFE253D2C79F3C250F9763BE0A47A64D7A32EBC1EA3C0AEA2E8E19274088D6731652DB0B129B43EA9AD4FEF7E34D182726559DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v2/buy-now-v2/clientlibs/site.min.ACSHASH9cfac5ea9165fe7af811a476ff5bfd2a.css
Preview:	.buy-now-v2 {. margin-top: 48px;.}...buy-now-v2 [data-tab-content] {. display: none;.}...buy-now-v2 a.text-break-keep-all.btn.btn-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-outline-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-faint-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-inverted-primary-alt.my-0.px-4.mr-4:nth-child(2).{. display: none;.}...buy-now-v2 span.sku1price a.text-break-keep-all.cta.my-0 {. display: none;.}...buy-now-v2 .active[data-tab-content] {. display: block;. overflow: hidden;.}...buy-now-v2 [data-inner-tab-content] {. display: none;.}...buy-now-v2 .active[data-inner-tab-content] {. display: block;. overflow: hidden;.}...buy-now-v2 .card-container .buybox.second .link-group .btn-primary {. color: #0067b8 !important;. background-color: #fff;. border: 2px solid #0067b8;. text-align: center;.}...buy-now-v2 .tabs {. display: flex;. justify-content: le

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27168, version 0.0
Category:	downloaded
Size (bytes):	27168
Entropy (8bit):	7.992922969154643
Encrypted:	true
SSDEEP:	768:5t+z+kiMy2C4rU03JPhE4lbMTAPZE6OekA:5t+Vyi3JXqTABEg
MD5:	B7640425501065524CEC27D4A55A85ED
SHA1:	F254C388A65EFB4B271C56DEB5685A77EBE09D9D
SHA-256:	FE8A1047376498C80A157D13555E42A92AD480FCB0BCC9DE51AD1930FBEB7F91
SHA-512:	9795975F44BCAE6B73979B221B1C544AC943BCE0ED485B266749559AE95D39641E09C458F2ED20F4667EFC80CA2C47DC6300AD4A3E5CE1D38AA94E014D61322A
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2
Preview:	wOF2......j .........i..........................`.....L........l....6.$........ ..0. ..i.C.'.9.@5..m.....1".X.13..(.......IE.....6.!s.K.=j.z.;q.......,..r....I..I..E.i..u........26.W.X....>e(<.M.R..^Y..e...+..pC.6.E9.l.$S..bn...)^.1.,..pj..<H....^v...b...\|t.....ys.XH.h.#.qF.....=W.x<q.d.m.^4....._...{...H......K.....ds.v...u{....:.....f$(t...DR.B._.p....m....jPf&e.F.Q..a.G.,.a$+.........f.k....@D{....p "B..X1+g.nN].n....W....?.:..K..D.,Y.....;I7.u.:...R.k...,....{+..Y.O`...W.xw.t..d.:...M}#`7"..\|...j.rW.....U.h..A.m`<..$h M....`..vx.w.Pi.3.}). . .Af.........n)P.w....Z.#N.6...@.e............#..B.<...H.HW......6<..)k[..%c....+O..RG0i...@.........J..3}...6..S.......'+8..ZFezY.r.%9)!n.T@.0vF.....y/..!.-.6..r?...#p\|Y.2...}...nB...6.$8.d:k.......r........ ..@.h.+.....5.H.n.3.P.58..\t..I.N.uB...@N@K.]Q..MIr..C:.{t...........F..*.)3.1J....f....Uzn.\o.#.=&h...t........:@BU....V@3..X.pD.C@ H...}.06...G........X.i]n.#<..K1`.,YV..o..<....ms.B.!..

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6493
Entropy (8bit):	4.551839647285828
Encrypted:	false
SSDEEP:	192:i5FC2Hc5G5S5QIcYcapz1CIw4AG/ayMJRLQDBRLa3R5WI:i5FZHcAwO6ZP/MRUHeR5WI
MD5:	72BF18B12BFCDCFA8B757E8413CFA263
SHA1:	5D69BCC252CE7D0F985699D36827F84EABE1DB4C
SHA-256:	119C6149B19ECEA8E4EF2C5AB47B20C5FDEAF1546F1C0A4349A345A74CCFEFE8
SHA-512:	9502AD91D78E6EB3C212944A66E2A18A38D26A1E510E278C6F2384E380D182345656F9AA66CF368F5B0AF8C3BB5FBAD7CB8E58EFDF8D66B9055C9C249E36393E
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function ().{. 'use strict';.. var translatedCountDownTimerVariables = $(".countdownbanner").data("count-down-timer-variables");.. function getTimeRemaining(endtime) {.. // Set the date we're counting down to. var countDownDate = new Date(endtime).getTime();.. // Get the current client time. var clientDate = new Date().getTime();.. // Find the milliseconds between current server Date and the count down date. var distanceMS = countDownDate - clientDate;.. // Time calculations for days, hours, minutes and seconds. var days = Math.floor(distanceMS / (1000 * 60 * 60 * 24));. var hours = Math.floor((distanceMS % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));. var minutes = Math.floor((distanceMS % (1000 * 60 * 60)) / (1000 * 60));. var seconds = Math.floor((distanceMS % (1000 * 60)) / 1000);.. return {. 'total': distanceMS,. 'days': days,. 'hours': hou

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
Reputation:	low
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2916
Entropy (8bit):	5.299643121721776
Encrypted:	false
SSDEEP:	48:F2CwrUfJrBAkyq5tJiSoGu8EBG8gxE/44af4G4QLPp/CpoiovvtB6Ugw6vAykytz:Fzw4xBryq3bCpBGlE/4Xf77jp/Cpoioa
MD5:	348B07E6E2C5729E9E932BA2765BDF43
SHA1:	09484F4E16FC3CD083C1D40C74C3765B81F76ED2
SHA-256:	5083F052635B8F690C7327BA89F17FA956E73E4161BD302163EE5B371383547E
SHA-512:	1872F4B62AF8864E5F37DC3B7277E68DF4C4D85AA405A85ACF8D034BF61F1134AFE002C169BB45DB5AC432AB25004A44935B4CDD5F87DF934E95FAA3E1920FC4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/feature/v1/feature/clientlibs/site.min.ACSHASH348b07e6e2c5729e9e932ba2765bdf43.js
Preview:	'use strict';(()=>{function l(c){var a=t[c];if(void 0!==a)return a.exports;a=t[c]={exports:{}};return v[c](a,a.exports,l),a.exports}var v={4470:()=>{function c(a,d){(null==d\|\|d>a.length)&&(d=a.length);for(var h=0,k=Array(d);h<d;h++)k[h]=a[h];return k}window.matchMedia("(prefers-color-scheme: dark)").addEventListener("change",function(a){return function(d){var h=document.querySelectorAll(".feature-card .card-body .img-fluid");h&&h.forEach(function(k){var g=(k.getAttribute("src")\|\|"").split("?");if(!(g=.function(b){if(Array.isArray(b))return b}(g)\|\|function(b,m){var e=null==b?null:"undefined"!=typeof Symbol&&b[Symbol.iterator]\|\|b["@@iterator"];if(null!=e){var f,n,q,r=[],p=!0,u=!1;try{if(n=(e=e.call(b)).next,0===m){if(Object(e)!==e)return;p=!1}else for(;!(p=(f=n.call(e)).done)&&(r.push(f.value),r.length!==m);p=!0);}catch(w){u=!0;var x=w}finally{try{if(!p&&null!=e.return&&(q=e.return(),Object(q)!==q))return}finally{if(u)throw x;}}return r}}(g,1)\|\|function(b,m){if(b){if("string"==typeof b)r

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	dropped
Size (bytes):	80951
Entropy (8bit):	5.3876275331732755
Encrypted:	false
SSDEEP:	768:TycSO5nsL9Z858NTE+RhA/29VCZgoFczBexsi7dmOk90h5aujpb4koYeHXGexu2+:WqiL9H2+RS/Drnxy9asNv/DapFZ
MD5:	DEFD853B5328EB16B59194C88BA17907
SHA1:	3E27A34107019616CD79B8053F105EA0C7F3759B
SHA-256:	DB511918FEEC659AD18C9FD6E9FA87D4037DFDC3031BD5C16984B82FA153DC84
SHA-512:	878FE314E902A9A2CB9E7CE8A559BCDA05B95167401E925A066538008733B6C6CEEA223C4C67E9121A0C4BF86BAFFAE47F98A513B04DB26C033A5226C2FB81CB
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Analytics Web, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var i,n=typeof globalThis!=n?globalThis:e\|\|self,r={},e="__ms$mod__",a={},o=a.esm_ms_analytics_web_3_2_18={},c="3.2.18",u="oneDS3",s=(s=n)[u]=s[u]\|\|{},l=(l=n)[u="oneDS"]=l[u]\|\|{},n=s[e]=s[e]\|\|{},f=n.v=n.v\|\|[],u=l[e]=l[e]\|\|{},d=u.v=u.v\|\|[];for(i in(u.o=u.o\|\|[]).push(a),t(r),r)s[i]=r[i],f[i]=c,l[i]=r[i],d[i]=c,(o.n=o.n\|\|[]).push(i)}}(this,function(n){"use strict";!function(e,t,n){var i=Object.defineProperty;if(i)try{return i(e,t,n)}catch(r){}typeof n.value!==undefined&&(e[t]=n.value)}(n,"__esModule",{value:!0});var c="function",u="object",fe="undefined",f="prototype",s="hasOwnProperty",l=Object,g=l[f],v=l.assign,y=l.create,e=l.defineProperty,T=g[s],I=null;function b(e){e=!1===(e=void 0===e\|\|e

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31516
Category:	dropped
Size (bytes):	9077
Entropy (8bit):	7.975537408589154
Encrypted:	false
SSDEEP:	192:JkJUqRyomFIPHR7Ot2kgknP1JtmV2wsibF4HNzDRkyz:auqR4IPHR78iItpw6zDRjz
MD5:	D2BA765F9D6C67BA7509D5DA2286BBB7
SHA1:	F203757417D72E22BB7758260AC52E45175821A9
SHA-256:	75C1F0066A69EBD567208842251EEAB6504884E155407838D5D4DE3F58FE195C
SHA-512:	37F19927E72BE24D0A5FFBFB6B618628205BC816DC7A93BA2B1E07E766951180E90E94C9A0A3FE96A7B2F9B27E8CA9BF380332DF5EC900EDE9575E215A451899
Malicious:	false
Reputation:	low
Preview:	...........}k[...g.<.?..w..8N.-]....]...M(...cl%qq.,..d...3..-.r..r>..)..h4..fF.h...p2...(.6...F{..{.....(qMC...N...vJ....?............YZE...}.]n.'I.(cE.J...E....^.-..U.2v"o..f...D.....~..]M..<wH._.:...-..M.8.._....[.M....+..f......7..yM.t...}2........oxb..uF\|b..+.K{...v...6u$.>..N..Z.mh..z.2.#...>..x\.'.z.a.}eln......+ck.x.a...m.U.x..........lt.m...._..h....u...e.(.`... de.Fu.{f8.g.....k..a2..~./......B..$u...7...`....Ys~.:....3.Y..=.f..........?7,..............~....../7.`...5.x.+.N......4.Ym..v\.+n.FH"}.~.[.$.Y5.Q8........JDM/.... I.\..L...N..+....bwj....S...t~th_.?..O.w...........\7......rt~z8.....\........E.k.^L/.......M.lQ...].B!/;..=<.V.vzt8?H..}....NN.'...}.[.N/O..b..E\|qx....v..~..Hj.u4.9<(...^..(.F.SZ..d....9._.._.T...O...........u..\|..x.i~.L./G...G.....;=...<.ut.{..1.K8/..0...L7#..2.D.h..*...;wG..nw..t~0Uq...wA.Wj..6..c.4..(LB'........".L.@..G..0 h<4g.E...B....V...eW......t.v..{..?<L.`..u.f]...M..7..

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32162)
Category:	downloaded
Size (bytes):	48277
Entropy (8bit):	5.399966601335727
Encrypted:	false
SSDEEP:	768:cMlpUopUoYekUjNEvcJ1wKo3b9D14eztLUeNArQWbP3jAcSMb4cN7fkQ0t+Z:HlSlhAEgwzx2y7i4zgZ
MD5:	77732F853326E091601EE0A2A59DCA12
SHA1:	C8E5A777864AAC876E4D0812661D2DB8562CD606
SHA-256:	EDF74FC034AD6CE6C129B64B1D68BBDFD96594B9D094D8633A454A1667781113
SHA-512:	910B887A9B33CA9D4BA452B9FF4A9E19575AF84E2739BD679F6E64974B9DC71999FFA1AFAA0B267684CB7F981EDE483AA38254A14DE52AD2B25F76F7A9A58F9A
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.29.1-release_1359973818/storage.secure.min.html?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":"

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.327819531114783
Encrypted:	false
SSDEEP:	3:Aq7KKlMT9:AqeKWT9
MD5:	A8A3710424DC6E0DFF393C6964441BDB
SHA1:	E4978066791DD394BDDD174F2687A7CDD43442B2
SHA-256:	46CD047CC0D3D10776E2F50D4C9D55DB58BD97D7A95B7D691F53D4937C71CF00
SHA-512:	EE135EE50868E59853C8FE57A9471AE1FBBDE30A929D33B4A4D56200E70C93AFDFF0301EF7FEBC803258C2BA2DCBC183E632B2ADA1745D3C87C1EEB98E8DEE62
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css
Preview:	[class*="z-"]{position:relative}

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	dropped
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	dropped
Size (bytes):	128643
Entropy (8bit):	5.326787692367428
Encrypted:	false
SSDEEP:	3072:BkDsmoyfhaLZnJNPN5/4OYQkCqNeUyELxRX3:BkZXfQLZ6n
MD5:	8A825C513AF4B75B682515AF94D92D62
SHA1:	61EF6253689EA75B969195632D0D4209C0D569A5
SHA-256:	1A8CFDE0D5DD1C396C936C51BDD3A67918DFADAE8FDF56EA6683A2BB89F372E2
SHA-512:	6A83B519A4C36E83362CBBE09C30CE97F48525E1D739EB4B3FE21B17D4777F481D4E767326055BFF5AA9BE86DB83B3127B3E385C514FBEC8E01A5F8109A197E7
Malicious:	false
Reputation:	low
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (476), with no line terminators
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	5.856447458258293
Encrypted:	false
SSDEEP:	12:cOgd2z3utLPneSZRafe4WTggFBKu9fvtgizoLJq8Zbj:cO+w3utrne8RK/WTggFUu5vtTGJq6
MD5:	7D44C520C37FFBD0EAC5C4B3D3E63049
SHA1:	795DB04D626E137B439338D53D93F08E9BD152D8
SHA-256:	B2E091D8F5F42FECE940CC4FAA3B8386A10753364193E3DFAF706BF2A188B3CA
SHA-512:	CEEEC60CFDC65DFFFF20A4C66A141C4DC80EF2CE3F2EEBF5DA37F2A5D6A2B2C4B6927051B76BE53B31F69E0930F800FB5A3257C26851904AF47E01D5E315DAE9
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.29.1-release_1359973818/lp-origin-trial.min.js
Preview:	!function(){if(!document.querySelector("#lp-origin-trial")){var i=document.createElement("meta");i.id="lp-origin-trial";i.httpEquiv="origin-trial";i.content="A77GUxMF2gPljjeX2xdlt25iXAGDqu3SWLRaxp24NcNGz++ZE9fkggbPexLArxAguTbk/8W5OtGUm5ki+fqC0wMAAACSeyJvcmlnaW4iOiJodHRwczovL2xwc25tZWRpYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=";document.head.append(i)}}();

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	dropped
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1878)
Category:	dropped
Size (bytes):	131929
Entropy (8bit):	5.545511476229831
Encrypted:	false
SSDEEP:	3072:2lGkl+cY0g33uACmfB1Y+cejk5m0o84LFH51bH:pk8Rnues5m0o3LFHfH
MD5:	DE268A857EE736DD9688A698776346F0
SHA1:	3537CC8C3F5272D30EE44A94C358B98E56B0A3A8
SHA-256:	FBB25989D087F9A3E878E67FD12183959322331FD62121F883D71D0ACA083C0E
SHA-512:	9585A9415ED505E948D51333EFA268A22BB3850BEE49FB196B723366BE897ABBE2C97FD157330CD01BDA0D85069EDE4956CF828F5B49027D552C967245F5BB85
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ha=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ia=ha(this),ja=function(a,b){if(b)a:{for(var c=ia,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var k=d[d.length-1],l=c[k],m=b(l);m!=l&&m!=null&&fa(c,k,{configurable:!0,writable:!0,value:m})}};.ja("Symbol",function(a){i

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29888, version 0.0
Category:	downloaded
Size (bytes):	29888
Entropy (8bit):	7.993034480673089
Encrypted:	true
SSDEEP:	768:b2epE/P8HSbsbNl+GfEMuHyS4aAyoVfszfHS1W:6eSkgsbGGanzAjIyg
MD5:	E465F101F881B07CCFBB55D51D18135F
SHA1:	0D76B152EA1AE4AA68DB36DCC7BD204ACDC571D3
SHA-256:	6F5EBFD0FC9A520ADCA234FDD34B4DFBEB106942A6F44E65FC1AC54F7D2D6498
SHA-512:	2C1F730DB5108DDE4731F22838AD7EEF4D6698ED5EA0C0951B81B21722DF8051623923672C46F9397F81E74741CDEC794F03AAC37E532D1223A1A1CE448C73AA
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_70.woff2
Preview:	wOF2......t........X..tb.........................`..`..6...Y..... ....6.$..,.. .. ..s. ..S."..`...@.."..........!!.T5..?.........#t..7. .. ~"?A..A...4./..}.'.D.8.E......C......T..o.......l.UJ..SB...U.D6..W..uV.j,...+.>"N...}.&E..P~....z..w...Z".k...S:..t.7.fA.ic;%HZi...W.....w...I.p..........=>....) X ....@B......R ..P..$H.....h.{,..X..l. ..uY.w.Kc..+........r.H....... .....!....7$.b......@(Mp..,."z..(......V....y.E..w\...n./...&...+...R.......\~d,.....S..r%.s.s.......h...:.@.!h..(.< .@..0.P2H..!..r.6..V.r.:..)T.9T..n......;....+a...).L+....eX....\|.x...$]hS....+e+ HK.H'Q..RJ..X...}.....l....=S.G.e.{..I%9.1.O~k....@.$.{.M^.......~z...2...r.]b..[......(.H... ...z.)...&....9..$.Q1F...1......7C..UJ...T..F....Z..K.......F..&L0c...p..N8..g...W\...q........Oz..O./......#..... ..L0B.A(..#..#..D..(..M4b.A,..`A.q.'..$ .D$..d..B.RIE.iH'..d .L.....M6r.A..3......PH!.(B1.(......2.S..*PI%..B5......:.S....H#.hB3.h......6...:.I'..B7.......>...+V.0.A.1...

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	dropped
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.011412010382019
Encrypted:	false
SSDEEP:	24:Y0vUS6zAKBzAczA+EPXmfofuofdBXnhAMK1ySYR2ssR2pR28WR2VR2dC8tnsNNy1:DvUS6EiEcE+q0ofuofvXhTgyzQssQpQP
MD5:	BE9241018193DAE097407988285EEABE
SHA1:	0CC741A9010D95908A6D284F3F149ECB11B77805
SHA-256:	44C4D4DAC7D5483313344CF58EE34C555E4B2CC347E7F377B0BD10D442245532
SHA-512:	6E26ECAC3CD7EC8E30A5E2FAC98436942C11FE6C0B18777ABBE306E2E3B626ED6049079C00A3689CE182450EC4F8F6B1317B49027D087C500BECD3015E832012
Malicious:	false
Reputation:	low
Preview:	'use strict';(function(){const d=document.querySelectorAll(".buy-now [data-tab-target]"),f=document.querySelectorAll(".buy-now [data-tab-content]"),g=document.querySelectorAll(".buy-now .LinkNavigation.includes .Imagearea"),e=document.querySelectorAll(".buy-now .LinkNavigation.includes .popoverdialog"),h=document.querySelectorAll(".buy-now .LinkNavigation.includes .closebutton");d.forEach(a=>{a.addEventListener("click",()=>{const c=document.querySelector(a.dataset.tabTarget);f.forEach(b=>{b.classList.remove("active")});.d.forEach(b=>{b.classList.remove("active")});a.classList.add("active");c.classList.add("active")})});g.forEach(function(a,c){a.addEventListener("click",function(b){b.preventDefault();e.forEach(function(k,l){k.style.display="none"});this.nextElementSibling&&this.nextElementSibling.classList.contains("popoverdialog")&&(b=this.offsetTop+54,this.nextElementSibling.style.left=this.offsetLeft+58+"px",this.nextElementSibling.style.top=b+"px",this.nextElementSibling.style.displ

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15003
Entropy (8bit):	4.665022125507044
Encrypted:	false
SSDEEP:	384:N4KHLpVi0apa4y0VowO25oowi6AT4W69tMIHY:NdLpVi0apa4W4
MD5:	E7BBE71939332CE26F1905FA17E40CD0
SHA1:	A5345E3679E5C2844CD12359B8CDFB7FF454B892
SHA-256:	ECED1925CF634059B9191F2A5B6DD62D329D509F0B9A6B1DFABCBFCF37847F09
SHA-512:	9A4DE6E73725B7B6654B6A6D37099A9290BFEC45CF9260F02A5F4855C26CEB7BC8A6315B708515C8D073102D7E81B9CB2B98A149856E4DF003E83ECA66153587
Malicious:	false
Reputation:	low
Preview:	(function () {. const tabs = document.querySelectorAll('.buy-now-v2 [data-tab-target]');. const tabContents = document.querySelectorAll('.buy-now-v2 [data-tab-content]');. const tabListSection = document.querySelector('.inner-tab-content');. const innerTabs = document.querySelectorAll('.buy-now-v2 [data-inner-tab-target]');..const imageAreaEle = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .Imagearea');. const imagePopup = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .popoverdialog');. const closeIcon = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .closebutton');. const cards = document.querySelectorAll('.buy-now-v2 .ContainerBuy');. let monthlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku1price');. let yearlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku2price');.. if (!yearlyPriceEleText \|\| !monthlyPriceEleText) {. tabListSection.style.display= 'none';. }.. const setActi

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=Zs7RjAAAAGivrgN-&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	563851
Entropy (8bit):	5.221453271093944
Encrypted:	false
SSDEEP:	6144:2VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lpl:tTP0BKYtf
MD5:	12DD1E4D0485A80184B36D158018DE81
SHA1:	EB2594062E90E3DCD5127679F9C369D3BF39D61C
SHA-256:	A04B5B8B345E79987621008E6CC9BEF2B684663F9A820A0C7460E727A2A4DDC3
SHA-512:	F3A92BF0C681E6D2198970F43B966ABDF8CCBFF3F9BD5136A1CA911747369C49F8C36C69A7E98E0F2AED3163D9D1C5D44EFCE67A178DE479196845721219E12C
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css
Preview:	@charset "UTF-8";/! @ms-mwf/mwf - v1.25.0+6321934 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise.//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389), with CRLF line terminators
Category:	downloaded
Size (bytes):	22309
Entropy (8bit):	5.876846394375398
Encrypted:	false
SSDEEP:	384:uFOqfjOQtBMksqArywtp7zYdCuhywhJiHuioHlEzvBWR72T/+9TMlnvpJqvcttO4:uFr7/MkWlf7zOowCdoFuvE727+YvpkH4
MD5:	291735DEFEA0BE4AC2352B2B18155CC1
SHA1:	0DAF4629D3C5BF605E2319BADF6AB905044E6FAD
SHA-256:	3D008DB15468A8C605F4C91823680B2E62183E5AA389E465CBB3C14E847F684A
SHA-512:	0BBBA50CE4C5165E4206ACB64000B962B7633CE0687FE022D2EDFA01569326DCE18C1A9F66842C5D8782F53D99806ABE148BFE60D98E7F3146A924F1E151F835
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/require-config.js
Preview:	const baseURL = 'https://www.microsoft.com/videoplayer/';....requirejs.config({.. paths: {.. "platform": baseURL + "lib/onerfstatics/onerfcomponentfactory",.. "telem": baseURL + "lib/onerfstatics/onerfonedsconfig",.. "redtux": baseURL + "lib/mwf/slider".. }, bundles: {.. "platform": ["requireJS", "ariaWebTelemetry", "html5Shiv", "html5ShivMin", "modernizrMin", "pictureFillMin", "RedTiger_telemetry"],.. "telem": ["trackHelper", "jsll"],.. "redtux": ["copyrightHeader", "iController", "iCollectionItem", "videoClosedCaptions", "videoControls", "keycodes", "viewportCollision", "utility", "swipe", "stringExtensions", "removeFocus", "publisher", "observableComponent", "htmlExtensions", "handleImageError", "componentFactory", "breakpointTracker", "actionToggle", "additionalInformation", "alert", "areaHeading", "autosuggest", "backToTop", "banner", "biProductPlacement", "obsoleteCarousel", "checkbox", "combo", "compareChart", "contentPlacement", "

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	dropped
Size (bytes):	30289
Entropy (8bit):	5.2611894534770975
Encrypted:	false
SSDEEP:	768:Q2u2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:QbM0S0/ks2JdImYFcw662A86vzyR
MD5:	27083AE98ADB75A1F14AD0D4D4082257
SHA1:	A3C3446B00C521B8818C8FADE4A0DB7E96A24AF3
SHA-256:	CFA632D87DC2E23D51A9623DF59A25FAFD14F109FFC2D97D62BEFD5343F34A6A
SHA-512:	D48CB15587211761101ADE364FC3779EECBE4A70F99735C928D6CA5E6CDD8F2EBCE796BDC27F7CBEEC5AFC9364EEF2AE902FE54DCD05F92E8AB9B2D616C97D5D
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	downloaded
Size (bytes):	143368
Entropy (8bit):	3.949506106648749
Encrypted:	false
SSDEEP:	3072:csiNi5JqER2ERi5/4lBXFDcoAdPYT4g2epaOkTEgTJPKKwPecO/ZSUZUWu/XiKXC:csiNxdPsaZPZeXxXHW/zNilXdk
MD5:	6CBA26AFE3E9C36155A322327243717B
SHA1:	19D393E7004E78C083EAB7602D4936C2EB0DDE39
SHA-256:	763D5A901D6EB0D340574F02D964D10BB08D96BCFE79B890B3E7ACEF51241C73
SHA-512:	25623B250EC7B7E77531D5E5A50DEC29D254EA8D880621879F37C9F8AD04C790F8F5CF37EA96D2A9165F5875D3217D482560F9AE1C9A7E9682EF7F0FB75F1559
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mscc/wcp-consent.js
Preview:	..v.a.r. .W.c.p.C.o.n.s.e.n.t.;.!.f.u.n.c.t.i.o.n.(.).{.v.a.r. .e.=.{.2.2.9.:.f.u.n.c.t.i.o.n.(.e.).{.w.i.n.d.o.w.,.e...e.x.p.o.r.t.s.=.f.u.n.c.t.i.o.n.(.e.).{.v.a.r. .t.=.{.}.;.f.u.n.c.t.i.o.n. .o.(.n.).{.i.f.(.t.[.n.].).r.e.t.u.r.n. .t.[.n.]...e.x.p.o.r.t.s.;.v.a.r. .r.=.t.[.n.].=.{.i.:.n.,.l.:.!.1.,.e.x.p.o.r.t.s.:.{.}.}.;.r.e.t.u.r.n. .e.[.n.]...c.a.l.l.(.r...e.x.p.o.r.t.s.,.r.,.r...e.x.p.o.r.t.s.,.o.).,.r...l.=.!.0.,.r...e.x.p.o.r.t.s.}.r.e.t.u.r.n. .o...m.=.e.,.o...c.=.t.,.o...d.=.f.u.n.c.t.i.o.n.(.e.,.t.,.n.).{.o...o.(.e.,.t.).\|.\|.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.t.,.{.e.n.u.m.e.r.a.b.l.e.:.!.0.,.g.e.t.:.n.}.).}.,.o...r.=.f.u.n.c.t.i.o.n.(.e.).{.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .S.y.m.b.o.l.&.&.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.&.&.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.,.{.v.a.l.u.e.:.".M.o.d.u.l.e.".}.).,.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,."._._.e.s.M.o.d.u.l.e.".,.{.v.a.l.u.e.:.!.0.}.).}.,.o...t.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365/microsoft-office?ocid=cmml7tr0rib
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	6.792303788549155
Encrypted:	false
SSDEEP:	12:+cK/gj6qWEaFRzC6l4ikyC0Crvxdh33jIM0C719H2bpF9rjwtoYp3AmNsOf7atTm:+cKYj6LdzOm0vxdhnj5BXH2VfPweEwmP
MD5:	98EB53867CC8EDC490DDCF5E934C0C93
SHA1:	626F90CFBCA97765D69E0C84DB821B9CC19ADABB
SHA-256:	F05186EB121A12C12AB9DB9163952D27FAFBD5CD0BE001BCDB4DE3A9512652F2
SHA-512:	6A16021D2FD6E12B26957ACF70447C9FE317C075A6E8CFE5F3EBA507F76BB2EBA745AEB5033C13583477192781D0221FB02A805A44D3A45913BA4300CB390F82
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-OneDrive-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......Jh...B2...... . .@....AYc.xW..z.^1...q{.B. Qi.^v.j.....$.Kh.cpO)...2..c..j'...CLe..j{g.h.d..vD..M./.hVa.@.u....j.k`..}!......V..Q..N...\{hk....)......u.......I&s..H.n..HL...sc.}....y.p/....<..f@z....P..5.\n..)..etZm.Qc...kK..Kjz....#.k....!3..Ub.B..R:.t....){q.*.#..Y....'4.K..._....<D\h,..q..............-#.X.E,;....~.ZaX6.n`._.B.ce.XV3..p.As.$..y...w]....4C...Yj.z.:.}..g...DgXH.u.vkWr.J.(.+.=N.V.d..,...\;q.m7...oc.MH...W...r..Y4..2+.C..a....j...p

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.269328710078199
Encrypted:	false
SSDEEP:	3:4MR1KgyWFECYDoNsDUln:4MDmCfs6
MD5:	6F083A779B1F1F71387FAA38DFA66F12
SHA1:	D60B5A5FD76B11B8DEF1AD1657738292E59C98CE
SHA-256:	2E8B2387AB049BE1306502B20D4BF3DB940C5E86152BB5927086AAF508E65776
SHA-512:	CC80DAAFFDF01EE35154C4992ED1B7E146EE3A7BC7C8DA2B51E855B29352527FFA6FE2D5672EA9BF92FED0AEBA14A1DD771F904C4255ADF184B75CD2746E0A00
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/sites-modal-component/v1/sites-modal-component/clientlibs/site.min.ACSHASH6f083a779b1f1f71387faa38dfa66f12.css
Preview:	.edit-mode .modal-dialog:before{height:100%}

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6982), with no line terminators
Category:	dropped
Size (bytes):	6982
Entropy (8bit):	4.890639313885154
Encrypted:	false
SSDEEP:	96:kTKVEtYqv/RQZDoAWuEe7cB6a3DRLIQrPYCD1a7Ef:k+/0SZxnEGk39DPo7a
MD5:	F1EB7E4EA36185A91C404F6105FC4A27
SHA1:	95A8C61028B5777D56F693C64902A98F200FE394
SHA-256:	5930BE8B563A637E5C98C385974998B1246380DEF9948E538EAA6B630ECF99D2
SHA-512:	32BB88B386C97D03098CB25E8CF36EE13F884EDF86FA72F7F1893F67DD41337C8DCB99F692BD3EEF6A6CF9751C6CA2F88F6DDAE36C9CF35E9D1F0A0A63E2625F
Malicious:	false
Reputation:	low
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:29:31","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 03:18:17","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 05:58

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	353852
Entropy (8bit):	5.944949400585535
Encrypted:	false
SSDEEP:	6144:8k6NPL7utJz2M9W2gvizNh9PnEZWXUNA2d9C1:8hEJz26WGhJn4GS90
MD5:	4CE03DAE6DBC7449C10A185ADFD796CB
SHA1:	6383824EF591BEF183D38C7E18FEEE9B94256F82
SHA-256:	0D438BC5167BE88ADFFA8952057F9837E035E693C7A5FA255E907E48E59545D0
SHA-512:	264EA8842CD4F7203E93BFC591135488C6328442AB58374099FA72B5F7308920999AAD8D44A0BF6C81AD96F5319B9AAA4E3F38A7F8A4B989AB30FD7A169B9CE7
Malicious:	false
Reputation:	low
Preview:	lpTag.callback({"taglets":[{"name":"lpSecureStorage","type":0},{"name":"lp_testingTool","type":0},{"name":"lp_sdes","type":0},{"name":"cobrowse","type":0},{"name":"scraper","type":0},{"name":"lp_ada_enhancements","type":0,"parameters":[{"id":"enhancements","value":"{\"options\":{\"debug\":\"false\"},\"logoCSSFix\":true,\"surveyTabFix\":true,\"headerTextCSSFix\":true,\"menuKeyCloseFix\":true,\"minMaxRoleFix\":true,\"agentIsTypingFix\":true,\"offlineCSSFix\":true,\"inviteKeyCloseFix\":true,\"offlineWindowNarratorFix\":true,\"cancelBtnCSSFix\":true,\"muteBtnNarratorStateFix\":true,\"engagementFix\":true,\"overrideStyles\":{\"cancelBtnCSSFix\":\"color: #000 !important; background: #fff !important;}#lpChatButton a:focus,#lpChat a:focus, #lpChat button:focus, #lpChat input:focus, #lpChat textarea:focus, #lpChat select:focus, #lpChat .lp_textarea_field:focus, .lp_confirm_button:focus, .lp_cancel_button:focus, .lp_action_item:focus, .lp_dialog_input:focus {outline: #000000 dashed 1px !importan

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 72x72, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	968
Entropy (8bit):	7.753065511654769
Encrypted:	false
SSDEEP:	24:TQkJvmEaoxCdIcq4lGRIU0MfTajbBHC+U3SEJu5SVqo:0kxaY1hIiybBiF37JusX
MD5:	E0629A1ED39D8A2F2344F04DDC0F31E3
SHA1:	24259E9209CE5BCDBE49140AFF1CBF08EE35C985
SHA-256:	227F4800ADAE8392D0C38090F99E5463C6A446E35BE9DC796B13F539B52650A1
SHA-512:	E543899C070F5B5D9471680B80207AE655EA313105AE7656D7941882340342AA66296B711F8B2E3F1D6B67E81253245054B508F13C16BAFC1E7365ADEF01F659
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Word-72x72
Preview:	RIFF....WEBPVP8 ....P....H.H.>Q$.E#.!....8....f....U...}..W.W...!.....;.8?..W...p.H.m>.....?.....x$.\.0...G.\9/.^....>..=7...r.eZ......M.ccWq.VV...k....w..x.h&..!h....S.z<...K>.Q..'..;l..cA..,oQ..) .......{.~.`....t.~....#..p;....(3..{.mU~..."cD........3l.v..Y...u.E......\|2..\|..+.k@....wjX..?.o-.....lG^b...s.]}>EK+.]........$..q.A.q.....`.....[..ma.I]..G.......>:...'.D........4.....ZG.3..^...WqQ..o.0~1...X..@...x....U.w.^....N.......\|%.f........../.2U....7.\|..gh>"...Go.(...F`.1..^`V.Z.........r.d...\|..C......#j..I.a...\|...;G..."Y....MVw.D.."......b..G.G,o...MR..A.8.?.....$..+?.).s..........o5@..u..V...+..\r.n`9.5zh.D...`..H..;g.P...L..X.+G......d..l.]...e-vf./.f.A.:..Y...Q.......!..i.......s.,!.n.h...+L.............%V.X...>.............\|.E....g....c.l......s.....U=.....qq.?...r.E.%.s.O..mz54....i..G.tH...o..E.u....&.....gY.S......Y\|^.).;S...5%..W..mRTwV5.r}...V.w.c.P.+..LA{.1.f...i;xW9......#<6.I..

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10865
Entropy (8bit):	4.653652024782882
Encrypted:	false
SSDEEP:	192:6gKJO7BvvD5cqAU1BIx8ExceFX8fAgFF2Lnlo+ejx/pZgeawF///D/BoMQa2DL:6gmYDA8ExceFMfA42Lnq+ejppueRXTSF
MD5:	41F46A05552E0A47D808F9B19DD104D2
SHA1:	8BA107CA8D9F2501308D782C9177D935EAF6E536
SHA-256:	90C5AF78F578C04C8300F555F677F857213D7708E55836DAFF2FAF64D9FD126C
SHA-512:	542DE2AA0A863F7890EB5F43A9949D717110BD82ADEBA37D097788DB172B8C0221DCC5679BF53D753186BE325D3301EEBD75EB79B488586A323A59A71FC74478
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v2/comparechart/clientlibs/sites/compare-chart.min.ACSHASH41f46a05552e0a47d808f9b19dd104d2.css
Preview:	.table-responsive.compare-chart {. z-index: 1;.}...compare-chart .compare-chart-table a.simple-link {. font-weight: 600;. text-decoration: none;.}...content-card-v2-component .border-bottom {. border-bottom-width: 0.0625rem!important;. border-bottom-style: solid;. border-bottom-color: #d2d2d2;.}...content-card-v2-component .compare-chart .compare-chart-sticky-content.sticky-show-stuck .compare-chart-card .cc-card-flex-grow {. flex: none;.}..@media (min-width: 860px) {. .content-card-v2-component .table.table-first-col-highlight tr td:nth-child(2) {. background-color: #d9e9f5;. }.. .content-card-v2.container .table td, .table th {. padding: 1.5rem 3rem;. }.. .content-card-v2-component .compare-chart-sticky-content .card.compare-chart-card{. padding-left: 2rem!important;. }.}..@media (max-width: 859.98px){. .table td, .table th {. padding: 0;. }.. .content-card-v2-component .material-backdrop.container.compare-ch

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnM3UmpBQUFBR2l2cmdOLQ==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (497)
Category:	downloaded
Size (bytes):	38192
Entropy (8bit):	4.983658960473866
Encrypted:	false
SSDEEP:	384:OG6fvDy67WEmKEhdEVCnJMCYUxwPrkYwvYFq0UjbUc:OffvGY0nW7wvYFq0UPH
MD5:	FF22B014923E4D07AF559BB783FCE862
SHA1:	A7E26CABDE161C9D2CB633A24797E379435CD898
SHA-256:	D79B7164CF8BCB550AE1D842031454B2600E64A24844D9280E8155B82916EACD
SHA-512:	B4C413CC997F411962A150C406D597663EAE3B46B6B9A4A733F282E60F57C03AB7CDC505985DC4FB9DF09609F8E41D073FE85FE6FDC76A5559D5DD941E723284
Malicious:	false
Reputation:	low
URL:	https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css
Preview:	/* ADA CSS */.body #lpChat .lp_dialog_container .lp_buttons_area .lp_confirm_button {..color: #FFFFFF !important;..border: 1px solid #fff !important;.}..#lpChat .lp_minimized .lp_notification_number {..margin-top: 2px !important;.}...lp-json-pollock-layout.lp-json-pollock-layout-vertical {..border-radius: 15px;.}..#lpChat .lp_csat_rater_star {..color: #fff !important;.}...lp_mobile #lpChat>.lp_maximized, .lp_tablet #lpChat>.lp_maximized {..opacity: 1 !important;..width: 100vw !important;..max-height:none !important;.}...lp_desktop #lpChat > .lp_minimized {..width: 400px !important;.}...lp_desktop #lpChat > .lp_maximized {..height: 600px !important;..width: 400px !important;..max-height: 95%;.}..[data-lp-point="lp_line_state"] {..left: -90px !important;.}...lp_sender {..display: none !important;.}...lp_chat_line_wrapper {..overflow: visible !important;..margin-bottom: 12px !important;..padding: 0px 10px 4px 24px !important;.}..[data-lp-point="headerText"] {..color: #fff !important;.}...

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.017920631493034
Encrypted:	false
SSDEEP:	12:DEARGUGLqcidEEblemSFxEARuWGBUGLqcSWGBdEEbleeESFZ:D1Jcsl21uWHcSWilv
MD5:	A722775809D2312F435036DEF15BCD62
SHA1:	2C6CF2D7ED0D1810B6C96269A4509071575E5771
SHA-256:	4DF68C42ED06B94BC6C7655FFA3F84487DCF88F2452B8BF43C217427E36E31A2
SHA-512:	3A4325C787C32BB7373B73CF419E94200167AA7CF2E689E4E1F8D46C8D9DE7607A4EAA3A346F25C3711723A30C678DE61F8813EBF81EEB66EA536968825F6B43
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHa722775809d2312f435036def15bcd62.css
Preview:	@media screen and (max-width:540px){.sticky.back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.sticky.back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='back-to-top']{opacity:1 !important}.@media screen and (max-width:540px){.fixed-sticky.fixed-back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.fixed-sticky.fixed-back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='fixed-back-to-top']{opacity:1 !important}

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28908, version 0.0
Category:	downloaded
Size (bytes):	28908
Entropy (8bit):	7.989764549602985
Encrypted:	false
SSDEEP:	768:ncxMT2KlhUWbYQhHETORZaoTMJYfWHwRytVfQwg:nBaXgYQ9EyaoYOfSfo
MD5:	72095568168D6A31E051E4D531759151
SHA1:	8EBE72EF4631721D800AAC28D854C1D1B952FE24
SHA-256:	6BA0D1A726F1887BD61727B308ED0BE0E73EDBA17D4AD11B91AB19B632E078F6
SHA-512:	17F1417D99D76E46601D483F8516731E18CA028221A57C53D557E00F9627234576D62EB3AB5EB5FAA13EBC1D8BFF047AC86B1499756BEE22FFB76B998B7B19A4
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semilight/latest.woff2
Preview:	wOF2......p...........p..........................`.....L..e.....T..].6.$........ ..b. ..Y...u.l....f.&......M.../....?..3p\.u.P..zOBE...x.I..T.;.....48.G..H..k..8...X..!...&M).)...{^..#.r.x...h...>.....f......^......gBP#40,.....%.f$..YD...i.`/p,..\.... &eNI.X.?.n+JP.4.g9...lq1.lA.D....E.1..;3.h.Y..ic.-.....V........:.......f.@..!....l.M-.XHJ..MH.H.)w......UN...O.u.3....Z.X..W..#... U ...,.=6P.@..4=.M.a..f.uO{....6d.6.:n....gx..M.s..jB.J..9M.&....R'fd..7....T=...Uu...d.....aQ...Vg.......}<........>@..]?)..T..)..H>..R@..J...Z(.4ePr. ] .A).H.J/..1.\..a.eY...oY.....k!b.......k..(............!...fc.....=@.h.#..-.L........y=.ic..2.P...fx.AJ....5-.(...o.t.+<h.aX0}\|G/.uYx..A.g.^o..S.F...3D....J....."....j.......a$6.....FG..1.a.2......'.g..95 4.h..VL+...Jf.V.+.U.e.Ia.Hc.v..i....dvF....n.zC...........c.La..d..AY.G.U\.B5TOM.A.4.6....4.L...cX...V....O.L..]B{.;./.s...\|..O$....y?.g.=>.G;...w.n....y.<un8..E.[.......?.....].e}^..FE....=:..Du......7.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	559
Entropy (8bit):	5.232580404602474
Encrypted:	false
SSDEEP:	12:uBDRWH7if9s/19sgZq5SN5wODFy22voE0u8iHQ20MOWl+Mg:uhRWbi69ykIS3DFyvjwKHlHg
MD5:	F51F0D5BCFE05F53A3624FA78B778F92
SHA1:	51678A70842C2C0E879FD843B5506EB0C2C2400B
SHA-256:	169009208AACA2EDD518249D85E3BE2CD332189F88AA24A467BA64A8098A9B9C
SHA-512:	E8C97A0B32ABDDB3A5887C732CB08B6524DAE4C6FF3AA0EB6DAEB7405D07BF6F64ACF8F83847E625B569BD9012416DDFF2BF1D6D7C7A3FDE6260F23E0BA7B606
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/dynamic-feature/v1/dynamic-feature/clientlibs/site.min.ACSHASHf51f0d5bcfe05f53a3624fa78b778f92.js
Preview:	'use strict';window.onload=function(){var a=document.getElementsByClassName("dynamic-feature")[0];a&&(a=a.querySelectorAll(".dynamic-feature-component")[0])&&(a=a.querySelectorAll(".btn")[0])&&a.classList.contains("my-0")&&a.classList.remove("my-0","px-4","mr-4");a=$(".dynamic-feature-component .link-group a");const c=(new URLSearchParams(window.location.search)).get("ocid");c&&a.each((d,b)=>{b.href&&"button"==b.getAttribute("data-bi-ct")&&!b.href.includes("ocid\x3d")&&(b.href.match(/\?./)?b.href=.b.href+"\x26ocid\x3d"+c:b.href=b.href+"?ocid\x3d"+c)})};

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	downloaded
Size (bytes):	30289
Entropy (8bit):	5.260974426031687
Encrypted:	false
SSDEEP:	768:u2E2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:u1M0S0/ks2JdImYFcw662A86vzyR
MD5:	F04D3E51969894BD486CD9A9A1549EA6
SHA1:	6DB7ED2E034FE99F5013144CA91DD21408F7AC36
SHA-256:	33A747222E8AE5381AEB53C9671BB3EB309B7226587674CD6D901F99645A852B
SHA-512:	C7BE3DAB8EF8DBCB3A0AA6022F8191F155358E4E974F0E42F9CD88C372EE77EB4513A6CC54E373CFE90232D67C6B02406B4D281D8158C24B51C8AA433452911C
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4075
Entropy (8bit):	4.690132965151433
Encrypted:	false
SSDEEP:	96:fdcVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoW:fdcVWNXK3XuXW5K
MD5:	BCBD2772C0ABF8663D70F9B2FDFE1356
SHA1:	E204CE7B2E7794FE694ACC266EF5DD44537E0A8D
SHA-256:	E6E3F69ACE18B39FCC62B9D2994A97992D13E618DC909C8576F38E78692286A6
SHA-512:	70F7C20EF81B5ABE854EA8FDF7F4F5F6C2A1BB013F8E85AD43E447A221B6947189C6EE9E07AE32FAD71E0C1DC4F3A957AB0A6722088BCB60D0204080753EAF26
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;..

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318771
Entropy (8bit):	4.938311028412072
Encrypted:	false
SSDEEP:	3072:owtki9QkGoO4QPwGY5DPMwqGsbkyvLUi4beyAX/bSe2yUXaemHqOOkwsik7oZtIJ:Fj9m
MD5:	69FCBF8D5BEAAC9B4A74170AAD04B54A
SHA1:	03A4F05C4BD4C6818AC0ED80EB06E6A00ABC1978
SHA-256:	347F719C869D11485C8333CD28DEC6652241DF565A01055302BD1E6E32F26B63
SHA-512:	F3C37C8A6A63831AB5D5D1E665F3E2F7C5733AE20D93C3A6A30CFD0B43D88FB1624A0F1EC95A3589B560CDFC953F67B4E3705C7BCA0DE248C3F4FA31B858B39D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH69fcbf8d5beaac9b4a74170aad04b54a.css
Preview:	.cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.a

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	128643
Entropy (8bit):	5.326787692367428
Encrypted:	false
SSDEEP:	3072:BkDsmoyfhaLZnJNPN5/4OYQkCqNeUyELxRX3:BkZXfQLZ6n
MD5:	8A825C513AF4B75B682515AF94D92D62
SHA1:	61EF6253689EA75B969195632D0D4209C0D569A5
SHA-256:	1A8CFDE0D5DD1C396C936C51BDD3A67918DFADAE8FDF56EA6683A2BB89F372E2
SHA-512:	6A83B519A4C36E83362CBBE09C30CE97F48525E1D739EB4B3FE21B17D4777F481D4E767326055BFF5AA9BE86DB83B3127B3E385C514FBEC8E01A5F8109A197E7
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH8a825c513af4b75b682515af94d92d62.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	167730
Entropy (8bit):	5.045981547409661
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxW:clZAP+keedJ
MD5:	AFB5C64B13342F6E568093548D0A2A9F
SHA1:	95FC121CCCFDBA12443CF87A9C823486065A14AB
SHA-256:	238DB52476BF8107E2E851CD3299B071ED5944B570C1603A1EA758A4FADF5F29
SHA-512:	6FE8BADD1B94E81464C0808383A4CC77F779BF226A3C13B58B2BCB36332995EFBC7711373EE8AB2A8BC52675884F9885D168CB2DE9535E39E71B0B72940691E1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/2b-7ae144/7e-3283eb/69-8122fc/86-016699/72-2b1d8c/80-6461e7/2a-d9be59/51-40faf7?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45864)
Category:	dropped
Size (bytes):	141640
Entropy (8bit):	5.431806404570356
Encrypted:	false
SSDEEP:	1536:5FZ5EDQvTPRUbx3jog/MhA57JvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFoje:jE6rg/MS5vNn3vIPzDk80ZjT0qcePg7
MD5:	2C84DC46AE92EFFD601BC08F9A43F341
SHA1:	E9A6BA8F18D6EE282078000928A04B02295515DA
SHA-256:	F40DC11D5E09B51360622E17A3339A9CFADA343DA7030D275033513329326A91
SHA-512:	75A50FCBE93F39853A78A8F12777AA7A0DE23A5C825EFF891A60ADE0E0C7866BDB5544F130D49DE5FCF55B148F149EAA5F92E3A07666D5B41E6124D0F6A8B0C5
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1720 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13016
Entropy (8bit):	7.883155506636877
Encrypted:	false
SSDEEP:	192:1usWVOBxMoGH4u9YRcVnk3rPnmE+59UOy+tYwOjPMZdC8NhfQyQYLWrBvo04uE:GKx3GH/9Y0cmAOXtYwOadVhfyYLyP4uE
MD5:	F5B4B4F04F1924F9470DC3C0B3E4FC01
SHA1:	28D187B90F70638832771600CD556BC85B418A37
SHA-256:	98FB37F9F0DA54BB17E1322E1A49D5D683854A0BD3DE47C01EB3F0CCBB8B2999
SHA-512:	676E6866C149E56699CA65887D4DB5903CD6F84D32987215F218082E4E441340931221BDED2A78512DEDF417848379DD7E45BF4F87804BC7FEFF7CB3632CB53B
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.13.0.5-release_5314/resources/icons/desktop/sprites_v1.png?v=10.13.0.5-release_5314%22%20alt=%22End%20conversation
Preview:	.PNG........IHDR.......P.....B.uk....pHYs...........~... .IDATx.....\.u..+{)....b...G9d....hL#....."p-[K.J.6G.;..i4..q.8.0q.vk...QVk#...3.lq...a+....J.....b..vQ....b..)...s..7....w.}.... w~.}3.....k.^.h.....X.z}.a.9<...............-o......c.-..s.Ti.......^x...g_.i...=........\R?0S....sg.....G....o.J.m...].b....u...w.Z...[...}.l...1.~..B...7.\HT?0S...n....y"......z}.^`.4.T....Y......?7w.;..A...X...s..Um..~`..V..G.J,$.5...Mg..#.\|...S...O.?..u..7]{....nxK.....?2.<.....N..i...?....=.......q....>..c[..f...#.jG..F.!6.......G.}O.~..$..w..+..,....M.>.}....6T$1g?.Z......1.l_5....6.-......-.W.$..B"9!V.q.JCd....G.I.C8...... 4....K....mH....d.&..IT..<.~...,Hp.%.v.@.~.7k......Z.Y......p.^#.....l.35..5I`j'%..1..x.........={.o....bye..;v..1./~.w[..{@.N...J.mG..z...[w.=x....K....C..\......;....{o....Y..?...K;c..~...u.)m.M...m-.g.}O.MU.7.~._.eK~..UI 6Ht..l6.........F2v....q.zV..TZ..w}v.....h.t...T%..>5.7.$.{A...lsY..2.K..f.b.>....)...K...RL

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.458003043578682
Encrypted:	false
SSDEEP:	3:4MR1KgyWFECYDoNsDUljBERQ7cn:4MDmCfse9on
MD5:	83BF92921FDCBD949434EECDFAD10455
SHA1:	5175CD975B1DD4AF6CAD3B708A37DF7294DC0BF2
SHA-256:	2493C3B63A77679CD039B6CF3C138E85A682E6675114BD2B87C8E033B1E8F345
SHA-512:	5E544BFFF6D8F77D58234ABC13C0C06293DB36CA6E8594F9C488F3C888EAB7807AF67059438DB5B1B23148272960F0CE89324E347EED6C0E02111A27F8B2754A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/modal-component/v1/modal-component/clientlibs/site.min.ACSHASH83bf92921fdcbd949434eecdfad10455.css
Preview:	.edit-mode .modal-dialog:before{height:100%}..modal-content{color:black}

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44505), with no line terminators
Category:	downloaded
Size (bytes):	44505
Entropy (8bit):	5.383751084832084
Encrypted:	false
SSDEEP:	768:sSAB8MuwhTxLNmYJyOBM6YlNzRwn/P91Y8xhg3oOItwfwRbB49YzTXimP6bhoh:+BfrpLMrlNytmSNtb
MD5:	8329B48328985D736A38BA3DB5315AB5
SHA1:	0C645EB379CAF87C172C61D84127740C3F0CF511
SHA-256:	7CD6D51841450D2AA7281979AF810D2C6BD32F6EDC64568DA6CF7C260691DD4D
SHA-512:	34CCF09D9618C737EF20BDAD3571242A66BA5DDA1AFA1E93C201A2AA56BA784A980B0A5126EF577B2F362483BF8ABB521A8F2A37FDA8E68ADE9A7841294E6048
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.29.1-release_1359973818/storage.secure.min.js?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&force=1&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.011412010382019
Encrypted:	false
SSDEEP:	24:Y0vUS6zAKBzAczA+EPXmfofuofdBXnhAMK1ySYR2ssR2pR28WR2VR2dC8tnsNNy1:DvUS6EiEcE+q0ofuofvXhTgyzQssQpQP
MD5:	BE9241018193DAE097407988285EEABE
SHA1:	0CC741A9010D95908A6D284F3F149ECB11B77805
SHA-256:	44C4D4DAC7D5483313344CF58EE34C555E4B2CC347E7F377B0BD10D442245532
SHA-512:	6E26ECAC3CD7EC8E30A5E2FAC98436942C11FE6C0B18777ABBE306E2E3B626ED6049079C00A3689CE182450EC4F8F6B1317B49027D087C500BECD3015E832012
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v1/buy-now/clientlibs/site.min.ACSHASHbe9241018193dae097407988285eeabe.js
Preview:	'use strict';(function(){const d=document.querySelectorAll(".buy-now [data-tab-target]"),f=document.querySelectorAll(".buy-now [data-tab-content]"),g=document.querySelectorAll(".buy-now .LinkNavigation.includes .Imagearea"),e=document.querySelectorAll(".buy-now .LinkNavigation.includes .popoverdialog"),h=document.querySelectorAll(".buy-now .LinkNavigation.includes .closebutton");d.forEach(a=>{a.addEventListener("click",()=>{const c=document.querySelector(a.dataset.tabTarget);f.forEach(b=>{b.classList.remove("active")});.d.forEach(b=>{b.classList.remove("active")});a.classList.add("active");c.classList.add("active")})});g.forEach(function(a,c){a.addEventListener("click",function(b){b.preventDefault();e.forEach(function(k,l){k.style.display="none"});this.nextElementSibling&&this.nextElementSibling.classList.contains("popoverdialog")&&(b=this.offsetTop+54,this.nextElementSibling.style.left=this.offsetLeft+58+"px",this.nextElementSibling.style.top=b+"px",this.nextElementSibling.style.displ

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1433
Entropy (8bit):	7.4719401516006405
Encrypted:	false
SSDEEP:	24:+cKYj6L/z80ksuMe3H5bPYUQgjNYOJbjgIr2oMX57B+IeBO3SPHMraG/MnoX:+cKYjw/oMuMe35AvWgI2UrO3csliO
MD5:	FE139496D8F451CED61C18786B46EFFE
SHA1:	7DE4A92E6F264D2B3F1EDA998DC09401798181AD
SHA-256:	15FB91B680A9EECC4FD7860A73BC393AA5C4738180DACF83171BE826A1C7C2C6
SHA-512:	5DEECB01B5721F1C042415700DF27CCC1331AC09DB4FD1493087A746CE37FEC5FD69A6A188F7AEA43EEC9F96A1B5A330FCBD9AD738D99E9B72C03AA4E871C739
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/chat-2?scl=1
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......M...M....pixi............av1C........colrnclx...........ipma...................mdat.......Lh...B2.......q .@.+@..&.H..>2..7:..u....!mAZ.....-...J....E.%6..........x.............r...#.$.Hx.(.....H...i.;w.g..5..a.Qb....6.".R......&..q..t.UM.%.Xj.+.M.^.aE.......4.b..9..+y.3.Eyr..n$......M.n;5X.t.m...dTP.-....Tp.....F....6...7.....(.cR.e%)@\.(..'..._._.a.U.)+."..n.2.{z...e_....-......2...#.....LG..WJ .<..HW....A.l..Me.x.RR\|.-.W.@J......0.....W.A\."..s..l.s...B....+.:...q..r..U...wa.kw.W.....K.3:.....OE.....^X\..\.eL....z.2.'.....R.=.\|..2.C._......#+...e....B.e.&.mA........G.3.6.J..5..`.S..A9..T....0...3....U.6V.6.I`}h.C....T.72]...3.._Sfc....o^.........fz6..H..:..xf..Z.z..Mn'.. .Dm.r\.n.....0..).W..,.....>g...M.X.V.r......x<B..^e.?.<.V.{.`....x..}g..Y.KG.s..

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 352725
Category:	downloaded
Size (bytes):	101932
Entropy (8bit):	7.9975103438672415
Encrypted:	true
SSDEEP:	1536:56VpoRXw24C1n+hsRGxvOVV9C+j0r/aBRl75/JRPfs1rWOJdm/2cvfUXnbb32UH:Dw24C1+d8a3iB75/JRPfs1ujvfafpH
MD5:	B7FE6DD421C792F445730D6D393E72D5
SHA1:	BE98E042D67B647FE56204CA47FA8A59936305A2
SHA-256:	429189DDEF576C4DF5A1C59C39B21A022CCEC185E922F67C54AF13E8ACE7D48E
SHA-512:	EBAB66208BD6903B849106C1329F5A78B0C226FC05CBF6674110397BDA6057ECFF9A18941E7D7D0DE2841E5E6BC54F41A5D283614BBCBBFA2C19C92D6386C623
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Preview:	...........k[..(.}....0R......;.7.'a.m0.f."..+1.#.!....OU.E......y.................v.\|....7.&q......jn>..t...\|.X.k.....5...u...(..y}.][.u....6._._...$.,...C....(fX.>.U.z..d.6.C?...E9.{9.n..5..U.^......w-l(... <...7(`57r.]H......./.....1.>.b6.4...u..C.`q...x;....$.f.[....>..`...d.}..&.l2... ....s...(T..5..........k../.6.5~w-.9,.....>...o..3..X....2....o.Q0a. d45..5.].GW..p...Y<.... .^uB.b,.t.a{..{.\|~.Ot.4.Oy..&..'f..I'..81....!.....vU...$X...?......0.p..M...d.M/..o.......evE3..............,Ip..'..?fW..\|x.D..v.2...3...{[k....6.~.?Y.....i.v..Y.m.x...v.[j&a.R.xV.....#q....A..p.../...@....\|c..x..g=X.x:^...?*':..(......}.G.P.....4..]...GC@\|k.tk....^g.d...1.......Vs...rj.."a...1...q.G.\...y.0.X.[?.;......k..x........4u...~.CdB".....:$`.y)..c3m...vt=......$....B..`i...0.>e.....Ib...~8.E..e..:s.:..`...9..&\|..d......>....>..O..A...,./.....v7...n.(...B..........._3=.2.=#.._.}......M.n+A.l..P...$...`.....L../.....\|.j....,o.>Ru..?N.K...Mp%1..S......U.(?..u.

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	downloaded
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.38.0-release_1323031802/surveylogicinstance.min.js?version=10.38.0-release_1323031802
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6982), with no line terminators
Category:	downloaded
Size (bytes):	6982
Entropy (8bit):	4.890639313885154
Encrypted:	false
SSDEEP:	96:kTKVEtYqv/RQZDoAWuEe7cB6a3DRLIQrPYCD1a7Ef:k+/0SZxnEGk39DPo7a
MD5:	F1EB7E4EA36185A91C404F6105FC4A27
SHA1:	95A8C61028B5777D56F693C64902A98F200FE394
SHA-256:	5930BE8B563A637E5C98C385974998B1246380DEF9948E538EAA6B630ECF99D2
SHA-512:	32BB88B386C97D03098CB25E8CF36EE13F884EDF86FA72F7F1893F67DD41337C8DCB99F692BD3EEF6A6CF9751C6CA2F88F6DDAE36C9CF35E9D1F0A0A63E2625F
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/setting/accountproperties/?cb=accountSettingsCB
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:29:31","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 03:18:17","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 05:58

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	674
Entropy (8bit):	4.128123174442886
Encrypted:	false
SSDEEP:	12:goUnHzVl8+VJ22voEjxd/tiDwFnaIC5ir8jTo1ubjT3p6Cu:g/84vdr/tkwnaBiYvoIbvZ6Cu
MD5:	4E2C42B9D8FD251A1EA6DD1B2B99D50F
SHA1:	C1E7BB1B537AA8DEC3FC456ACC62F6BA8D06DBA4
SHA-256:	631CAA933DC9B93CBB81F3CBFF68DC01DE7C345C76262FEEB64715723CA411FE
SHA-512:	2B4C3BDB8219F05FA8348FBF94EB65F93710DAA513DB6E42D3BEB29894A9C0CCCA500EF27231386C1B2A7B22BA9679D344D3918E0D27DBE5D1B466F92870D7AD
Malicious:	false
Reputation:	low
Preview:	window.addEventListener('DOMContentLoaded', function () {. const ctaList = $('.modal .modal-body .link-group a');. const urlParams = new URLSearchParams(window.location.search);. const ocid = urlParams.get('ocid');. if (ocid) {. ctaList?.each((i, cta) => {. if (cta.getAttribute('data-bi-ct') == 'button') {. if(cta.href.includes('ocid=')){. return;. }. if (cta.href.match(/\?./)) {. cta.href = cta.href + '&ocid=' + ocid;. } else {. cta.href = cta.href + '?ocid=' + ocid;. }. }. });. }.});.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	dropped
Size (bytes):	17287
Entropy (8bit):	5.462725306783576
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWWFPnq7usVYwQJXeBNZEWWg:omxe9ppFPq7uFwQJXeBfJl
MD5:	61ED0E072617B75F022D6CB53EA85DE1
SHA1:	027EB2B0F2A8BD9AD6BB5DA7D9F930C7DD8C9DF2
SHA-256:	24880FC6AA75969EABF4ABC448918057EA5331426BFEC56ED8E468647C928591
SHA-512:	269B93EA5906A33D584F9A5BF20EE44461D5488494CE2E1717A70F3E998BED8A4210A7BDC2D10937FEC3D6D9727033BF8E2DD80B69DA99D3A97269AE35CC94D4
Malicious:	false
Reputation:	low
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6341), with CRLF line terminators
Category:	downloaded
Size (bytes):	25483
Entropy (8bit):	5.997823934558386
Encrypted:	false
SSDEEP:	768:h8EQ+D8jD6h7zOowCdw2YB6c7+Z6EkH/anOik:KDeB183IU
MD5:	9B1985D7ED25B601EE5DA21590824CE7
SHA1:	2B71037C9426729436A01AACE103C3B9016E80E4
SHA-256:	9B2FC7A60784111F7AC916A60DAD4DB56C49D40C1FB80BBAED0FDA97206192ED
SHA-512:	BFB6CB6F33012F0ABBD1C23D55A07F5B9502A63D7492CCAA882B7EAC6BDA9FA06131ED386060494F802DFF5579E2458D5934D0BAF674D309214465BC0BABB4EB
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/auto-play.js
Preview:	if (require(["jqReady!", "window", "document", "location", "deferExec!"], function () { window.location.host.indexOf("businessstore.microsoft.com") != -1 && msCommonShell && (msCommonShell.as = { callback: function () { } }) }), window.location.host.indexOf("businessstore.microsoft.com") != -1) { var p = document.createElement("nav"); x = document.getElementById("headerUniversalHeader"); x.insertBefore(p, x.firstChild); p.outerHTML = "<nav id=uhf-g-nav><\/nav>" } require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-content-placement section a, [data-ocms-id] .m-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouseup click mousedown", function (n) { n.stopImmediatePropagation(); n.preventDefault() }) }); require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-hyperlink-group-content-placement section a, [data-ocms-id] .m-hyperlink-group-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouse

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	dropped
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15003
Entropy (8bit):	4.665022125507044
Encrypted:	false
SSDEEP:	384:N4KHLpVi0apa4y0VowO25oowi6AT4W69tMIHY:NdLpVi0apa4W4
MD5:	E7BBE71939332CE26F1905FA17E40CD0
SHA1:	A5345E3679E5C2844CD12359B8CDFB7FF454B892
SHA-256:	ECED1925CF634059B9191F2A5B6DD62D329D509F0B9A6B1DFABCBFCF37847F09
SHA-512:	9A4DE6E73725B7B6654B6A6D37099A9290BFEC45CF9260F02A5F4855C26CEB7BC8A6315B708515C8D073102D7E81B9CB2B98A149856E4DF003E83ECA66153587
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v2/buy-now-v2/clientlibs/site.min.ACSHASHe7bbe71939332ce26f1905fa17e40cd0.js
Preview:	(function () {. const tabs = document.querySelectorAll('.buy-now-v2 [data-tab-target]');. const tabContents = document.querySelectorAll('.buy-now-v2 [data-tab-content]');. const tabListSection = document.querySelector('.inner-tab-content');. const innerTabs = document.querySelectorAll('.buy-now-v2 [data-inner-tab-target]');..const imageAreaEle = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .Imagearea');. const imagePopup = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .popoverdialog');. const closeIcon = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .closebutton');. const cards = document.querySelectorAll('.buy-now-v2 .ContainerBuy');. let monthlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku1price');. let yearlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku2price');.. if (!yearlyPriceEleText \|\| !monthlyPriceEleText) {. tabListSection.style.display= 'none';. }.. const setActi

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12259
Entropy (8bit):	7.972561540595435
Encrypted:	false
SSDEEP:	192:+Wmo5+9Mj2VVG4bHSjJY6L0eGtk5tbJripufsxJuAX0F8xO2sOSJjjxKKmFsmMb+:RaS4bHmJY6oeGyc4fsiAkF8Q2yzbOgzY
MD5:	95B015700621761ED972C41F33D35D6D
SHA1:	33873EBCA11CCC8F67108D14B5891FD9C1E186A9
SHA-256:	78837FAB92BA0522FF73CF982851286268E4E008649843F0DBF5F0BF04BCE2C1
SHA-512:	197A35842DFBC661351E8973DC4359295124DC0DDCB1041EA75DD81C5D5DF9F84F874B53C31C81920226B1AFE07E2E4A73D3365728DD518D53971FAA0A44AA39
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/gldn-FEATURE-powerful-apps-2120x1190:VP4-630x449
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......v........pixi............av1C........colrnclx...........ipma...................mdat.....&'^...4..2.]D<.0..P.0...JlM...N...w.;l....L.j.8q.K.M2J....n....)..z..:.k..**.g.B3?V...4....;..K.....nq..r.....~:.O<.......1]..w.E:.].... 0Ip.vM.V.u.qI...@..Q)ta.y....uy.!"...D.......R.{..t.....g...g.?."h....W...jo..JU....X>....',..sJ.....om'@/..7..}...D.qL'd.s.k.....:o.H/.s^M@......v.Mq.2....r....Q.g..U.JB#yD).4..r.rc1e...[.......B..W}.U...@.D.o......+X?.(Q.>.k..]....~..'..ekk.6.].0......../!.M.{.....^7..x:.CG.....-.(2....h...[-@.iB;/..+......R3....RF,o.?.&..1..............\M.WP.fG....... .....F...,.4~,\...6...K..y!.eOB1.e....z>..z."\|n.)....av..]..Dg.h... e..N......7pm...P...].+..rp......$..4....w..z.....A.`..?.{tP.Z...n......@.Euht.v4....j../[H..N..5..S.<

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	dropped
Size (bytes):	2224
Entropy (8bit):	5.2186345351769665
Encrypted:	false
SSDEEP:	48:eO9EDRt44af4Pq9DB2X0bripiiiv9tzgTLB46OqvebaJYiyqjRqQDrWL:NEDP4Xfiq9Ekbripiii1hgTLDGbaJfP2
MD5:	92BA1CB9DA3DD68605F38095FC34BA98
SHA1:	03A31035B1F2601447E9D8C3ECBB62155F66868F
SHA-256:	16FB8ADD8FA6F36427821A7E6D013288A718D69077340CF398AF551D69F65D0E
SHA-512:	2ABD99A77639812E16F94F058EC836D99DE4320959C4A3C00D6E4E133230D297858BF8265379044507E61D173973ECAB1EE40014A798A3AF07A335A3B008CF78
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{var f={n:b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return f.d(a,{a}),a},d:(b,a)=>{for(var c in a)f.o(a,c)&&!f.o(b,c)&&Object.defineProperty(b,c,{enumerable:!0,get:a[c]})},o:(b,a)=>Object.prototype.hasOwnProperty.call(b,a)},e=f.n(jQuery);e()(function(){var b;!function(a,c,h){var k=3<arguments.length&&void 0!==arguments[3]?arguments[3]:".aem-Grid";c.forEach(function(g){var m=new MutationObserver(function(n){n.forEach(function(d){d=e()(d.addedNodes).find(".f-play-trigger");if(0<.d.length){if(h){var l=h(d.closest(k)).text().trim();d.attr("data-bi-hN",l);d.attr("data-bi-ehN",l)}d.attr("data-bi-cN","Video Launch");d.attr("data-bi-ecN","Video Launch");d.attr("data-bi-bhvr","240");d.attr("data-bi-cT","Video");d.attr("data-bi-pA","Body");d.attr("data-bi-compNm",a)}});m.disconnect()});m.observe(g,{childList:!0,subtree:!0})})}("Content Card",document.querySelectorAll(".content-card .modal"),function(a){return e()("button[data-target\x3d'#".concat(a.attr("id"),"']")).closest

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385), with no line terminators
Category:	downloaded
Size (bytes):	3385
Entropy (8bit):	5.293928956465786
Encrypted:	false
SSDEEP:	96:W4zB+C3yvyE14QHzsyTz4n/2yx/2ydgC2ZPXOMs9:Wy+C3y6k4QPItzqC2xXOMs9
MD5:	838B4CF03009164350BEE28EC54B1B28
SHA1:	7289901F526CD15984F080E40BBF8B8B6098EB73
SHA-256:	70C7CD74052E7BB3716548F7748B7FBF90C8BB39B0F688495B5D3D8974295A72
SHA-512:	48763334DD0DE579917B94CC53A7D002AFF1D5EF46D2D4BEA8991B05ACB355CD67A21495751EDCB89DFB0A6AE3F773419DAFF49A6DFE9EA48CC8E80BCBF99BF1
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/StickyFeedback/sticky-feedback.css?v=cMfNdAUue7NxZUj3dIt_v5DIuzmw9ohJW109iXQpWnI
Preview:	.supStickyFeedback{position:fixed;width:100%;bottom:0}.supFeedbackFullTextIsOpen{height:222px}#ocHelp{min-height:75%}#supWrapperToPreventFeedbackFlickering{min-height:59px}.ocSmartFeedbackBegin{height:38px}#supFeedbackWrapper{background-color:#f2f2f2;max-width:none;z-index:10000}#supColumnWrapper{padding:11px 0 10px;border-bottom:1px solid #cecece}#supDisableStickyFeedbackButton{position:absolute;top:0;right:15px;font-size:1.4em;text-decoration:none}html[dir=rtl] #supDisableStickyFeedbackButton{left:15px;right:auto}html[dir=rtl] .ocFeedbackButton{margin:12px 0 0 5px}html[dir=rtl] .ocSmartFeedbackReply{text-align:right}#ocMainContent{min-height:100%}.ocFeedbackButton{min-width:62px;height:28px;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue",Helvetica,Tahoma,"BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:15px;font-weight:normal;color:#313131;display:inline-block;text-align:center;text-decoration:none;border:1px solid transparent;background-color:rgba(0,0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 09:27:03.343195915 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.343219042 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.343286037 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.343319893 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.343358994 CEST	49715	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.343411922 CEST	49715	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.343669891 CEST	49715	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.343689919 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.343703985 CEST	49715	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.343709946 CEST	443	49715	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.367337942 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.367378950 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:03.367455959 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.367614031 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:03.367625952 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.151042938 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.151622057 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.151663065 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.156697989 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.156708002 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.156780005 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.156788111 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.220566988 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:04.220571041 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:04.361229897 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:04.780292988 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780316114 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780355930 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780375004 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.780404091 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780416965 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.780416965 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780461073 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.780702114 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.780702114 CEST	49717	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.780715942 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.780725002 CEST	443	49717	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.802571058 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.802601099 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:04.802697897 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.802875996 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:04.802885056 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.784292936 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.784790039 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.784813881 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.788111925 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.788117886 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.788149118 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.788156986 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.934652090 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.934705019 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:05.934818029 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.934990883 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:05.935003042 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.183871031 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.183912992 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.183959961 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.184040070 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.184057951 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.184073925 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.184269905 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.184322119 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.231344938 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.231381893 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.231393099 CEST	49719	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.231399059 CEST	443	49719	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.279973984 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:06.280005932 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:06.280073881 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:06.281183004 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:06.281198978 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:06.708523989 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.751765013 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.826070070 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.826098919 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.826989889 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.826996088 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:06.827204943 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:06.827219963 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.065959930 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.066062927 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.070163012 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.070173979 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.070519924 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.072576046 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.072916985 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.072921991 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.073563099 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.116511106 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.151410103 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151451111 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151458979 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151484966 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151520014 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:07.151534081 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151561022 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:07.151830912 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.151911020 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:07.152539015 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:07.152554035 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.152568102 CEST	49721	443	192.168.2.5	20.190.159.75
Aug 28, 2024 09:27:07.152573109 CEST	443	49721	20.190.159.75	192.168.2.5
Aug 28, 2024 09:27:07.247004986 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.247080088 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.247306108 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.247473001 CEST	49723	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.247493029 CEST	443	49723	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.267829895 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.267874956 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:07.268014908 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.269033909 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:07.269042969 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:08.050421953 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:08.050501108 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:09.877907991 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:09.877960920 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:09.878319025 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:10.017467022 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.034704924 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.034785032 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.034796953 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:13.035021067 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.080507040 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:13.207484007 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:13.207576990 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:13.207633972 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.208302975 CEST	49724	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:13.208324909 CEST	443	49724	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:13.859479904 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:13.970516920 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:13.996932983 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:15.687655926 CEST	443	49709	23.1.237.91	192.168.2.5
Aug 28, 2024 09:27:15.687767029 CEST	49709	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:15.886928082 CEST	443	49709	23.1.237.91	192.168.2.5
Aug 28, 2024 09:27:15.886987925 CEST	49709	443	192.168.2.5	23.1.237.91
Aug 28, 2024 09:27:15.887387037 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.887429953 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:15.887490034 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.887696981 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.887715101 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:15.888185024 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.888205051 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:15.888406038 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.888744116 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:15.888760090 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:15.940326929 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:15.940350056 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:15.940651894 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:15.941289902 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:15.941304922 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.539860010 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.540179968 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.540205956 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.541400909 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.541474104 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.542500973 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.542610884 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.542843103 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.542851925 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.544843912 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.548193932 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.548222065 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.549413919 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.549479008 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.550592899 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.550674915 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.608055115 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.608057022 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.608074903 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.718230963 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.733663082 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.734674931 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.735862970 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.735877991 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.736183882 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.737510920 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.737581015 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.737586975 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.737755060 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.784497023 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.825378895 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.825475931 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.825546980 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.828552008 CEST	49732	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:16.828578949 CEST	443	49732	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:16.912293911 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.912373066 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:16.912472010 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.912684917 CEST	49733	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:16.912708998 CEST	443	49733	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:17.940588951 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:17.940637112 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:17.940704107 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:17.942487001 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:17.942500114 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.059214115 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:18.104499102 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:18.250526905 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:18.250612020 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:18.252717018 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:18.252717018 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:18.561490059 CEST	49731	443	192.168.2.5	2.18.69.150
Aug 28, 2024 09:27:18.561528921 CEST	443	49731	2.18.69.150	192.168.2.5
Aug 28, 2024 09:27:18.760159969 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.760241032 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.762370110 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.762378931 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.762622118 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.766037941 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.766103983 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.766109943 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.766235113 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.808511972 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.942568064 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.942678928 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:18.942759991 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.942955971 CEST	49737	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:18.942974091 CEST	443	49737	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:19.024477959 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.024511099 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.024760008 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.025680065 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.025691986 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.829988003 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:19.830018997 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:19.830173016 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:19.831789017 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.832976103 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:19.832988977 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:19.833251953 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.833261967 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.834291935 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.834377050 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.836632967 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.836692095 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.876624107 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:19.876641989 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:19.918690920 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:20.474605083 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.474695921 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.476512909 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.476521969 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.476778030 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.516216040 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.560497999 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.706111908 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:20.706135988 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:20.706419945 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:20.706772089 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:20.706790924 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:20.715313911 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:20.715339899 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:20.715502977 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:20.718235016 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:20.718250990 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:20.720508099 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:20.720515966 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:20.720735073 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:20.721441984 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:20.721455097 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:20.728813887 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:20.728833914 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:20.728890896 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:20.730035067 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:20.730046034 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:20.745249033 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.745312929 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.745379925 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.745881081 CEST	49741	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.745892048 CEST	443	49741	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.915412903 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.915468931 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:20.915591002 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.916563988 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:20.916577101 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.354820967 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:21.355211020 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:21.355221033 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:21.356206894 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:21.356271982 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:21.357501984 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:21.357561111 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:21.398402929 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:21.398977041 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:21.398992062 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:21.400070906 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:21.400135040 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:21.400800943 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:21.401709080 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:21.401717901 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:21.401879072 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:21.401931047 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:21.402821064 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:21.402879953 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:21.404597998 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:21.404608011 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:21.405364037 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:21.405431032 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:21.452666044 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:21.452678919 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:21.452711105 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:21.452713966 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:21.452721119 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:21.498245955 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:21.498245955 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:21.564472914 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:21.565886974 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:21.565905094 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:21.566951990 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:21.567015886 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:21.568059921 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:21.568142891 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:21.571672916 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.571744919 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:21.573704004 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:21.573714018 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.573981047 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.575968027 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:21.609694004 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:21.609704971 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:21.620506048 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.653542042 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:21.851377964 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.851432085 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:21.851521015 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:22.081805944 CEST	49758	443	192.168.2.5	184.28.90.27
Aug 28, 2024 09:27:22.081835032 CEST	443	49758	184.28.90.27	192.168.2.5
Aug 28, 2024 09:27:23.468739986 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:23.468776941 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:23.468880892 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:23.471179008 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:23.471194029 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.145107031 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.145361900 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.145380020 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.146383047 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.146477938 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.147002935 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.147063971 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.147403002 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.147413015 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.187901974 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.256829977 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256844997 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256848097 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256884098 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256923914 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256923914 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.256942034 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.256959915 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.256980896 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.349327087 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.349392891 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.349405050 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.349436045 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.349487066 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.602304935 CEST	49768	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:24.602313042 CEST	443	49768	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:24.623938084 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:24.623986006 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:24.624126911 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:24.624320030 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:24.624345064 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.005455017 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.005765915 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.005784035 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.006798029 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.006855965 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.007235050 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.007293940 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.007771969 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.007785082 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.061465979 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.070393085 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:26.070471048 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:26.070557117 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:26.108050108 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.108151913 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.108197927 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.109594107 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:26.109653950 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:26.109699965 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:26.109965086 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.109987974 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.109996080 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.110025883 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.110038996 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.110049963 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.110049963 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.110074043 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.110093117 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.110093117 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.110120058 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.194137096 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.194179058 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.194217920 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.194231033 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.194257975 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.194273949 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.194315910 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.194569111 CEST	49774	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.194581032 CEST	443	49774	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.199825048 CEST	49749	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:26.199856043 CEST	443	49749	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:26.199873924 CEST	49753	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:26.199891090 CEST	443	49753	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:26.199944973 CEST	49755	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:26.199951887 CEST	443	49755	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:28.877895117 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:28.877928019 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:28.877983093 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:28.878166914 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:28.878177881 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.307334900 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:29.307346106 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:29.307555914 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:29.308394909 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:29.308408976 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:29.402873039 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:29.402913094 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:29.403072119 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:29.403884888 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:29.403899908 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:29.527302980 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.562772989 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.562793970 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.563286066 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.564718962 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.564791918 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.565568924 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.575515032 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:29.575586081 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:29.575720072 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:29.612503052 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.674454927 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.674489021 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.674510956 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.674565077 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.674583912 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.674628973 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.691875935 CEST	49739	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:27:29.691893101 CEST	443	49739	172.217.16.132	192.168.2.5
Aug 28, 2024 09:27:29.761568069 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.761590004 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.761651039 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.761677980 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.761790991 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.763823032 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.763843060 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.763901949 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.763911009 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.763953924 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.763962984 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.849615097 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.849636078 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.849673986 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.849690914 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.849718094 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.849737883 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.850286961 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.850301981 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.850342035 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.850351095 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.850390911 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.850390911 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.851178885 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.851210117 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.851231098 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.851241112 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.851262093 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.851299047 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.854232073 CEST	49798	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:29.854254961 CEST	443	49798	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:29.988744020 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:29.988782883 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:29.988843918 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:29.989181995 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:29.989198923 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.055141926 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.055526972 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.055543900 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.055916071 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.056375027 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.056444883 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.056837082 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.104491949 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.144690990 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.146984100 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.146995068 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.148060083 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.148104906 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.149230957 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.149298906 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.152515888 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.152524948 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.207643032 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.240144014 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.240164995 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.240209103 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.240248919 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.240262032 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.240278006 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.240303040 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.327991009 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.328013897 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.328075886 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.328094959 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.328125954 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.328167915 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.329857111 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.329874039 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.329945087 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.329956055 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.330013037 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.414895058 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.414921045 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.414983988 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.415000916 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.415046930 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.416126013 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.416141033 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.416181087 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.416192055 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.416224957 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.416244030 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.417629957 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.417645931 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.417705059 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.417714119 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.417751074 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.418780088 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.418796062 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.418827057 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.418832064 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.418864965 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.418893099 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.419471025 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.459897995 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.459917068 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.459984064 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.459984064 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.459996939 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.460006952 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.460028887 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.460043907 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.460051060 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.460059881 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.460078001 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.503422976 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.503442049 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.503494978 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.503513098 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.503556013 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.504421949 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.504436016 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.504501104 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.504507065 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.504548073 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.505332947 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.505348921 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.505395889 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.505405903 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.505451918 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.506299973 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.506314039 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.506355047 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.506362915 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.506398916 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.506416082 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.507587910 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.507602930 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.507652998 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.507659912 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.507702112 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.508467913 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.508507967 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.508531094 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.508538008 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.508548021 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.508570910 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.508585930 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.508821011 CEST	49817	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:30.508836031 CEST	443	49817	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:30.509994984 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.511029959 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.511039019 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.511081934 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.511092901 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.511106968 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.511127949 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.511147976 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.511167049 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.513514042 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.513521910 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.513560057 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.513571978 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.513585091 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.513607979 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.513624907 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.601278067 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.601295948 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.601361036 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.601387978 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.601429939 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.602531910 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.602582932 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.602612972 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.602638006 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.602657080 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.602674007 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.603691101 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.603707075 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.603760004 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.603784084 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.603805065 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.603818893 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.605436087 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.605453014 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.605503082 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.605516911 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.605565071 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.628587008 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.628798962 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.628810883 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.629853964 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.629920006 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.630398989 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.630464077 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.630552053 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.630559921 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.686058998 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.692204952 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692224979 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692272902 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692305088 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692348003 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692625999 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692679882 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692683935 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692698002 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692712069 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.692740917 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692770004 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692838907 CEST	49815	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:30.692853928 CEST	443	49815	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:30.743967056 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.743992090 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.743998051 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.744052887 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.744054079 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.744076967 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.744117975 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.744126081 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.744134903 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.744204044 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.825128078 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.825153112 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.825196981 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.825206041 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.825237036 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.825252056 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.829848051 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.829864979 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.829921961 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.829929113 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.829967022 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.911441088 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.911458969 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.911505938 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.911514044 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.911556005 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.916289091 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916305065 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916361094 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916366100 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.916382074 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916410923 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.916424036 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916438103 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.916441917 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916465044 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:30.916506052 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.993556976 CEST	49821	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:30.993577003 CEST	443	49821	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:31.123769999 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:31.123816013 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:31.123898029 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:31.125049114 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:31.125067949 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:31.138760090 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:31.138802052 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:31.138885975 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:31.141428947 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:31.141447067 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:31.382553101 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:31.382585049 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:31.382678986 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:31.383091927 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:31.383106947 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:31.798366070 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:31.837147951 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:31.837167025 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:31.837671995 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:31.882359028 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:31.971628904 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.013806105 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.042447090 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.070816994 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.071011066 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.089459896 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.119297981 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.240680933 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.240708113 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.240907907 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.240925074 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.241424084 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.241895914 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.241965055 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.249586105 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.249666929 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.250087023 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.250149012 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.250164986 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.251703978 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.251734018 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.251741886 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.296497107 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.296503067 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.296762943 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.351665974 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351692915 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351701021 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351742029 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351778984 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351800919 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.351819038 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.351871014 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.351871014 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.353949070 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.353971004 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.353979111 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.353996038 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.354001999 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.354008913 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.354027033 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.354052067 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.354069948 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.354098082 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.354098082 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.437041998 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.437928915 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.437954903 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.438040018 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.438055992 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.438097954 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.438097954 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.439512968 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.439532042 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.439605951 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.439616919 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.439722061 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.439722061 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.441845894 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441858053 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441876888 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441885948 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441891909 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441905975 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.441940069 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.441965103 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.442025900 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.445519924 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.445532084 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.445553064 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.445563078 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.445600033 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.445622921 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.445641041 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.445678949 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.447345018 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.447364092 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.447451115 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.447451115 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.447460890 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.447586060 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.523459911 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.523489952 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.523542881 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.523561001 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.523633957 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.526622057 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.526642084 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.526705027 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.526715040 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.526761055 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.527546883 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527566910 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527607918 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.527626038 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527637959 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.527638912 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527684927 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.527692080 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527733088 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527947903 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.527961016 CEST	443	49827	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:32.527992964 CEST	49827	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:32.529067039 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.529090881 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.529159069 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.529181957 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.529261112 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.530803919 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.530821085 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.530898094 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.530904055 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.531172991 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.537193060 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.537215948 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.537261963 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.537281036 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.537301064 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.537319899 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.538290977 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.538312912 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.538388968 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.538402081 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.538472891 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.539247990 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.539264917 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.539326906 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.539340019 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.539557934 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.540539026 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.540555000 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.540626049 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.540637016 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.540769100 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.619494915 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.619519949 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.619591951 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.619611025 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.619662046 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.620673895 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.620692968 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.620737076 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.620747089 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.620784044 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.620804071 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.621649981 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.621666908 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.621710062 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.621717930 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.621772051 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.623055935 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.623070955 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.623131990 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.623142004 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.623174906 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.623193979 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.630275011 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.630281925 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.630362988 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.630383015 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.630538940 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.630846024 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.630861998 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.630945921 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.630959988 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.631016970 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.631658077 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.631664991 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.631757975 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.631773949 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.631849051 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.632458925 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.632477045 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.632564068 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.632580042 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.632636070 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.633043051 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.633058071 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.633116007 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.633128881 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.633332014 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.633850098 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.633904934 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.633974075 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.634224892 CEST	49824	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:32.634244919 CEST	443	49824	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:32.710424900 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.710448027 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.710501909 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.710536003 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.710551023 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.710712910 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.711040974 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.711097956 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.711117983 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.711122036 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.711253881 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.711491108 CEST	49825	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:32.711504936 CEST	443	49825	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:32.914386034 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:32.914439917 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:32.914496899 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.040458918 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.040503979 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.040580034 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.042814016 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.042848110 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.047979116 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.047998905 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.052110910 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.052139044 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.052243948 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.052511930 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.052525997 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.147063971 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.147109032 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.147172928 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.147578001 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.147594929 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.681551933 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.686671972 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.686703920 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.687160015 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.687777042 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.687825918 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.690215111 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.696805000 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.696818113 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.698254108 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.698328972 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.731128931 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.752104044 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.752259016 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.753098011 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.753108978 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.753654957 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.755578041 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.755673885 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.758739948 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.759085894 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:33.761281967 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.761296988 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:33.777954102 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.777998924 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:33.778074026 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.778707027 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.778719902 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:33.809953928 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:33.810108900 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.810122013 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:27:33.810153961 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:33.839126110 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.850109100 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:27:33.856473923 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.856487036 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.856993914 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.860883951 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.860974073 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:33.862246990 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:33.875245094 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.875274897 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:33.875320911 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.875945091 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:33.875955105 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:33.904504061 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.163415909 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.163439035 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:34.163527966 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.164649010 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.164700031 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.164753914 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.226484060 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.226521015 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:34.226613998 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.233603001 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.233620882 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:34.234347105 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.234380960 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.234603882 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:34.234618902 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:34.301232100 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301254988 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301261902 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301290035 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301300049 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301311016 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301332951 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.301357031 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.301367998 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.301397085 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.346550941 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.346570015 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.346590996 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.346637964 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.346652985 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.346668005 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.346695900 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.387152910 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.387176037 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.387217045 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.387234926 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.387273073 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.387295961 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.389188051 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389204979 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389266968 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.389276981 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389300108 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389309883 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.389321089 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.389327049 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389353991 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.389364958 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.389571905 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.399115086 CEST	49832	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:34.399130106 CEST	443	49832	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:34.438040972 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.438085079 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.438138962 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.438148022 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.438183069 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.438199997 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.439991951 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.440009117 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.440047026 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.440054893 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.440103054 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.440587997 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:34.440618992 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:34.440759897 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:34.441124916 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:34.441139936 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:34.529658079 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.529690981 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.529767990 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.529784918 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.529841900 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.530288935 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.530306101 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.530353069 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.530359030 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.530383110 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.530402899 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.531316042 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.531332970 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.531366110 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.531436920 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.531444073 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.531475067 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.531483889 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.531495094 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.531546116 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.534857035 CEST	49844	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:34.534874916 CEST	443	49844	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.561291933 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.561350107 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.577776909 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.577794075 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.578090906 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.581859112 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.581931114 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.581935883 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.582076073 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.628498077 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.675287008 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.675348997 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.753859043 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.753926992 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.754007101 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.857688904 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.857708931 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.858155966 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.858212948 CEST	49846	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.858232021 CEST	443	49846	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:34.917046070 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:34.962825060 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:34.992744923 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.057490110 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.058821917 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.091991901 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.170787096 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.170805931 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.260505915 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.260806084 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.688549042 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:35.688612938 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:35.688626051 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:35.688920975 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:35.689596891 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.689626932 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:35.690757990 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:35.690778017 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:35.690810919 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.691087008 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.691106081 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.691534042 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.691545963 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.691700935 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.691714048 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.692188025 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.692198992 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.692251921 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.692709923 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.692728043 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.692764044 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.692859888 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.692944050 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.708170891 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.708237886 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.712366104 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.712472916 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:35.713186979 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.713274002 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.714672089 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.714751959 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.718478918 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.718489885 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.732508898 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:35.828567028 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828577042 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828589916 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828598022 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828603983 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828629017 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.828646898 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828675985 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.828680038 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.828720093 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.847589016 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.847599983 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.863893986 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:35.863960981 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:35.864022970 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:35.864176989 CEST	49848	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:35.864191055 CEST	443	49848	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:35.872781992 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.872792006 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:35.872797966 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.872808933 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:35.872852087 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.921003103 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921013117 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921036005 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921052933 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921061993 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921073914 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.921093941 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921148062 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.921159029 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.921209097 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.935193062 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.935201883 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.935230017 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.935240030 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.935269117 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.935291052 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.935363054 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.939894915 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.939964056 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.939965963 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.940001965 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.940864086 CEST	49860	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:35.940876961 CEST	443	49860	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:35.959201097 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:35.983392000 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:35.983448029 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.011895895 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.056507111 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.197012901 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198667049 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198678970 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198718071 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198720932 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198724985 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198726892 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.198751926 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198781013 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.198791027 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.198882103 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.199279070 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.199340105 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.199342966 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.199388981 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.199723959 CEST	49856	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.199732065 CEST	443	49856	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.401949883 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.401981115 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:36.402071953 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.402472019 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:36.402492046 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.202548981 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.202822924 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.202847004 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.203907013 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.204010963 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.204341888 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.204410076 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.204622984 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.204644918 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.371464014 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.465739012 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467067957 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467077017 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467089891 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467104912 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467111111 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467118025 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.467137098 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467161894 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467170000 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.467195034 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.467746973 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:37.467811108 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.468132973 CEST	49872	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:27:37.468149900 CEST	443	49872	152.199.21.175	192.168.2.5
Aug 28, 2024 09:27:38.415730953 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:38.415795088 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:38.415889025 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:38.566787004 CEST	49842	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:38.566812038 CEST	443	49842	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:39.614980936 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:39.615072012 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:39.615120888 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:39.709969997 CEST	49855	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:39.710004091 CEST	443	49855	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:53.932440042 CEST	54652	53	192.168.2.5	162.159.36.2
Aug 28, 2024 09:27:53.938261032 CEST	53	54652	162.159.36.2	192.168.2.5
Aug 28, 2024 09:27:53.938328981 CEST	54652	53	192.168.2.5	162.159.36.2
Aug 28, 2024 09:27:53.940450907 CEST	54652	53	192.168.2.5	162.159.36.2
Aug 28, 2024 09:27:53.945271969 CEST	53	54652	162.159.36.2	192.168.2.5
Aug 28, 2024 09:27:54.410865068 CEST	53	54652	162.159.36.2	192.168.2.5
Aug 28, 2024 09:27:54.412297010 CEST	54652	53	192.168.2.5	162.159.36.2
Aug 28, 2024 09:27:54.415216923 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.415251970 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:54.415308952 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.417664051 CEST	53	54652	162.159.36.2	192.168.2.5
Aug 28, 2024 09:27:54.417716980 CEST	54652	53	192.168.2.5	162.159.36.2
Aug 28, 2024 09:27:54.420373917 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.420389891 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:54.429821968 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:54.429838896 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:54.429891109 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:54.431983948 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:54.432008982 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:54.432074070 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:54.432843924 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:54.432856083 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:54.440821886 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.440830946 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:54.440891027 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.441337109 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:54.441349983 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:54.445173025 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:54.445187092 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:54.471240044 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:54.471285105 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:54.471352100 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:54.472028017 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.472050905 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:54.472111940 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.472340107 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:54.472352028 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:54.472759008 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.472770929 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:54.484056950 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:54.484071016 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:54.484127045 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:54.484720945 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:54.484735012 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:54.957246065 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:54.957520008 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.957530022 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:54.958540916 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:54.958606005 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.995351076 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:54.995448112 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:55.044991970 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:55.045000076 CEST	443	54675	35.186.249.72	192.168.2.5
Aug 28, 2024 09:27:55.062200069 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.062458992 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.062479019 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.062833071 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.062892914 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.063544989 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.063587904 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.068427086 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.068530083 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.090770960 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:27:55.092528105 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.094233990 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.094250917 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.095367908 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.095424891 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.096826077 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.096927881 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.119462013 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:55.119837999 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:55.119848013 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:55.120277882 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:55.122142076 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:55.122270107 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:55.124408960 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.124423981 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:27:55.132765055 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:55.133071899 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:55.133083105 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:55.134090900 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:55.134150028 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:55.136729002 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:55.136795998 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:55.141375065 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.141385078 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.146150112 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.162487984 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.162496090 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.163562059 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.163609028 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.164426088 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.164515018 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.175635099 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:55.175647020 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:27:55.190752029 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:55.190753937 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.190767050 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:55.199604034 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:55.206742048 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.206774950 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:55.233513117 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:55.236795902 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:55.236804962 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:55.237905979 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:55.237957954 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:55.240022898 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:55.240084887 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:55.250873089 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:55.281563997 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:55.281574011 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:27:55.329708099 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:27:57.007178068 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.052500010 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.114643097 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.118943930 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.118952036 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.118973970 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.118989944 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.118998051 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.119004965 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.119016886 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.119043112 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.119060993 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.174170971 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.206152916 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.206166029 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.206197977 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.206204891 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.206214905 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.206254959 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.206264019 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.206326008 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.207372904 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207380056 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207398891 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207418919 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207456112 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207457066 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.207464933 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207534075 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.207552910 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.207583904 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.243619919 CEST	54672	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:27:57.243643999 CEST	443	54672	13.107.246.60	192.168.2.5
Aug 28, 2024 09:27:57.297986984 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.298024893 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:57.298094034 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.298844099 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.298860073 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:57.308099985 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.308130026 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:57.308207989 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.308744907 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:57.308758974 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:57.530913115 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:57.530936003 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:57.531229973 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:57.531368971 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:57.531383991 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.109170914 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.109275103 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.111785889 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.113543987 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.138664007 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.138679981 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.138700008 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.138719082 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.139015913 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.139015913 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.141086102 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.141248941 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.141248941 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.141256094 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.180207014 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.181307077 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.182564974 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.182574987 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.183640003 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.183779955 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.184199095 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.184267044 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.184500933 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.184736013 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.184743881 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.198955059 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.199223042 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.199229002 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.199810028 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.231189013 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.244499922 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.313141108 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314834118 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314842939 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314853907 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314876080 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314907074 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.314928055 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.314960957 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.315038919 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.324120045 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.324273109 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.325850964 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.325850964 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.325882912 CEST	443	54694	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.325989962 CEST	54694	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.377830982 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.377917051 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.378289938 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.378289938 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.378314972 CEST	443	54695	40.115.3.253	192.168.2.5
Aug 28, 2024 09:27:58.378343105 CEST	54695	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:27:58.401974916 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.402010918 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.402086973 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.402095079 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.402139902 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.402204990 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.404222012 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.404251099 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.404301882 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.404325962 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.404334068 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.404346943 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.404383898 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:58.404386044 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.404586077 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.405035019 CEST	54701	443	192.168.2.5	13.107.246.61
Aug 28, 2024 09:27:58.405046940 CEST	443	54701	13.107.246.61	192.168.2.5
Aug 28, 2024 09:27:59.261261940 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.308494091 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374876022 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374901056 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374908924 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374938965 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374949932 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374958038 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.374962091 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.374975920 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.375005960 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.375030994 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.459522963 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.459561110 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.459589958 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.459599018 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.459629059 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.459630966 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.459845066 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.460856915 CEST	54671	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:27:59.460867882 CEST	443	54671	13.107.246.45	192.168.2.5
Aug 28, 2024 09:27:59.509727001 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:59.509767056 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:59.509825945 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:59.510047913 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:27:59.510062933 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:27:59.794543028 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:59.794624090 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:59.794720888 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:27:59.858670950 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:59.858745098 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:27:59.858824015 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:00.034775972 CEST	54673	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:00.034781933 CEST	443	54673	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:00.034899950 CEST	54669	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:00.034924984 CEST	443	54669	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:00.152815104 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.153223038 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.153234959 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.153671026 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.155149937 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.155217886 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.155349970 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.196501970 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.258436918 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.258460999 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.258475065 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.258526087 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.258542061 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.258585930 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.352600098 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.352637053 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.352669954 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.352682114 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.352696896 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:00.352725029 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.352740049 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.353178978 CEST	54722	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:00.353188992 CEST	443	54722	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:03.683809042 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:28:03.683892965 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:28:03.683962107 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:28:04.486468077 CEST	49839	443	192.168.2.5	63.140.62.222
Aug 28, 2024 09:28:04.486488104 CEST	443	49839	63.140.62.222	192.168.2.5
Aug 28, 2024 09:28:06.614036083 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:06.614048004 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:07.892046928 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:07.892086983 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:07.892277002 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:07.892683029 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:07.892698050 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.541790009 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.577244043 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.577280998 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.577718019 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.579703093 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.579771042 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.583693981 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.628504038 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683478117 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683501005 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683577061 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683607101 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683620930 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.683639050 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.683649063 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.683660984 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.683682919 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.771711111 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.771734953 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.771804094 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.771840096 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.771929979 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.773607969 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.773624897 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.773688078 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.773695946 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.773736954 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.859194994 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.859220028 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.859265089 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.859291077 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.859308004 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.859338045 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.861315012 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.861332893 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.861417055 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.861427069 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.861464977 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.863883018 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.863899946 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.863950968 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.863959074 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.864015102 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.865828037 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.865845919 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.865890980 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.865899086 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.865931034 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.904314041 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.947901011 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.947923899 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.947978020 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.947997093 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.948010921 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.948085070 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.950426102 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.950442076 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.950489998 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.950496912 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.950541019 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.951426029 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.951442003 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.951499939 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.951505899 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.951541901 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.953434944 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.953449965 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.953501940 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.953507900 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.953526974 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.953548908 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.955379963 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.955395937 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.955454111 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.955457926 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.955498934 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.956360102 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.956382990 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.956410885 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.956415892 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.956439972 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.956450939 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:08.956455946 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:08.956495047 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:09.522828102 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:09.536643028 CEST	54795	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:09.536665916 CEST	443	54795	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:09.694257021 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:09.694304943 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:09.694370985 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:09.694797993 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:09.694807053 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.317406893 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.317672014 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.317678928 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.318751097 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.318828106 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.320240021 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.320286036 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.320511103 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.320516109 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.375816107 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.547595024 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.547629118 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.547779083 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.547929049 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.547966957 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.548168898 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548177958 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.548242092 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548242092 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548445940 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548449993 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548460007 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.548463106 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.548602104 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.548612118 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.587635994 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.587658882 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.587686062 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.587735891 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.587740898 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.587765932 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.587805033 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.587893009 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.589165926 CEST	54804	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:10.589181900 CEST	443	54804	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:10.613013029 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.613029957 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.613487959 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.616055012 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:10.616074085 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:10.626864910 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:10.626884937 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:10.626976013 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:10.627299070 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:10.627310038 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:10.636996031 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:10.637012959 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:10.637089014 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:10.638850927 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:10.638861895 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:10.680702925 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:10.680736065 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:10.681797981 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:10.682324886 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:10.682343960 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.188930988 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.189191103 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.189198017 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.189229965 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.189631939 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.189644098 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.190264940 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.190344095 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.190659046 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.190732956 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.191946983 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.192014933 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.192053080 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.192116022 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.192266941 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.192266941 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.192281008 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.194569111 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.194953918 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.194972038 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.196019888 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.196222067 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.196645975 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.196711063 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.196919918 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.196927071 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.232510090 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.232939005 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.234616995 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.234647036 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.235697985 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.235776901 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.236984015 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.237046003 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.237308025 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.237314939 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.239506006 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.239509106 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.269464970 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.271358967 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.271385908 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.272437096 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.272620916 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.273066044 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.273139000 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.273375988 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.273384094 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.274029970 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.274354935 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.274388075 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.275691032 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.275810957 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.276870012 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.276988029 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.277101994 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.277112007 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.318583012 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.318589926 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.318614960 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.318651915 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.322720051 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.323005915 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.323014021 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.324052095 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.324162006 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.324831009 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.324898958 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.325114965 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.325122118 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.389081001 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.454983950 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.455104113 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.455158949 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.456218004 CEST	54814	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.456239939 CEST	443	54814	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.466208935 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.466264963 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.468485117 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.468538046 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.468576908 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.474910975 CEST	54812	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.474926949 CEST	443	54812	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.476938009 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.476963043 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.477025986 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.477183104 CEST	54813	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.477221012 CEST	443	54813	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.477732897 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.477742910 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.482336044 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.482355118 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.482408047 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.482744932 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.482755899 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.484026909 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.484049082 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.484096050 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.484282017 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.484292984 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.515284061 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.515352964 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.515412092 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.517147064 CEST	54817	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:11.517162085 CEST	443	54817	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:11.518946886 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.531011105 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.537362099 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:11.537405014 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:11.537482023 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:11.538083076 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:11.538091898 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:11.539330959 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:11.539346933 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:11.539402962 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:11.539546967 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:11.539556026 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:11.539863110 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.539896011 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.539917946 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.539961100 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.539973974 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.540025949 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.540671110 CEST	54818	443	192.168.2.5	54.171.26.222
Aug 28, 2024 09:28:11.540688038 CEST	443	54818	54.171.26.222	192.168.2.5
Aug 28, 2024 09:28:11.545703888 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.545767069 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.545813084 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.547070026 CEST	54815	443	192.168.2.5	157.240.253.35
Aug 28, 2024 09:28:11.547080994 CEST	443	54815	157.240.253.35	192.168.2.5
Aug 28, 2024 09:28:11.559988022 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:11.560017109 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:11.560079098 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:11.561325073 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.561348915 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.561400890 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.561650038 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:11.561686993 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:11.561793089 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:11.561800957 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:11.567897081 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:11.567922115 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:11.567986965 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:11.568200111 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:11.568217993 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:11.572500944 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.591628075 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.591655016 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.591661930 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.591711998 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.591722012 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.591733932 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.591763973 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.591790915 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.594300985 CEST	54820	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:11.594306946 CEST	443	54820	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:11.620239973 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:11.620260000 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:11.620318890 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:11.620536089 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:11.620549917 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:11.639996052 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.640018940 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.640069008 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.640079975 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.640130043 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.642050028 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.642057896 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.642081022 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.642117977 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.642153025 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.643594027 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.643600941 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.643642902 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.643673897 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.699446917 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:11.699472904 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:11.699532986 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:11.699774027 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:11.699784994 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:11.724884033 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:11.724920988 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:11.724986076 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:11.725191116 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:11.725203991 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:11.726171017 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.726180077 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.726236105 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.726255894 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.726624966 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.726672888 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.726681948 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.727381945 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.727444887 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.727452993 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.728034019 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.728096008 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.728102922 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.728207111 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.728272915 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.728773117 CEST	54676	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.728789091 CEST	443	54676	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.744215965 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.744241953 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.744298935 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.744478941 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:11.744493961 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:11.839078903 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:11.839108944 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:11.839165926 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:11.839392900 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:11.839405060 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.130621910 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.130806923 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.130820036 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.132143974 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.132199049 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.132580042 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.132642031 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.132870913 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.132877111 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.177149057 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.177809000 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.177819014 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.178392887 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.178428888 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.178492069 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.178852081 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.178913116 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.179078102 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.179086924 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.180131912 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.180182934 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.180361986 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.180367947 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.180939913 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.181238890 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.181247950 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.181643963 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.182301998 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.182351112 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.182550907 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.185121059 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.188026905 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.189918041 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.190876961 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.190888882 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.191163063 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.191183090 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.191344976 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.191354036 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.191898108 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.191952944 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.192373037 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.192382097 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.192439079 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.192630053 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.192810059 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.192874908 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.193619967 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.193629980 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.195555925 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.195638895 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.196052074 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.196116924 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.196547985 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.196554899 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.196609974 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.196619034 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.200556040 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.202126980 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.202142954 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.203313112 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.203375101 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.203984976 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.204039097 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.204108953 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.204114914 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.217150927 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.220216036 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.220453024 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.220465899 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.221467972 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.221569061 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.221899033 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.221956968 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.222043991 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.222049952 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.224499941 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.292047024 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.292320013 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.292329073 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.293359041 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.293440104 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.294462919 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.294507027 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.294567108 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.294686079 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.294745922 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.294894934 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.294908047 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.295120955 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.295126915 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.296740055 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.296920061 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.296931982 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.297282934 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.297338963 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.297996998 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.298054934 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.298213959 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.298278093 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.298326969 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.298332930 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.326592922 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.326844931 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.326865911 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.327896118 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.327970982 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.328924894 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.328988075 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.329144001 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.329149961 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.329220057 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.329391003 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.329405069 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.329405069 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.329416037 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.329421997 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.329421997 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.372497082 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.374967098 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.375036955 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.375092983 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.377826929 CEST	54836	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.377842903 CEST	443	54836	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.378670931 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.378694057 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.378751993 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.378966093 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.378978968 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.404638052 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.404699087 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.404758930 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.405129910 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:12.405164003 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:12.405231953 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:12.405525923 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:12.405538082 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:12.405740023 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.405905008 CEST	54828	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.405920029 CEST	443	54828	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.406663895 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.406677961 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.407567978 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.407751083 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.407818079 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.408869982 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.408936024 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.408946037 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.408998966 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.409082890 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.409147024 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.409337997 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.409346104 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.409904957 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.409913063 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.409939051 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.409960032 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.409996033 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.410132885 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.410140991 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.410181046 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.410691977 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.410825968 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.410873890 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.411334038 CEST	54831	443	192.168.2.5	52.21.67.222
Aug 28, 2024 09:28:12.411340952 CEST	443	54831	52.21.67.222	192.168.2.5
Aug 28, 2024 09:28:12.452022076 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.452042103 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.452127934 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.452168941 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.452266932 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.453022003 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:12.453052044 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:12.453207016 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:12.453830004 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:12.453840971 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:12.453844070 CEST	54829	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.453862906 CEST	443	54829	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.456438065 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.456520081 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.457726955 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.457787037 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.457817078 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.458024979 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.458980083 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.459005117 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.459291935 CEST	54830	443	192.168.2.5	216.58.206.34
Aug 28, 2024 09:28:12.459304094 CEST	443	54830	216.58.206.34	192.168.2.5
Aug 28, 2024 09:28:12.459393024 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.460011959 CEST	54832	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.460021973 CEST	443	54832	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.462160110 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.462174892 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.464766026 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:12.464783907 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:12.464879036 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:12.466999054 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:12.467011929 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:12.470942020 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:12.470958948 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:12.471308947 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.471378088 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.471409082 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:12.471795082 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:12.471803904 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:12.471836090 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.472186089 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.472193003 CEST	443	54825	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.472227097 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.472287893 CEST	54825	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.487212896 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.490267992 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.490278959 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.491322041 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.491449118 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.492544889 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.492544889 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.492554903 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.492605925 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.493971109 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.494035959 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.494133949 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.494555950 CEST	54827	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:12.494573116 CEST	443	54827	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:12.495861053 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.495868921 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.496001005 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.496014118 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.496495008 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.496503115 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.496745110 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.496753931 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.497314930 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.497343063 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.497409105 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.497409105 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.497419119 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.497695923 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.497770071 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.497936964 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.497988939 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.498025894 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.498027086 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.498034000 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.498055935 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.498084068 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.498126030 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.499248981 CEST	54833	443	192.168.2.5	63.140.62.27
Aug 28, 2024 09:28:12.499268055 CEST	443	54833	63.140.62.27	192.168.2.5
Aug 28, 2024 09:28:12.499823093 CEST	54837	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:12.499836922 CEST	443	54837	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:12.518028975 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.570008039 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.570039034 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.570966959 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.570966959 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:12.570996046 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:12.580007076 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.580075979 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.580077887 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.580158949 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.583060026 CEST	54834	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.583065987 CEST	443	54834	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.583904028 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.583929062 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.584033012 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.584491968 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:12.584500074 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:12.608294964 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.608316898 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.608516932 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.608521938 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.608685017 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.610178947 CEST	54835	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.610193014 CEST	443	54835	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.614042044 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.614070892 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.645468950 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.645483971 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.645643950 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.645905972 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:12.645919085 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:12.698919058 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.699177027 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.699204922 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.700210094 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.700335979 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.701884985 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.701951981 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.702102900 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.715409040 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.744507074 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.770179987 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.770659924 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.770697117 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.770845890 CEST	443	54839	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.770870924 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.771106005 CEST	54839	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.772209883 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.772253036 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.772392035 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.772577047 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:12.772599936 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:12.795708895 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:12.795746088 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:12.795917988 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:12.796092033 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:12.796111107 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:12.814846039 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.814872026 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.836328030 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.836782932 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.836792946 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.837136030 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.837656021 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.837656021 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:12.837677002 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.837737083 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:12.862364054 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.862683058 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.862714052 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.863847971 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.863974094 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.864995956 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.865087986 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.866846085 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.866856098 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.925863981 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.967713118 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.968080044 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.968527079 CEST	54845	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.968548059 CEST	443	54845	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.969986916 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.970032930 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.970185041 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.970308065 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.970374107 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.970460892 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.970463037 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:12.970477104 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:12.971172094 CEST	54843	443	192.168.2.5	104.244.42.67
Aug 28, 2024 09:28:12.971184969 CEST	443	54843	104.244.42.67	192.168.2.5
Aug 28, 2024 09:28:12.982897997 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:12.982920885 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:12.984352112 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:12.984775066 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:12.984793901 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.006027937 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:13.010677099 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.010970116 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.010982037 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.011389017 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.011852026 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.011852026 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.011919022 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.015532970 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:13.015602112 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:13.016628027 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:13.016638041 CEST	443	54846	35.244.174.68	192.168.2.5
Aug 28, 2024 09:28:13.016669989 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:13.016715050 CEST	54846	443	192.168.2.5	35.244.174.68
Aug 28, 2024 09:28:13.017328024 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.017358065 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.017501116 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.017857075 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.017868996 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.098066092 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.098501921 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.098519087 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.098881960 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.099648952 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.099720001 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.099967003 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.108366013 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.109070063 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.109082937 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.110189915 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.110328913 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.110913992 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.110913992 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.110924959 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.110972881 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.119930029 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.120486975 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.120505095 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.121906042 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.122059107 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.122287035 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.122384071 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.122478962 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.144511938 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.153364897 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.153477907 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.153479099 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.153490067 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.153563023 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.153619051 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.153716087 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.156075001 CEST	54849	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.156086922 CEST	443	54849	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.162647009 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.162650108 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.162686110 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.162695885 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.162777901 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.162806988 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.163079977 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.163094997 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.163125038 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.163137913 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.168505907 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.182285070 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.182601929 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:13.182614088 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.182987928 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.183392048 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:13.183448076 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.183549881 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:13.206036091 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.206338882 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:13.206351995 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.206732035 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.207231998 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:13.207293034 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.207500935 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:13.223340034 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.223632097 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.223649979 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.224739075 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.224772930 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.224783897 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.224823952 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.226011992 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.226079941 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.226849079 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.228171110 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.228363037 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.228496075 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.229290009 CEST	54848	443	192.168.2.5	107.22.246.206
Aug 28, 2024 09:28:13.229305983 CEST	443	54848	107.22.246.206	192.168.2.5
Aug 28, 2024 09:28:13.252500057 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.272511005 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.291857004 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.292277098 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.292289972 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.293385029 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.293728113 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.293816090 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.293870926 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.294236898 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.294249058 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.318845034 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.318873882 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.379122972 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.379143000 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.379204035 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.379235983 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.379410028 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.379995108 CEST	54850	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.380016088 CEST	443	54850	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.390320063 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.390327930 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.392396927 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.392498970 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.392605066 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.392832994 CEST	54851	443	192.168.2.5	142.250.74.196
Aug 28, 2024 09:28:13.392844915 CEST	443	54851	142.250.74.196	192.168.2.5
Aug 28, 2024 09:28:13.394738913 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.394774914 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.394961119 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.396059990 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.396069050 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.396599054 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.396616936 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.396744967 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.397439957 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.397450924 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.405339003 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:13.405364990 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:13.405527115 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:13.405929089 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:13.405942917 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:13.410561085 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.410820961 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.410836935 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.411325932 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.411535978 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.411988020 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.412182093 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.412461042 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.412548065 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.412733078 CEST	54847	443	192.168.2.5	91.228.74.244
Aug 28, 2024 09:28:13.412746906 CEST	443	54847	91.228.74.244	192.168.2.5
Aug 28, 2024 09:28:13.413018942 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.413027048 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.413556099 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.414278030 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.414314032 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.414478064 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.414634943 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.414644003 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.415749073 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.415786982 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.415796995 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.415899038 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.416479111 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.416479111 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.416492939 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.416546106 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.457806110 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.457889080 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.457956076 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:13.458636045 CEST	54852	443	192.168.2.5	54.78.109.69
Aug 28, 2024 09:28:13.458646059 CEST	443	54852	54.78.109.69	192.168.2.5
Aug 28, 2024 09:28:13.460633039 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:13.460659981 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:13.461224079 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:13.461714029 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:13.461723089 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:13.463248014 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.463268042 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.463329077 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.463531017 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.463541985 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.480457067 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.480839968 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.481054068 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.482279062 CEST	54855	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.482302904 CEST	443	54855	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.498811007 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.498898029 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.498953104 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:13.500017881 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.500572920 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.500583887 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.501703024 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.501782894 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.502165079 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.502233982 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.502279043 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.503135920 CEST	54853	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:13.503149033 CEST	443	54853	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:13.504101992 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.504123926 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.504368067 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.504705906 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.504717112 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.509330988 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.523518085 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.523531914 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.533519030 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.544503927 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.551042080 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:13.551058054 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.551457882 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.551759958 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:13.551835060 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.552078009 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:13.581698895 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.581729889 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.581890106 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.582536936 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:13.582551003 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:13.596493006 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.628104925 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.628302097 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.628319979 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.629472017 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.629530907 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.629970074 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.630029917 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.630203009 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.630211115 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.652182102 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.652277946 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.652338982 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:13.656117916 CEST	54860	443	192.168.2.5	52.223.40.198
Aug 28, 2024 09:28:13.656127930 CEST	443	54860	52.223.40.198	192.168.2.5
Aug 28, 2024 09:28:13.657831907 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.657877922 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.658123970 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.658334017 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.658345938 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.672565937 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.672574043 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.672574043 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.672591925 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.683784008 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.683877945 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.684206009 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.686340094 CEST	54858	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.686373949 CEST	443	54858	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.686966896 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.686989069 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.687155962 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.687968016 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.687980890 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.691160917 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.691189051 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.691248894 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.691442013 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.691452026 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.692989111 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.693088055 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.693133116 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.693509102 CEST	54857	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:13.693526983 CEST	443	54857	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:13.706585884 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.706672907 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.707251072 CEST	54862	443	192.168.2.5	104.244.42.131
Aug 28, 2024 09:28:13.707258940 CEST	443	54862	104.244.42.131	192.168.2.5
Aug 28, 2024 09:28:13.724258900 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.724519968 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.724535942 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.724932909 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.725313902 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.725378036 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.725456953 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.740715981 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.740961075 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.740983009 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.741381884 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.741769075 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.741837025 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.741970062 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.772491932 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.788500071 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.837536097 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.837605953 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.837724924 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.838397026 CEST	54866	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.838419914 CEST	443	54866	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.859318018 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.860510111 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.860584021 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.860600948 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.860640049 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.860646963 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.860732079 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.860845089 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.862510920 CEST	54867	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.862528086 CEST	443	54867	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.891609907 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.891712904 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.891772032 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.901549101 CEST	54865	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.901571989 CEST	443	54865	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.901966095 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.901998997 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.902302027 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.902591944 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:13.902605057 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:13.912352085 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.912389040 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.912487030 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.912678957 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:13.912699938 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:13.924590111 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:13.924602985 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:13.924768925 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:13.925642014 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:13.925656080 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:13.941767931 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.942104101 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.942123890 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.942547083 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.942941904 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.943022013 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:13.943147898 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:13.988500118 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:14.005645037 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.006062984 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.006076097 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.007111073 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.007168055 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.007606030 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.007668018 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.007924080 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.007930994 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.051024914 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.317754030 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:14.317792892 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.317821026 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:14.317892075 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:14.318119049 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.318140030 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.318752050 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:14.318752050 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:14.318768978 CEST	443	54868	150.171.27.10	192.168.2.5
Aug 28, 2024 09:28:14.318850994 CEST	54868	443	192.168.2.5	150.171.27.10
Aug 28, 2024 09:28:14.319180965 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.319264889 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.320662975 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.320749044 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.320915937 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.321353912 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.321363926 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.321479082 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.321491003 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.322921038 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.323026896 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.323126078 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.323446989 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.323467016 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.323817968 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.323838949 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.323903084 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.323952913 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.324001074 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.324760914 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.324837923 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.324950933 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.324965954 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.325062990 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.325071096 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.325174093 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.325184107 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.325293064 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.325436115 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.325480938 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.325484991 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.325666904 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.325876951 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.325937033 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.326004982 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.326071978 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.326081038 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.326361895 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.326369047 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.326415062 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.326618910 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.326693058 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.326726913 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.326859951 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.326891899 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.326905012 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.327224970 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.327246904 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.327307940 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.327418089 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.327436924 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.327699900 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.327763081 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.327766895 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.327838898 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.327838898 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.327873945 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.328358889 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.328413010 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.328505039 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.328694105 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.328768015 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.328850031 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.329010010 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.329149008 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.329174042 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.368499041 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.370039940 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.370173931 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.372504950 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.376494884 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.376506090 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.376514912 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.376532078 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.384905100 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.385157108 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.385169029 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.386184931 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.386262894 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.387341976 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.387406111 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.387520075 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.387527943 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.434011936 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.454559088 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.454701900 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.455241919 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.455241919 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.458616972 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.458638906 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.458726883 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.459645033 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.459667921 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.467880964 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:14.467900038 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:14.467994928 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:14.468219995 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:14.468238115 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:14.517558098 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.517766953 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.517776966 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.519403934 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.519475937 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.519814014 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.519920111 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.519943953 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.554775953 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.555048943 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.555062056 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.556195974 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.556276083 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.556647062 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.556716919 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.556823969 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.560378075 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.560384035 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.567378998 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.567461967 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.567996979 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.569130898 CEST	54869	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.569147110 CEST	443	54869	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.574557066 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.574603081 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.574872971 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.575146914 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.575160980 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.576622009 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.576704979 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.576751947 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.577124119 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.577208042 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.578610897 CEST	54871	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.578628063 CEST	443	54871	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.578648090 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.581142902 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.581197023 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.583010912 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.585522890 CEST	54880	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.585535049 CEST	443	54880	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.585767984 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.585828066 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.586877108 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.587315083 CEST	54881	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.587323904 CEST	443	54881	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.588597059 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.588601112 CEST	443	54885	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.588629007 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.588855028 CEST	54885	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.588867903 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.588938951 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.589138031 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.589252949 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.589318037 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.589473009 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.590291977 CEST	54874	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.590300083 CEST	443	54874	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.591068029 CEST	54873	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.591080904 CEST	443	54873	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.595257998 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.595314026 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.595840931 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.596090078 CEST	54878	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.596097946 CEST	443	54878	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.600502968 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.600832939 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.600894928 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.601028919 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.601214886 CEST	54875	443	192.168.2.5	66.235.152.225
Aug 28, 2024 09:28:14.601231098 CEST	443	54875	66.235.152.225	192.168.2.5
Aug 28, 2024 09:28:14.602006912 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.602027893 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.602264881 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.603228092 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.603250027 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.603562117 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.603638887 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.603703022 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.603955984 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.603972912 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.604855061 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.604866982 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.604898930 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.604929924 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.605407953 CEST	54870	443	192.168.2.5	142.250.185.164
Aug 28, 2024 09:28:14.605415106 CEST	443	54870	142.250.185.164	192.168.2.5
Aug 28, 2024 09:28:14.605930090 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.605946064 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.606129885 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.606142044 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.606712103 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.606719017 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.606862068 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.607270956 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.607292891 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.607378960 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.607537031 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.607548952 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.607983112 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:14.608000994 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:14.608371019 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.608376980 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.608408928 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.631884098 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.631906986 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.632417917 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.632611990 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.632626057 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.656845093 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.765458107 CEST	54872	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:14.765480042 CEST	443	54872	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:14.779386044 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.779489040 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.779573917 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.781064987 CEST	54883	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:14.781076908 CEST	443	54883	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:14.819678068 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.819771051 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.820887089 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.821038008 CEST	54884	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.821050882 CEST	443	54884	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.821367025 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.821413994 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.821580887 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.822117090 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:14.822134018 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:14.904041052 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:14.904072046 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:14.904294014 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:14.907265902 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:14.907278061 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.069984913 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.070250988 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.070276022 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.071357012 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.071424961 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.072464943 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.072551012 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.072735071 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.072761059 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.095995903 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.096282959 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.096297026 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.096689939 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.097054958 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.097145081 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.097167015 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.109456062 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.109715939 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.109741926 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.110956907 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.111016989 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.111340046 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.111465931 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.111505032 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.115597963 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.144501925 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.146806955 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.152504921 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.161936045 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.161950111 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.191660881 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.191912889 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.191936016 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.192325115 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.192981958 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.193063021 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.193180084 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.200100899 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200122118 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200129986 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200160980 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200190067 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200191021 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.200205088 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.200237036 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.200259924 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.209393024 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.216255903 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.216692924 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.216717005 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.218231916 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.218437910 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.218451977 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.218758106 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.218821049 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.219183922 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.219324112 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.219336033 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.219465971 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.219528913 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.219646931 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.219795942 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.219858885 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.219907999 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.220177889 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.220350027 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.220364094 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.220921040 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.221205950 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.221276045 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.221293926 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.232839108 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.232924938 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.232985020 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.233536005 CEST	54888	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.233551979 CEST	443	54888	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.238734007 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.238944054 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.238954067 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.240020990 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.240101099 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.240499973 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.240703106 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.240823984 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.241070986 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.251903057 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.252238035 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.252255917 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.252677917 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.253009081 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.253096104 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.253163099 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.260507107 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.264502048 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.264971018 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.264988899 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.264997005 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.265003920 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.265007973 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.272821903 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.272924900 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.273058891 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.273526907 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.273559093 CEST	443	54894	172.64.150.63	192.168.2.5
Aug 28, 2024 09:28:15.273574114 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.273605108 CEST	54894	443	192.168.2.5	172.64.150.63
Aug 28, 2024 09:28:15.275051117 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.275080919 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.275228024 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.275463104 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.275490046 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.283596039 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.283622980 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.283688068 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.283699989 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.283727884 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.283759117 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.284957886 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.284975052 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.285073042 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.285082102 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.285201073 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.288500071 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.296160936 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.296168089 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.296199083 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.296215057 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.312246084 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.312259912 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.343446970 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.369535923 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.369555950 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.369622946 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.369637966 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.369657040 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.369664907 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.369683027 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.369714975 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.370153904 CEST	54887	443	192.168.2.5	13.107.246.42
Aug 28, 2024 09:28:15.370165110 CEST	443	54887	13.107.246.42	192.168.2.5
Aug 28, 2024 09:28:15.374808073 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.374834061 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.375363111 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.376087904 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:15.376101971 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:15.432459116 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.432784081 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.432801008 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.433141947 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.433501959 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.433573008 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.433680058 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.454087973 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.454166889 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.454327106 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.454782009 CEST	54889	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.454801083 CEST	443	54889	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.474908113 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.474993944 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.475068092 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.475610018 CEST	54893	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.475620985 CEST	443	54893	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.480505943 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.483676910 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.483752012 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.483799934 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.484906912 CEST	54890	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.484930038 CEST	443	54890	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.486385107 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.486450911 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.486538887 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.487472057 CEST	54892	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.487485886 CEST	443	54892	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.494771004 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:15.502665997 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.502732992 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.502824068 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.503607988 CEST	54891	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.503616095 CEST	443	54891	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.524635077 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.524729967 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.524818897 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.525564909 CEST	54896	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.525589943 CEST	443	54896	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.536503077 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:15.551945925 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.552218914 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.552237034 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.553777933 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.553848982 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.553855896 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.553917885 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.554964066 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.555092096 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.555212021 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.555217028 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.607670069 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.690227985 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.690301895 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.690363884 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.704683065 CEST	54897	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.704700947 CEST	443	54897	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.803002119 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.803044081 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.803177118 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.803569078 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:15.803580999 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:15.834764957 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.834870100 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:15.834943056 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:15.888781071 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.903229952 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:15.903244972 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.903914928 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:15.954622984 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:16.028031111 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.042012930 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:16.042181969 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:16.054855108 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.054872036 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.055355072 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:16.055372953 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.055778980 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.055846930 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.056498051 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.096504927 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:16.100506067 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.108824968 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121592045 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121603966 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121630907 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121638060 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121640921 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121649027 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.121670961 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121676922 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.121691942 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.121716022 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.152992964 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.153017044 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.153033972 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.153099060 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.153110981 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.153157949 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.219316006 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219329119 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219358921 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219399929 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219403982 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219415903 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.219423056 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.219453096 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.231345892 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:16.231446028 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:16.231498957 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:16.232579947 CEST	54899	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:16.232609034 CEST	443	54899	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:16.237680912 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.237704039 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.237799883 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.237824917 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.237874985 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.239448071 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.239461899 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.239520073 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.239526987 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.239578009 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.243829012 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.243853092 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.243885994 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.243899107 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.243932009 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.283804893 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.285924911 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.303335905 CEST	54898	443	192.168.2.5	3.71.149.231
Aug 28, 2024 09:28:16.303352118 CEST	443	54898	3.71.149.231	192.168.2.5
Aug 28, 2024 09:28:16.310576916 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.310616970 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.310622931 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.310633898 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.310645103 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.310652018 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.310672045 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.310692072 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.312635899 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.312658072 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.312758923 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.312998056 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.313007116 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.322436094 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.322444916 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.322465897 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.322494030 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.322499990 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.322531939 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.323007107 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.323024035 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.323076010 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.323085070 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.323107958 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.323137045 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.323164940 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.323885918 CEST	54900	443	192.168.2.5	13.107.246.67
Aug 28, 2024 09:28:16.323892117 CEST	443	54900	13.107.246.67	192.168.2.5
Aug 28, 2024 09:28:16.332277060 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.332297087 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.332355976 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.332361937 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.332403898 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.332770109 CEST	54674	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.332781076 CEST	443	54674	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.389244080 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.389271975 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.389547110 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.389776945 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.389791012 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.422549009 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.423137903 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.423147917 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.423531055 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.424094915 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.424179077 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.424406052 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.468503952 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.471863031 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.471906900 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.471990108 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.472295046 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.472306013 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.504468918 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:16.504514933 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:16.504627943 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:16.505938053 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:16.505949020 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:16.537022114 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.537039042 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.537110090 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.540915966 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:16.540929079 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:16.571402073 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:16.571418047 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:16.571595907 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:16.573283911 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:16.573322058 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:16.573448896 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:16.584997892 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:16.585017920 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:16.585335970 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:16.585347891 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:16.853516102 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.853601933 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.853660107 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.855274916 CEST	54905	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:16.855290890 CEST	443	54905	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:16.938507080 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.938935041 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.938961029 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.939976931 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.940059900 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.940066099 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.940135956 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.941839933 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.941910982 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.942147017 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:16.942152023 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:16.997837067 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.090555906 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.090801001 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:17.090826988 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.091135025 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.091604948 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:17.091672897 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.092133999 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:17.132498026 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.137438059 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.137639046 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.137654066 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.138784885 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.138850927 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.139740944 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.139801979 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.139925003 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.139933109 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.162688017 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.162986040 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.163002968 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.164128065 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.164180040 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.164525986 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.164581060 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.164669991 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.164678097 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.188359022 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.217765093 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:17.218235016 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:17.218246937 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:17.218631029 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:17.219090939 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:17.219153881 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:17.220350027 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.239480019 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.239553928 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.239645958 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.240385056 CEST	54910	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.240392923 CEST	443	54910	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.242101908 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.242115974 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.242273092 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.242696047 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.242707014 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.260114908 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.260478973 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.260490894 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.261528015 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.261601925 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.261964083 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.262037992 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.262072086 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.269256115 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:17.270143032 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270165920 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270173073 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270195007 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270210981 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270220995 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270251036 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.270266056 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.270277023 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.270308971 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.308506012 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.317312002 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.317321062 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.345906019 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.345978022 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.346051931 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:17.346872091 CEST	54913	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:17.346890926 CEST	443	54913	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:17.356525898 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.356545925 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.356595993 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.356606007 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.356662035 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.358695030 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.358861923 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.358884096 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.358918905 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.358925104 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.358961105 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.383143902 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:17.383359909 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:17.383372068 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:17.383703947 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:17.384124041 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:17.384181976 CEST	443	54920	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:17.438688040 CEST	54920	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:17.443660021 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.443686962 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.443731070 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.443746090 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.443774939 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.443792105 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.445274115 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.445291996 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.445344925 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.445350885 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.445384026 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.446913958 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.446929932 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.446984053 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.446989059 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.447036028 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.448221922 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.448236942 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.448297024 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.448302031 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.448342085 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.532382011 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532402992 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532473087 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.532489061 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532535076 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.532859087 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532897949 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532921076 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.532927990 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.532957077 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.532974005 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.533027887 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.533195972 CEST	54915	443	192.168.2.5	13.107.246.45
Aug 28, 2024 09:28:17.533210993 CEST	443	54915	13.107.246.45	192.168.2.5
Aug 28, 2024 09:28:17.537375927 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:17.537395000 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:17.537532091 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:17.537748098 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:17.537760019 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:17.810390949 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815684080 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815692902 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815738916 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815757036 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.815773964 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815789938 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.815819979 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.815843105 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.816437960 CEST	54912	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.816458941 CEST	443	54912	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.824924946 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.824938059 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.824989080 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.825761080 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.825773954 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.873264074 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.873584986 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.873601913 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.873987913 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.874396086 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.874470949 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.874536037 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.920502901 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:17.922652960 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:17.929977894 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.929997921 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930005074 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930037975 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930053949 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930064917 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930068016 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.930090904 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:17.930104971 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:17.930143118 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.020606995 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.020625114 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.020683050 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.020693064 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.020725965 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.020760059 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.020771980 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.022994041 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.035928011 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.035964012 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.035998106 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.036015034 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.036031008 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.080830097 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.095529079 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.110280991 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.110304117 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.110327005 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.110354900 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.110368013 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.110416889 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.112632990 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.112777948 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.125654936 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.125679970 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.125731945 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.125755072 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.125798941 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.141060114 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.141098022 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.141124010 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.141132116 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.141184092 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.141190052 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.141216993 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.141262054 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.141774893 CEST	54918	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.141783953 CEST	443	54918	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.175493956 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:18.175580025 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:18.175618887 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:18.180955887 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.180996895 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.181057930 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.181235075 CEST	54926	443	192.168.2.5	3.75.62.37
Aug 28, 2024 09:28:18.181250095 CEST	443	54926	3.75.62.37	192.168.2.5
Aug 28, 2024 09:28:18.181983948 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.181998968 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.184622049 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.184636116 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.184825897 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.184892893 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.186213017 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.186223984 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.186513901 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.186528921 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.186995983 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.187304020 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.187371016 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.187551022 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.228502035 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.294677973 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.294699907 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.294713974 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.294790030 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.294816017 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.294864893 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.330904007 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.330930948 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.331216097 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.331792116 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.331805944 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.654390097 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.654403925 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.654449940 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.654463053 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.654479980 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.654531956 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.655463934 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.655483007 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.655534983 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.655544996 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.655595064 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.659023046 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.659039974 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.659095049 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.659105062 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.659157038 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.660643101 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.660662889 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.660731077 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.660737991 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.660931110 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.661076069 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.661559105 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.661601067 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.661708117 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.662564039 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.662570953 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.663067102 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.664092064 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.664182901 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.667386055 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.687526941 CEST	54931	443	192.168.2.5	13.107.246.60
Aug 28, 2024 09:28:18.687536955 CEST	443	54931	13.107.246.60	192.168.2.5
Aug 28, 2024 09:28:18.708498955 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.812982082 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.813352108 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.813378096 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.814203978 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.814496040 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.814532995 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.814610958 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.814755917 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.814882040 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.815013885 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.815068007 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.815083981 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.815200090 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.815215111 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.815291882 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.815609932 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.815900087 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.815963984 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.815987110 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.856503963 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.859919071 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:18.860493898 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:18.870446920 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.870481014 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.870562077 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.871162891 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:18.871176958 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:18.902442932 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:18.902472019 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:18.902529955 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:18.902715921 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:18.902726889 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.044558048 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.044960022 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.044969082 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.045339108 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.045650005 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.045717001 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.047708035 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.061481953 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.061512947 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.061672926 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.061928988 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.061944008 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.075022936 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.075144053 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.075181961 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.076823950 CEST	54937	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.076843977 CEST	443	54937	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.084336996 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.084355116 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.084527016 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.084883928 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.084897995 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.088500023 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.092659950 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.092736006 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.092786074 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.093564034 CEST	54938	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.093579054 CEST	443	54938	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.099777937 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.099792004 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.099884033 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.100059032 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.100073099 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.327873945 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.327894926 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.327920914 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.327949047 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.327965975 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.328011036 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.328670979 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.328742981 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.328862906 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.329348087 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.329364061 CEST	443	54934	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.329381943 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.329411030 CEST	54934	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.458719969 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.458972931 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.458986998 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.460037947 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.460098982 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.460467100 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.460537910 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.460742950 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.460750103 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.485891104 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.486532927 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.486557961 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.487446070 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.487519979 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.488496065 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.488549948 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.488769054 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.488776922 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.509907007 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.541925907 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.586735964 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.587075949 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.587094069 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.587446928 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.587950945 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.588011026 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.588133097 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.596426010 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.597318888 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.597345114 CEST	443	54946	192.132.33.67	192.168.2.5
Aug 28, 2024 09:28:19.597404957 CEST	54946	443	192.168.2.5	192.132.33.67
Aug 28, 2024 09:28:19.599680901 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.599705935 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.599777937 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.599984884 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.599997997 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.632498980 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.698798895 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.699079037 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.699091911 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.699481010 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.700180054 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.700253963 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:19.714087963 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.714122057 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.714184046 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.714193106 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.714225054 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.714840889 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.715275049 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.715331078 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.715370893 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.715600967 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.715609074 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.716202974 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.717394114 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.717403889 CEST	443	54939	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.717411995 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.717447996 CEST	54939	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.718311071 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.721097946 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.721199989 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.721605062 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.721612930 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.722070932 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.722343922 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.722893000 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.722973108 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.723165989 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.743932962 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.744134903 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.745671034 CEST	54943	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:19.745693922 CEST	443	54943	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:19.746418953 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.749516964 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:19.764503956 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.776470900 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.776515961 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.776596069 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.776930094 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:19.776943922 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:19.778861046 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.778877974 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.778939009 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.780397892 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.780410051 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.788501978 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.912216902 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:19.912234068 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:19.912415028 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:19.912602901 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:19.912616014 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:19.981585979 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.981672049 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.981728077 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.982470036 CEST	54949	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.982482910 CEST	443	54949	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.989801884 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.989886045 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:19.989940882 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.991158009 CEST	54948	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:19.991169930 CEST	443	54948	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.214379072 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.214785099 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:20.214802027 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.215177059 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.216947079 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:20.217009068 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.217324972 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:20.247730970 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.247746944 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.247811079 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.247827053 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.247885942 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.248084068 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.248140097 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.248209953 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.250516891 CEST	54944	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.250530005 CEST	443	54944	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.260499954 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.288593054 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.288621902 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.288710117 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.289047003 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.289060116 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.303951025 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.303981066 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.304066896 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304136038 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304142952 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.304254055 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304277897 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304280043 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.304331064 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304385900 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304406881 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.304466009 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304677010 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.304689884 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.305006027 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.305022001 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.305217028 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.305226088 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.305439949 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:20.305454016 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:20.405998945 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.440260887 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.440274000 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.440965891 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.441492081 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.441571951 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.441801071 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.474086046 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.474176884 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.474366903 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:20.484500885 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.485946894 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.494538069 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.494546890 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.495121002 CEST	54950	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:20.495131969 CEST	443	54950	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:20.495614052 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.495673895 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.496840000 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.496920109 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.497138977 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.497147083 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.520047903 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.525011063 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.525029898 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.525413990 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.525820017 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.525881052 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.526384115 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.542042971 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.542088032 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.542193890 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.542422056 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:20.542429924 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.549889088 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.568500042 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:20.582834005 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.582870007 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.582983017 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.583182096 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.583199024 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.685074091 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.685162067 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.685348988 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.686995983 CEST	54952	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:20.687017918 CEST	443	54952	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:20.689317942 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.689389944 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.689445019 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.731050014 CEST	54955	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.731069088 CEST	443	54955	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.731973886 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.732002974 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.732161999 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.732413054 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:20.732428074 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:20.765897989 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:20.765923023 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:20.766002893 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:20.766496897 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:20.766508102 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:20.848217010 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:20.848232985 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:20.907423019 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:20.907444954 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:20.907526970 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:20.907766104 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:20.907780886 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:20.960985899 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.961261034 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.961277008 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.962400913 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.962485075 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.964148045 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.964229107 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:20.964509010 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:20.964519978 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:21.004811049 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:21.124674082 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:21.124813080 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:21.124878883 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:21.128079891 CEST	54956	443	192.168.2.5	34.200.199.99
Aug 28, 2024 09:28:21.128098011 CEST	443	54956	34.200.199.99	192.168.2.5
Aug 28, 2024 09:28:21.138964891 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.138984919 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.139070988 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.139698029 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.139708996 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.154436111 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.154457092 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.154508114 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.154676914 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.154689074 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.160949945 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.160959959 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.161032915 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.161415100 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.161427021 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.183614016 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.183625937 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.183708906 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.184015989 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.184027910 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.196172953 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.196413040 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.196420908 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.197382927 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.197444916 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.198632956 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.198654890 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.198715925 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.198730946 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.198771954 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.198945999 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.199001074 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.199214935 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.199220896 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.199536085 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.199604988 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.199670076 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.199870110 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.200114965 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.200125933 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.200455904 CEST	54951	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.200472116 CEST	443	54951	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.201256990 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.201322079 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.203551054 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.204252958 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.204263926 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.204627037 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205051899 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.205060005 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205169916 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.205259085 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205328941 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.205336094 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205368042 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205430984 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.205779076 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.205842018 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.205930948 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.206490040 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.206538916 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.206839085 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.206896067 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.206954002 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.206964970 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.216036081 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.216264009 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:21.216276884 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.216779947 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.218811989 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:21.218885899 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.219129086 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:21.250273943 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.250273943 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.250430107 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.250430107 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.250438929 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.264503956 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.268740892 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.269144058 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.269155979 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.269561052 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.269999027 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.270072937 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.270301104 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.297553062 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.312211990 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.314220905 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:21.314229012 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.314759016 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.315100908 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:21.315172911 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.315483093 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:21.316512108 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.329286098 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:21.329312086 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:21.329473019 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:21.330370903 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:21.330384016 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:21.356503010 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.375973940 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.376091003 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.376151085 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.376403093 CEST	54960	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.376415014 CEST	443	54960	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.382657051 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.382719994 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.382764101 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.383070946 CEST	54959	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.383081913 CEST	443	54959	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.383585930 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.383650064 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.383805990 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.384066105 CEST	54957	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.384077072 CEST	443	54957	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.384618998 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.384685993 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.384776115 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.385112047 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.385117054 CEST	443	54958	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:21.385147095 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.385163069 CEST	54958	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:21.450521946 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.463037968 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.463058949 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.464318037 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.464382887 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.466388941 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.466475010 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.466594934 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.466608047 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.466630936 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.490483046 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.490696907 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.490710974 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.491791010 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.491848946 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.492784977 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.492851019 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.493000984 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.493007898 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.497335911 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.497423887 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.497594118 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:21.498656988 CEST	54962	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:21.498667955 CEST	443	54962	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:21.508493900 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.520849943 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.536467075 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.536781073 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.536895990 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.536947012 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:21.538640976 CEST	54964	443	192.168.2.5	13.248.245.213
Aug 28, 2024 09:28:21.538655043 CEST	443	54964	13.248.245.213	192.168.2.5
Aug 28, 2024 09:28:21.539535046 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.539567947 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:21.539661884 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.539874077 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.539886951 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:21.591331959 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.591430902 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.591495991 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.591957092 CEST	54965	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.591969013 CEST	443	54965	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.598131895 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.598201036 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:21.598248005 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.598273039 CEST	443	49754	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:21.598303080 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.598328114 CEST	49754	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:21.599308968 CEST	54966	443	192.168.2.5	18.209.2.95
Aug 28, 2024 09:28:21.599324942 CEST	443	54966	18.209.2.95	192.168.2.5
Aug 28, 2024 09:28:21.600668907 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.600694895 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:21.600753069 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.601008892 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:21.601023912 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:21.606718063 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.606748104 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.606816053 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.607294083 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:21.607307911 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:21.748440981 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.748971939 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.748991013 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.749351025 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.749857903 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.749917984 CEST	443	54967	63.140.37.206	192.168.2.5
Aug 28, 2024 09:28:21.796508074 CEST	54967	443	192.168.2.5	63.140.37.206
Aug 28, 2024 09:28:21.849734068 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.849946022 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.849962950 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.850991011 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.851051092 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.851454973 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.851514101 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.851659060 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.851666927 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.906169891 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.929487944 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.929516077 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.929573059 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.929583073 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.929625034 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.929873943 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.929932117 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.929976940 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.930893898 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.930908918 CEST	443	54961	108.138.7.18	192.168.2.5
Aug 28, 2024 09:28:21.930918932 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.930965900 CEST	54961	443	192.168.2.5	108.138.7.18
Aug 28, 2024 09:28:21.946733952 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:21.946822882 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:21.946958065 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:21.957056046 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.957122087 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:21.957170963 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.957981110 CEST	54975	443	192.168.2.5	34.195.65.55
Aug 28, 2024 09:28:21.957994938 CEST	443	54975	34.195.65.55	192.168.2.5
Aug 28, 2024 09:28:22.010776043 CEST	54921	443	192.168.2.5	13.107.246.64
Aug 28, 2024 09:28:22.010786057 CEST	443	54921	13.107.246.64	192.168.2.5
Aug 28, 2024 09:28:22.024581909 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.024801970 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.024813890 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.025875092 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.025933027 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.027122974 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.027189016 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.027267933 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.027276039 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.027313948 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.027328014 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.027334929 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.030543089 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.030589104 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.030689955 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.030734062 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.030791044 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.031356096 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.031364918 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.031402111 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.031413078 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.046736002 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.047103882 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.047112942 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.047477007 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.047878027 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.047888994 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.048141956 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.048204899 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.048655033 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.048718929 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.048888922 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.048896074 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.049074888 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.049139023 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.049410105 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.049479961 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.049595118 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.049604893 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.083242893 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.083579063 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.083597898 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.084764957 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.084825993 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.085324049 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.085392952 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.085525036 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.085531950 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.092638969 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.092909098 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.138936043 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.153640032 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.153906107 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.153918982 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.154767990 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.157845974 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.157937050 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.157960892 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.200499058 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.202601910 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.204412937 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.204493046 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.204547882 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.205665112 CEST	54981	443	192.168.2.5	54.90.52.195
Aug 28, 2024 09:28:22.205684900 CEST	443	54981	54.90.52.195	192.168.2.5
Aug 28, 2024 09:28:22.225013971 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.225085974 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.225159883 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.225420952 CEST	54971	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.225434065 CEST	443	54971	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.225781918 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.226454973 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.226466894 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.226859093 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.227312088 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.227394104 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.227437019 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.272505999 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.281044960 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.348453999 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.348541021 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.348596096 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.348848104 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.348871946 CEST	443	54972	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:22.348881960 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.348949909 CEST	54972	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:22.374272108 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.374423027 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.374475956 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.374619007 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.374631882 CEST	443	54978	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:22.374661922 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.374685049 CEST	54978	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:22.398680925 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:22.398709059 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:22.398771048 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:22.398996115 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:22.399009943 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:22.413721085 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.413790941 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.413853884 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.417135000 CEST	54979	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.417151928 CEST	443	54979	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.459881067 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.459913969 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:22.462827921 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.463340998 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.463354111 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:22.464598894 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:22.464615107 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:22.464736938 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:22.464849949 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:22.464865923 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:22.487685919 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.487759113 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.488465071 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.488545895 CEST	54980	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:22.488555908 CEST	443	54980	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:22.490861893 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.490873098 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:22.491055012 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.491275072 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:22.491286039 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.076411009 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.083769083 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.083784103 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.084126949 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.111707926 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.129801035 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.151983023 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.181102037 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.187989950 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.218257904 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.218270063 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.218765020 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.221618891 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.221723080 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.223473072 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.225158930 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.225195885 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:23.225528955 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.225539923 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.225559950 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.225763083 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.225769043 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.226665020 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.226696968 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.226723909 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:23.226748943 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.226866961 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.226886034 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.227018118 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.228152037 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.228223085 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.228524923 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.228539944 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:23.228812933 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.229067087 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.230055094 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:23.230062008 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.230067968 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:23.230134010 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.230451107 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.230772972 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.230842113 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.230849981 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.231426001 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.231434107 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.252438068 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.252470970 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.252609968 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.252640963 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.252674103 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.252805948 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.253036976 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.253057957 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.253307104 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.253321886 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.259147882 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.259172916 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.259248972 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.259614944 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.259629011 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.272505045 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.276493073 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.280195951 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.280358076 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.300631046 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:23.300647974 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:23.300925016 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:23.300925016 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:23.300947905 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:23.337306023 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.337385893 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.337882996 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.337893963 CEST	443	54991	23.23.91.66	192.168.2.5
Aug 28, 2024 09:28:23.337944984 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.337944984 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.338032961 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.338059902 CEST	54991	443	192.168.2.5	23.23.91.66
Aug 28, 2024 09:28:23.338115931 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.338181973 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.339206934 CEST	54985	443	192.168.2.5	34.238.211.197
Aug 28, 2024 09:28:23.339216948 CEST	443	54985	34.238.211.197	192.168.2.5
Aug 28, 2024 09:28:23.408230066 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.408313036 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.409734011 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.409854889 CEST	54990	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.409862995 CEST	443	54990	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.412350893 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.412456989 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.413073063 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.413444996 CEST	54993	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:23.413458109 CEST	443	54993	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:23.723097086 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.723274946 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.723289013 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.724884987 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.724951982 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.725280046 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.725351095 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.725419998 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.725434065 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.725452900 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.736917973 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.737118006 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.737128019 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.738153934 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.738219976 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.738641977 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.738704920 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.738837957 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.738845110 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.765695095 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.765703917 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.781816959 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.833504915 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.833636999 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.833686113 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.833997965 CEST	54998	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.834012985 CEST	443	54998	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.853511095 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.853697062 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.853756905 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.853950024 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.853961945 CEST	443	54999	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:23.853984118 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.854002953 CEST	54999	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:23.869740009 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.869981050 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.869995117 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.870354891 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.870717049 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.870779037 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:23.870904922 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:23.912502050 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:24.041594982 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.082636118 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.090878010 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.090883970 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.092058897 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.092119932 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.093321085 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.093386889 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.093626976 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.093635082 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.137293100 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.377269983 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:24.377363920 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:24.377441883 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:24.382616997 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.383347988 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.399240971 CEST	54997	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:24.399274111 CEST	443	54997	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:24.400618076 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.400624990 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.400836945 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.400849104 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.401705027 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.401763916 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.401920080 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.401969910 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.404309988 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.404366970 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.410000086 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.410084009 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.410824060 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.410830021 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.460856915 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.460871935 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.460879087 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.510885954 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.586954117 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.587043047 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.587527037 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.587548971 CEST	443	54995	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.587564945 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.587564945 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.587804079 CEST	54995	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.645746946 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.688503981 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.695126057 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.695151091 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:24.700870991 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.701096058 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.701108932 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:24.834758043 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.834836006 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.834892988 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.836122990 CEST	54996	443	192.168.2.5	52.211.24.199
Aug 28, 2024 09:28:24.836137056 CEST	443	54996	52.211.24.199	192.168.2.5
Aug 28, 2024 09:28:24.838042021 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.838067055 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:24.838157892 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.838758945 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:24.838783979 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:24.954232931 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964677095 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964689970 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964705944 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964715004 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964720964 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964814901 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.964814901 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:24.964831114 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:24.964961052 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.047738075 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.047774076 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.047882080 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.047882080 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.047894955 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.051049948 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.052767992 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.052783966 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.052867889 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.052877903 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.054960966 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.135977983 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.136007071 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.136101961 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.136102915 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.136115074 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.136240005 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.136385918 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.136394978 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.137069941 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.138447046 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.138463974 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.138612986 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.138622046 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.138725042 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.141160965 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.141176939 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.141432047 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.141439915 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.141752958 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.191730976 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.191751003 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.191946983 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.191958904 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.195187092 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.226718903 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.226749897 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.226850986 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.226850986 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.226860046 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.226924896 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.227344990 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.227364063 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.227427006 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.227435112 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.227488995 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.227567911 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.227581024 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.228009939 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.228812933 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.228827953 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.228957891 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.228970051 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.229046106 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.231082916 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.231098890 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.231203079 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.231203079 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.231213093 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.231282949 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.231646061 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.231662989 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.231822014 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.231829882 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.232144117 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.233902931 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.233918905 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.233961105 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.233989000 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.233997107 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.234033108 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.238538980 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.238563061 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.238677979 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.238677979 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.238692045 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.278909922 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.316729069 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.316759109 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.316836119 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.316845894 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.316890001 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.317174911 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.317209959 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.317238092 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.317245960 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.317569017 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.317919016 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.317935944 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.318233967 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.318242073 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.318284988 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.318337917 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.318353891 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.318404913 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.318413019 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.318468094 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.319717884 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.319734097 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.319840908 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.319849014 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.319972038 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.322235107 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.322257042 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.322297096 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.322340012 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.322349072 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.322371960 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.322375059 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.322467089 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.323189974 CEST	55002	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.323203087 CEST	443	55002	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.345659971 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.348875046 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.348896980 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.349275112 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.349771023 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.349771023 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.349786043 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.349832058 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.352863073 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:25.352885962 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:25.356018066 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:25.356374025 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:25.356400013 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:25.404004097 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.443667889 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.443712950 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.444046021 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.444444895 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:25.444457054 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:25.473633051 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.528922081 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.536524057 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.536530972 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.537372112 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.537697077 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.537770987 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.537858009 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.584503889 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.622971058 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.623051882 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.623131990 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.647213936 CEST	55009	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.647237062 CEST	443	55009	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.729870081 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.729898930 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:25.729985952 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.741328001 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.741338015 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:25.753148079 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.753251076 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.753304005 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.761868954 CEST	55011	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:25.761883974 CEST	443	55011	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:25.832732916 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.832751989 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:25.832804918 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.833046913 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:25.833060026 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.078593969 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.078849077 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.078862906 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.080065012 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.080125093 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.080645084 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.080730915 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.080899000 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.080909014 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.124979973 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.162962914 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.163271904 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.163296938 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.163750887 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.164295912 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.164360046 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.164657116 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.208517075 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.353863955 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.354182005 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.354187965 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.354463100 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.354480982 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.354960918 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.355017900 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.355262995 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.364429951 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364439964 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364458084 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364460945 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364479065 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364497900 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.364510059 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.364552021 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.364569902 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.396500111 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.444247961 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.444283962 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.444317102 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.444327116 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.444381952 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.447556973 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.447801113 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.447809935 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.448156118 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.448496103 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.448559999 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.448648930 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.451797962 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.451816082 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.451858044 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.451865911 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.451900959 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.451925039 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.492499113 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.529706955 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.529728889 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.529772043 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.529782057 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.529817104 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.530021906 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.530819893 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.530883074 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.530889988 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.530895948 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.530930996 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.533056974 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.533077955 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.533103943 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.533113956 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.533140898 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.542745113 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.542762995 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.542798996 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.542812109 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.542855978 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.591182947 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.605705023 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:26.605741024 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:26.605792046 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:26.606081009 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:26.606092930 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:26.615326881 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.615408897 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.615915060 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.616363049 CEST	55017	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.616378069 CEST	443	55017	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.616827965 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.616871119 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.616908073 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.616915941 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.616950989 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.617022991 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.617384911 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.617414951 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.617435932 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.617445946 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.617466927 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.618037939 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.618056059 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.618088007 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.618100882 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.618123055 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.619189024 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.619204998 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.619245052 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.619255066 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.619278908 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.621748924 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.621764898 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.621896982 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.621906042 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.625278950 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.625307083 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.625339031 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.625349045 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.625399113 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.632312059 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.632347107 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.632369041 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.632375956 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.632416964 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.671616077 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.671649933 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.671717882 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.671726942 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.671752930 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.704490900 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.704586983 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.704641104 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.705028057 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705060005 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705090046 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.705101013 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705147028 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.705586910 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705605984 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705636024 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.705646038 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.705671072 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.706244946 CEST	55023	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:26.706252098 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.706254959 CEST	443	55023	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:26.706315994 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.706321001 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.706334114 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.706377983 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.707122087 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707139969 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707207918 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.707216024 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707814932 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707854033 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707876921 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.707884073 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.707920074 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.713057041 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.713083982 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.713130951 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.713139057 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.713171959 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.713181019 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.713222980 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.713620901 CEST	55013	443	192.168.2.5	18.66.112.34
Aug 28, 2024 09:28:26.713629961 CEST	443	55013	18.66.112.34	192.168.2.5
Aug 28, 2024 09:28:26.895010948 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.895029068 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.895051956 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.895113945 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.895124912 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.895138979 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.895344019 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.989768028 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.989794970 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.989835978 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.989854097 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.989922047 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.989922047 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.995263100 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.995316982 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.995325089 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.995364904 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.995395899 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:26.995457888 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.995780945 CEST	55014	443	192.168.2.5	18.66.112.103
Aug 28, 2024 09:28:26.995793104 CEST	443	55014	18.66.112.103	192.168.2.5
Aug 28, 2024 09:28:27.243504047 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.243829966 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.243844986 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.244232893 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.244759083 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.244854927 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.244903088 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.288506985 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.298969030 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.525933027 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.526326895 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.526439905 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.527264118 CEST	55028	443	192.168.2.5	142.250.184.226
Aug 28, 2024 09:28:27.527280092 CEST	443	55028	142.250.184.226	192.168.2.5
Aug 28, 2024 09:28:27.538172007 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:27.538203001 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:27.538666010 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:27.538666010 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:27.538697004 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.173873901 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.220885992 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.227714062 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.227724075 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.228919983 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.229535103 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.312261105 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.312395096 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.319897890 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.319914103 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.360722065 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.484636068 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:28.484658003 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:28.484719038 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:28.485511065 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:28.485522032 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:28.510222912 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.510323048 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:28.510376930 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.608180046 CEST	55037	443	192.168.2.5	142.250.181.226
Aug 28, 2024 09:28:28.608206987 CEST	443	55037	142.250.181.226	192.168.2.5
Aug 28, 2024 09:28:29.083147049 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.137609959 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.141809940 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.141818047 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.143261909 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.143271923 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.143321037 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.146522045 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.146657944 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.147118092 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.147131920 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.200891018 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.267893076 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.267970085 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.268013000 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.408286095 CEST	55043	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.408304930 CEST	443	55043	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.437473059 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.437510014 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:29.437585115 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.439946890 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.439963102 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:29.484674931 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.484700918 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:29.484869003 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.486624002 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:29.486637115 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:29.557558060 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.557584047 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.557735920 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.558367014 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:29.558379889 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:29.815681934 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:29.815745115 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:29.816173077 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:30.104881048 CEST	54947	443	192.168.2.5	172.217.16.132
Aug 28, 2024 09:28:30.104892015 CEST	443	54947	172.217.16.132	192.168.2.5
Aug 28, 2024 09:28:30.106206894 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.106244087 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.106385946 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.106745005 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.106775999 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.127724886 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.127741098 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.127816916 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.132220030 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.132234097 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.255388021 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.255654097 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.262500048 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.263340950 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.263355017 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.263626099 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.264293909 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.264308929 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.264708996 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.265798092 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.265868902 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.266376972 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.268284082 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.268455982 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.268461943 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.269309044 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.300714016 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.300786018 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.304879904 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.304886103 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.305155039 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.312500954 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.312510014 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.320900917 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.332380056 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.372503042 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.395025969 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.395107031 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.395278931 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.412729025 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.412736893 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.413311005 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.413316011 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.419615984 CEST	55049	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:30.419632912 CEST	443	55049	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:30.448373079 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.448458910 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.448518991 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.449182034 CEST	55047	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.449192047 CEST	443	55047	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.600979090 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.602345943 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.602480888 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.602535009 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.602660894 CEST	55048	443	192.168.2.5	40.115.3.253
Aug 28, 2024 09:28:30.602678061 CEST	443	55048	40.115.3.253	192.168.2.5
Aug 28, 2024 09:28:30.607988119 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.608002901 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.608392000 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.611566067 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.628634930 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.628743887 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.629126072 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.629134893 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.629580975 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.629584074 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.629584074 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.629615068 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.630217075 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.630284071 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.630336046 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.676501036 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.684711933 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.748096943 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.748233080 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.748317003 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.753961086 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.754046917 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.754101038 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.760751009 CEST	55053	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.760766029 CEST	443	55053	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:30.762962103 CEST	55051	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:30.762969017 CEST	443	55051	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:31.548088074 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:31.548130989 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:31.548240900 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:31.548437119 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:31.548456907 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:31.833667994 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:31.833697081 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:31.833756924 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:31.834148884 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:31.834165096 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.154503107 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.189697981 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.189708948 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.190130949 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.190690994 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.190761089 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.191385031 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.226207972 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:32.226221085 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:32.226290941 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:32.227081060 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:32.227093935 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:32.232505083 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.292872906 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.303062916 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.303072929 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.304218054 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.304290056 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.305037022 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.305104017 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.306030989 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.306039095 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.339828968 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:32.339867115 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.339934111 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:32.340550900 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:32.340559006 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.342660904 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.342689037 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.342852116 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.343825102 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.343837976 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.356808901 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.356817007 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.357110977 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.357666969 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.357678890 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.428632975 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.428699017 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.431313992 CEST	55057	443	192.168.2.5	104.18.36.155
Aug 28, 2024 09:28:32.431325912 CEST	443	55057	104.18.36.155	192.168.2.5
Aug 28, 2024 09:28:32.444868088 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.444946051 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.444957972 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.444969893 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.445034027 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.450145006 CEST	55054	443	192.168.2.5	185.89.210.90
Aug 28, 2024 09:28:32.450160027 CEST	443	55054	185.89.210.90	192.168.2.5
Aug 28, 2024 09:28:32.699177980 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:32.723521948 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:32.723530054 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:32.725435972 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:32.725517988 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:32.816639900 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.816962004 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.816972971 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.817342997 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.817998886 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.818064928 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.818154097 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.825625896 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.825843096 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.825854063 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.826186895 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.826872110 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.826935053 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.827085972 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.864506006 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.872504950 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.936295033 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.936398029 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.936696053 CEST	55063	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.936706066 CEST	443	55063	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.940572977 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.940880060 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.940923929 CEST	443	55064	54.208.196.179	192.168.2.5
Aug 28, 2024 09:28:32.940988064 CEST	55064	443	192.168.2.5	54.208.196.179
Aug 28, 2024 09:28:32.953571081 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.953845978 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:32.953864098 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.954248905 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.954603910 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:32.954683065 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:32.954803944 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:33.000502110 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:33.166126013 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.166332960 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.167490005 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.167506933 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.194487095 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.194511890 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.194576979 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.194767952 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.194782019 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.203464985 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.203485966 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.203615904 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.204159021 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.204169989 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.210917950 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:33.211047888 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:33.211096048 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:33.211523056 CEST	55062	443	192.168.2.5	52.30.188.204
Aug 28, 2024 09:28:33.211538076 CEST	443	55062	52.30.188.204	192.168.2.5
Aug 28, 2024 09:28:33.274252892 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.521043062 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.521117926 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.521236897 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.525274992 CEST	55061	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.525289059 CEST	443	55061	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.527714014 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.527748108 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.527892113 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.528141975 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:33.528156042 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:33.799848080 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.800112009 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.800126076 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.801146030 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.801212072 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.803220987 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.803296089 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.803636074 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.803644896 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:33.857238054 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:33.984333992 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.984581947 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.984599113 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.985882998 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.985939026 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.986634016 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:33.986696005 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:33.986793041 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:34.012120008 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.012430906 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.012447119 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.012923002 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.013451099 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.013537884 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.013802052 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.031086922 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.031202078 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.031311989 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.032505989 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:34.060503006 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.116923094 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:34.116942883 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:34.129426003 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.130534887 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.130636930 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.138335943 CEST	55065	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.138361931 CEST	443	55065	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.139760971 CEST	55067	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.139780045 CEST	443	55067	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.157330036 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:34.157409906 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:34.157466888 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:34.170943975 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.170977116 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.171036959 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.171459913 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.171489000 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.171561003 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.171804905 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.171840906 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.171906948 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.172167063 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.172189951 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.172493935 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.172506094 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.174191952 CEST	55066	443	192.168.2.5	185.89.211.116
Aug 28, 2024 09:28:34.174204111 CEST	443	55066	185.89.211.116	192.168.2.5
Aug 28, 2024 09:28:34.174783945 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.174798965 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.632812023 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.657130957 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.743092060 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.743115902 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.743432045 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.743460894 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.744636059 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.744649887 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.744676113 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.744684935 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.744704008 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.744752884 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.747111082 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.747191906 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.747770071 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.747833967 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.748513937 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.748522043 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.748563051 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.748573065 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.798091888 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.853039980 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.856926918 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.862169981 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.862178087 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.863281965 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.863295078 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.863341093 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.865015030 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.865103006 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.865541935 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:34.865550995 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:34.866585970 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.866648912 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.868767023 CEST	55073	443	192.168.2.5	151.101.193.44
Aug 28, 2024 09:28:34.868787050 CEST	443	55073	151.101.193.44	192.168.2.5
Aug 28, 2024 09:28:34.870207071 CEST	55074	443	192.168.2.5	35.244.159.8
Aug 28, 2024 09:28:34.870223045 CEST	443	55074	35.244.159.8	192.168.2.5
Aug 28, 2024 09:28:34.883346081 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:34.883385897 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:34.883634090 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:34.883873940 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:34.883884907 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:34.888597965 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:34.888621092 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:34.888834953 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:34.889895916 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:34.889903069 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:34.908276081 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:34.908298016 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:34.908448935 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:34.921036005 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:34.921046972 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.015831947 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:35.038930893 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:35.039017916 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:35.039057970 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:35.107665062 CEST	55072	443	192.168.2.5	185.64.191.210
Aug 28, 2024 09:28:35.107676983 CEST	443	55072	185.64.191.210	192.168.2.5
Aug 28, 2024 09:28:35.116769075 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:35.116836071 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:35.116878986 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:35.118232012 CEST	49854	443	192.168.2.5	152.199.21.175
Aug 28, 2024 09:28:35.118244886 CEST	443	49854	152.199.21.175	192.168.2.5
Aug 28, 2024 09:28:35.341939926 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.350192070 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.350199938 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.351345062 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.351413965 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.356867075 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.356945992 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.357063055 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.400501966 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.454117060 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.454125881 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.471997976 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.472228050 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.473449945 CEST	55079	443	192.168.2.5	151.101.65.44
Aug 28, 2024 09:28:35.473464966 CEST	443	55079	151.101.65.44	192.168.2.5
Aug 28, 2024 09:28:35.528408051 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.528605938 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.528623104 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.529720068 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.529778004 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.530193090 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.530249119 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.530397892 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.530405045 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.599442005 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.600594997 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.600603104 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.602133989 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.602191925 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.604098082 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.604165077 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.604513884 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.604520082 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.656487942 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.713107109 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.713165998 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.713179111 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.713205099 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.713243961 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.714109898 CEST	55080	443	192.168.2.5	54.165.19.58
Aug 28, 2024 09:28:35.714133978 CEST	443	55080	54.165.19.58	192.168.2.5
Aug 28, 2024 09:28:35.716029882 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:35.716072083 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:35.716128111 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:35.716341972 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:35.716357946 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:35.916269064 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.916379929 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.916390896 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.917114973 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:35.917165995 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.982667923 CEST	55078	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:35.982705116 CEST	443	55078	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.009438992 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.009478092 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.009555101 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.009763002 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.009779930 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.554053068 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.554342031 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.554354906 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.554801941 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.555285931 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.555285931 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.555300951 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.555361986 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.607990980 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.658835888 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.659118891 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.659136057 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.659461021 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.660164118 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.660234928 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.660610914 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:36.708508015 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:36.814316034 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.814413071 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.814510107 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.815342903 CEST	55086	443	192.168.2.5	63.33.187.142
Aug 28, 2024 09:28:36.815367937 CEST	443	55086	63.33.187.142	192.168.2.5
Aug 28, 2024 09:28:36.818912029 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:36.818942070 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:36.819063902 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:36.819394112 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:36.819411993 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.045830011 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:37.045907974 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:37.045959949 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:37.046051025 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:37.046442986 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:37.047367096 CEST	55088	443	192.168.2.5	157.240.252.35
Aug 28, 2024 09:28:37.047384977 CEST	443	55088	157.240.252.35	192.168.2.5
Aug 28, 2024 09:28:37.434178114 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.434474945 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.434485912 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.434820890 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.435313940 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.435313940 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.435333014 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.435379982 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.480254889 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.695189953 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.695282936 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:37.695364952 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.696891069 CEST	55091	443	192.168.2.5	108.129.9.96
Aug 28, 2024 09:28:37.696906090 CEST	443	55091	108.129.9.96	192.168.2.5
Aug 28, 2024 09:28:40.051711082 CEST	54675	443	192.168.2.5	35.186.249.72
Aug 28, 2024 09:28:40.051723003 CEST	443	54675	35.186.249.72	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 09:27:14.637332916 CEST	53	62906	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:14.830120087 CEST	53	57060	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:15.669460058 CEST	50113	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:15.669768095 CEST	56365	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:15.886684895 CEST	53	50113	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:15.886703014 CEST	53	56365	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:16.233078003 CEST	53	63410	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:19.010528088 CEST	65260	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:19.014038086 CEST	50892	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:19.018302917 CEST	53	65260	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:19.021362066 CEST	53	50892	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:20.685965061 CEST	61285	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.686624050 CEST	60316	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.691015959 CEST	50576	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.691257954 CEST	60177	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.696973085 CEST	52351	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.697117090 CEST	57095	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.707501888 CEST	52405	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.707855940 CEST	49549	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.714216948 CEST	53	52405	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:20.715084076 CEST	53	49549	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:20.719352961 CEST	57572	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:20.719722033 CEST	57627	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:24.615402937 CEST	61730	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:24.615607977 CEST	53063	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:24.790113926 CEST	51111	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:24.790267944 CEST	63740	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:25.803625107 CEST	61353	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:25.803766012 CEST	52125	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:26.321736097 CEST	54851	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:26.321883917 CEST	61165	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:29.111079931 CEST	61052	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:29.111376047 CEST	53186	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:29.303714037 CEST	53	53186	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:29.303762913 CEST	53	61052	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:29.409692049 CEST	53	50442	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:29.980546951 CEST	50233	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:29.981106997 CEST	58181	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:31.129095078 CEST	51464	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:31.129930973 CEST	61925	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:31.137166023 CEST	53	51464	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:31.137415886 CEST	53	61925	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:32.832026005 CEST	61872	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:32.909255028 CEST	56082	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:33.026261091 CEST	65021	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:33.028702021 CEST	64500	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:33.034940958 CEST	53	65021	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:33.035990953 CEST	53	64500	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:33.058209896 CEST	53	56704	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:33.059637070 CEST	53	60367	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:33.073015928 CEST	53	51950	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:34.147746086 CEST	56048	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:34.147882938 CEST	52102	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:34.149571896 CEST	64401	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:34.149698019 CEST	49743	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:34.155069113 CEST	53	52102	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:34.155081987 CEST	53	56048	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:34.376131058 CEST	53	51965	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:36.392889023 CEST	64913	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:36.393023968 CEST	60036	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:36.399372101 CEST	53	64913	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:36.401230097 CEST	53	60036	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:40.742454052 CEST	52246	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:40.742454052 CEST	59617	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:44.449513912 CEST	60299	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:44.449673891 CEST	65451	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:49.845485926 CEST	53	55714	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:53.818490982 CEST	53	54435	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:53.931138992 CEST	53	54137	162.159.36.2	192.168.2.5
Aug 28, 2024 09:27:54.349823952 CEST	64468	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.350298882 CEST	59273	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.352837086 CEST	53	62026	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.353713036 CEST	53	64371	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.366740942 CEST	53	54530	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.368577957 CEST	61387	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.368997097 CEST	52810	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.371350050 CEST	50877	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.372080088 CEST	58849	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.376914024 CEST	53	59273	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.379699945 CEST	53	58849	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.391654015 CEST	53703	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.392416000 CEST	57459	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.399383068 CEST	53	53703	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.400311947 CEST	53	57459	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.403275013 CEST	57311	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.404592037 CEST	60268	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.442722082 CEST	60391	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.444541931 CEST	50876	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.446971893 CEST	59003	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.447348118 CEST	59768	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.461380005 CEST	53	60391	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.462462902 CEST	53	50876	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.463730097 CEST	53	59768	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.463949919 CEST	53	59003	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.477215052 CEST	56810	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.477406979 CEST	65156	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:27:54.508749008 CEST	53	56971	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.511238098 CEST	53	58251	1.1.1.1	192.168.2.5
Aug 28, 2024 09:27:54.569552898 CEST	53	59178	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:09.685199022 CEST	55100	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:09.685874939 CEST	56334	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:09.693046093 CEST	53	55100	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:09.693233013 CEST	53	56334	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:09.700263977 CEST	53	49453	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.539607048 CEST	51110	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.539880991 CEST	62349	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.546399117 CEST	53	51110	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.546672106 CEST	53	62349	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.613396883 CEST	62029	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.613780022 CEST	60768	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.614407063 CEST	65435	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.614733934 CEST	49512	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.615838051 CEST	55117	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.615838051 CEST	59356	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.620589972 CEST	53	60768	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.625164986 CEST	53	55117	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.625216961 CEST	53	59356	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.634036064 CEST	53	49512	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.636435986 CEST	53	65435	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.672971964 CEST	61332	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.673182964 CEST	60205	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:10.679903030 CEST	53	60205	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.679949999 CEST	53	61332	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:10.974103928 CEST	53	51887	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.460891962 CEST	61926	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.461477041 CEST	57665	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.465668917 CEST	49248	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.468904018 CEST	64225	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.468930960 CEST	53	57665	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.475482941 CEST	53	49248	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.475809097 CEST	53	64225	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.530421972 CEST	64204	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.530608892 CEST	56696	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.531816959 CEST	61427	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.532221079 CEST	56224	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.538847923 CEST	53	56224	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.538990974 CEST	53	61427	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.558680058 CEST	62102	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.558926105 CEST	53213	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.566050053 CEST	53	62102	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.567521095 CEST	53	53213	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.612442970 CEST	50264	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.612647057 CEST	63053	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.619174004 CEST	53	63053	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.717192888 CEST	62377	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.717458963 CEST	50058	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.724108934 CEST	53	50058	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.724561930 CEST	53	62377	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.770916939 CEST	51403	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.771157026 CEST	62468	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.831538916 CEST	53548	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.831809044 CEST	63764	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.838464975 CEST	53	53548	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.838476896 CEST	53	63764	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:11.942619085 CEST	58289	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:11.942811966 CEST	61149	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.050019026 CEST	56399	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.050163984 CEST	61038	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.067296982 CEST	53	61149	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.170348883 CEST	62116	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.170488119 CEST	59095	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.176959991 CEST	53	62116	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.177432060 CEST	53	59095	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.199026108 CEST	59634	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.199445963 CEST	57601	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.206094980 CEST	53	57601	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.286617994 CEST	54539	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.286819935 CEST	58981	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.293292999 CEST	53	54539	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.293313980 CEST	53	58981	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.397152901 CEST	51233	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.397573948 CEST	54645	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.404026031 CEST	53	51233	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.404047966 CEST	53	54645	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.417907000 CEST	49920	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.418075085 CEST	57368	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.462151051 CEST	57882	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.462311983 CEST	61301	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.468466043 CEST	53	57882	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.468780994 CEST	53	61301	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.721735954 CEST	62787	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.721735954 CEST	56315	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.729942083 CEST	53	56315	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.788541079 CEST	54346	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.788541079 CEST	59767	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.795074940 CEST	53	59767	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.795249939 CEST	53	54346	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.974548101 CEST	60374	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.974773884 CEST	63502	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:12.981076002 CEST	53	60374	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:12.981898069 CEST	53	63502	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:13.397443056 CEST	50833	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.398175001 CEST	63660	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.403871059 CEST	53	50833	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:13.404833078 CEST	53	63660	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:13.585268021 CEST	54899	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.585445881 CEST	54425	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.592293978 CEST	53	54425	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:13.688918114 CEST	63582	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.689234972 CEST	59834	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.909701109 CEST	59185	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.909845114 CEST	54301	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:13.924031973 CEST	53	59185	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:13.924056053 CEST	53	54301	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:14.322032928 CEST	53	59527	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:14.459152937 CEST	50761	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.459316969 CEST	58805	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.598584890 CEST	55989	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.598897934 CEST	63300	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.605556011 CEST	53	63300	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:14.606307030 CEST	53	55989	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:14.896255016 CEST	51985	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.896506071 CEST	60351	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:14.903103113 CEST	53	51985	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:14.903446913 CEST	53	60351	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:15.491621017 CEST	64067	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:15.491930008 CEST	50917	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:15.498074055 CEST	53	64067	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:15.500612020 CEST	53	50917	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:15.505724907 CEST	65528	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:15.505944014 CEST	63732	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:15.514436007 CEST	53	63732	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:16.304099083 CEST	54510	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.304464102 CEST	60139	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.307429075 CEST	50673	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.307631969 CEST	57513	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.311547995 CEST	53	54510	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:16.311912060 CEST	53	60139	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:16.488512039 CEST	51544	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.488641977 CEST	53534	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.492383957 CEST	57634	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.492542028 CEST	64527	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.523474932 CEST	57986	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.523736000 CEST	54511	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.531131983 CEST	53	57986	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:16.531569958 CEST	53	54511	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:16.973191023 CEST	54371	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.973351002 CEST	56833	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:16.979995012 CEST	53	56833	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:17.007755041 CEST	53	62652	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:17.093612909 CEST	59806	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:17.094027996 CEST	59681	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:17.897953987 CEST	57452	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:17.898123026 CEST	51096	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:18.042872906 CEST	54481	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:18.043056965 CEST	61287	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:18.050718069 CEST	53	61287	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:18.894905090 CEST	60663	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:18.895123959 CEST	63985	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:18.901812077 CEST	53	60663	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:18.901886940 CEST	53	63985	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:19.895077944 CEST	51999	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:19.895328999 CEST	55786	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:19.896756887 CEST	61955	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:19.897131920 CEST	49489	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:19.904243946 CEST	53	49489	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:19.904268026 CEST	53	51999	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:19.911803007 CEST	53	55786	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.275563955 CEST	64306	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.275995016 CEST	56362	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.284555912 CEST	53	56362	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.286413908 CEST	53	64306	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.293378115 CEST	60637	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.293540955 CEST	52993	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.303221941 CEST	53	60637	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.303509951 CEST	53	52993	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.745316982 CEST	59525	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.745488882 CEST	60849	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.755820036 CEST	53	60849	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.765369892 CEST	53	59525	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:20.898325920 CEST	56618	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:20.898487091 CEST	58820	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.137511015 CEST	57391	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.137670040 CEST	64013	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.172239065 CEST	57696	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.172528982 CEST	62090	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.179714918 CEST	53	62090	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.183166981 CEST	53	57696	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.273502111 CEST	56458	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.273791075 CEST	61299	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.282228947 CEST	53	61299	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.307445049 CEST	53443	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.307604074 CEST	49661	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.328327894 CEST	53	49661	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.328766108 CEST	53	53443	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.598723888 CEST	62225	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.598864079 CEST	52861	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:21.606148958 CEST	53	62225	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:21.606172085 CEST	53	52861	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:22.377710104 CEST	62910	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.377923012 CEST	62073	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.393095016 CEST	53	62910	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:22.398251057 CEST	53	62073	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:22.455718040 CEST	64992	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.455985069 CEST	52215	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.456510067 CEST	59351	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.456665039 CEST	61692	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.463906050 CEST	53	61692	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:22.464236021 CEST	53	59351	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:22.942608118 CEST	65124	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:22.942904949 CEST	49555	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.073668003 CEST	53	65124	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:23.073682070 CEST	53	49555	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:23.270677090 CEST	52999	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.270677090 CEST	62833	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.271904945 CEST	53938	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.272073030 CEST	49845	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.274115086 CEST	56367	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.274115086 CEST	56443	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.278779984 CEST	53	62833	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:23.286223888 CEST	53	56443	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:23.300079107 CEST	53	56367	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:23.693039894 CEST	64811	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.693380117 CEST	65429	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.895224094 CEST	57171	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.895389080 CEST	63731	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:23.903129101 CEST	53	63731	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:24.584737062 CEST	61804	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:24.586990118 CEST	61926	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:24.593760967 CEST	53	61926	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:25.336338997 CEST	54326	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:25.336771965 CEST	61780	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:25.345808983 CEST	53	61780	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:25.349442005 CEST	53	54326	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:26.825936079 CEST	53115	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:26.826170921 CEST	54881	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:26.833267927 CEST	53	54881	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:27.456820011 CEST	58763	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:27.456986904 CEST	59459	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:27.465756893 CEST	53	59459	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:27.530879974 CEST	49153	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:27.531095028 CEST	50509	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:27.537511110 CEST	53	49153	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:27.537693977 CEST	53	50509	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:28.475092888 CEST	54814	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:28.475260019 CEST	60354	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:28.481849909 CEST	53	54814	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:28.482274055 CEST	53	60354	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:29.052097082 CEST	57834	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:29.052685976 CEST	51884	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:29.077069044 CEST	53	51884	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:31.825692892 CEST	49821	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:31.826004982 CEST	64900	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:31.832474947 CEST	53	49821	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:31.832889080 CEST	53	64900	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:32.099205017 CEST	61610	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:32.099436998 CEST	61475	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:32.108378887 CEST	53	61475	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:32.216036081 CEST	59851	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:32.216372967 CEST	64567	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:32.223110914 CEST	53	64567	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:32.223238945 CEST	53	59851	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.185693979 CEST	60598	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.186268091 CEST	59049	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.187721014 CEST	60124	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.188304901 CEST	58847	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.192775965 CEST	53	60598	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.192935944 CEST	53	59049	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.194200993 CEST	53	60124	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.195041895 CEST	53	58847	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.195828915 CEST	61774	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.196084976 CEST	65004	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.197191954 CEST	63267	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.203042030 CEST	53	65004	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.203808069 CEST	53	63267	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:33.532557964 CEST	52936	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.532963991 CEST	55861	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:33.540210962 CEST	53	55861	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.143605947 CEST	51279	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.143826008 CEST	59214	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.146038055 CEST	62869	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.146212101 CEST	50131	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.146558046 CEST	63051	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.146699905 CEST	60954	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.152143002 CEST	53	51279	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.154141903 CEST	53	59214	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.154218912 CEST	53	62869	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.155090094 CEST	53	63051	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.155229092 CEST	53	50131	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.155653954 CEST	53	60954	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.875195980 CEST	52793	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.875436068 CEST	59818	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.880712032 CEST	58157	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.881120920 CEST	54071	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.881858110 CEST	53	52793	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.881964922 CEST	53	59818	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.887475014 CEST	53	58157	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.887717009 CEST	53	54071	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.900849104 CEST	53019	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.901206017 CEST	57189	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:34.907789946 CEST	53	53019	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:34.907833099 CEST	53	57189	1.1.1.1	192.168.2.5
Aug 28, 2024 09:28:37.988430977 CEST	50829	53	192.168.2.5	1.1.1.1
Aug 28, 2024 09:28:37.989664078 CEST	60024	53	192.168.2.5	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 28, 2024 09:27:54.376977921 CEST	192.168.2.5	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Aug 28, 2024 09:28:11.570791006 CEST	192.168.2.5	1.1.1.1	c2a4	(Port unreachable)	Destination Unreachable
Aug 28, 2024 09:28:16.512764931 CEST	192.168.2.5	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Aug 28, 2024 09:28:17.115914106 CEST	192.168.2.5	1.1.1.1	c278	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 09:27:15.669460058 CEST	192.168.2.5	1.1.1.1	0x69b5	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:15.669768095 CEST	192.168.2.5	1.1.1.1	0x3efc	Standard query (0)	aka.ms	65	IN (0x0001)	false
Aug 28, 2024 09:27:19.010528088 CEST	192.168.2.5	1.1.1.1	0x1e11	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:19.014038086 CEST	192.168.2.5	1.1.1.1	0x6772	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:20.685965061 CEST	192.168.2.5	1.1.1.1	0xe49d	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.686624050 CEST	192.168.2.5	1.1.1.1	0x8a05	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:20.691015959 CEST	192.168.2.5	1.1.1.1	0x4d91	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.691257954 CEST	192.168.2.5	1.1.1.1	0xa97	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:20.696973085 CEST	192.168.2.5	1.1.1.1	0x4428	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.697117090 CEST	192.168.2.5	1.1.1.1	0x3e82	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:20.707501888 CEST	192.168.2.5	1.1.1.1	0xd9ab	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.707855940 CEST	192.168.2.5	1.1.1.1	0xe363	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:20.719352961 CEST	192.168.2.5	1.1.1.1	0x588d	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.719722033 CEST	192.168.2.5	1.1.1.1	0x4c9a	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Aug 28, 2024 09:27:24.615402937 CEST	192.168.2.5	1.1.1.1	0x1409	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:24.615607977 CEST	192.168.2.5	1.1.1.1	0xbcce	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Aug 28, 2024 09:27:24.790113926 CEST	192.168.2.5	1.1.1.1	0x7607	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:24.790267944 CEST	192.168.2.5	1.1.1.1	0x9811	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:25.803625107 CEST	192.168.2.5	1.1.1.1	0x8aa5	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:25.803766012 CEST	192.168.2.5	1.1.1.1	0xf070	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:26.321736097 CEST	192.168.2.5	1.1.1.1	0x8622	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:26.321883917 CEST	192.168.2.5	1.1.1.1	0xcf75	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:29.111079931 CEST	192.168.2.5	1.1.1.1	0xb3ea	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:29.111376047 CEST	192.168.2.5	1.1.1.1	0xafff	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:29.980546951 CEST	192.168.2.5	1.1.1.1	0xda2c	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:29.981106997 CEST	192.168.2.5	1.1.1.1	0x507c	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:31.129095078 CEST	192.168.2.5	1.1.1.1	0x32ca	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:31.129930973 CEST	192.168.2.5	1.1.1.1	0xaf2b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:32.832026005 CEST	192.168.2.5	1.1.1.1	0xe202	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:32.909255028 CEST	192.168.2.5	1.1.1.1	0xe964	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Aug 28, 2024 09:27:33.026261091 CEST	192.168.2.5	1.1.1.1	0x2be7	Standard query (0)	microsoftwindows.112.2o7.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:33.028702021 CEST	192.168.2.5	1.1.1.1	0x360b	Standard query (0)	microsoftwindows.112.2o7.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:34.147746086 CEST	192.168.2.5	1.1.1.1	0x771d	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.147882938 CEST	192.168.2.5	1.1.1.1	0x1e3b	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:34.149571896 CEST	192.168.2.5	1.1.1.1	0x374	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.149698019 CEST	192.168.2.5	1.1.1.1	0x6e37	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:36.392889023 CEST	192.168.2.5	1.1.1.1	0xeba4	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:36.393023968 CEST	192.168.2.5	1.1.1.1	0x9b6a	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:40.742454052 CEST	192.168.2.5	1.1.1.1	0xdafa	Standard query (0)	amp.azure.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:40.742454052 CEST	192.168.2.5	1.1.1.1	0xa91d	Standard query (0)	amp.azure.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:44.449513912 CEST	192.168.2.5	1.1.1.1	0x721f	Standard query (0)	amp.azure.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:44.449673891 CEST	192.168.2.5	1.1.1.1	0xe864	Standard query (0)	amp.azure.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.349823952 CEST	192.168.2.5	1.1.1.1	0x5e71	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.350298882 CEST	192.168.2.5	1.1.1.1	0x1149	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.368577957 CEST	192.168.2.5	1.1.1.1	0xac57	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.368997097 CEST	192.168.2.5	1.1.1.1	0xc7f2	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.371350050 CEST	192.168.2.5	1.1.1.1	0x8d85	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.372080088 CEST	192.168.2.5	1.1.1.1	0xa4da	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.391654015 CEST	192.168.2.5	1.1.1.1	0xe6e7	Standard query (0)	publisher.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.392416000 CEST	192.168.2.5	1.1.1.1	0x6312	Standard query (0)	publisher.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.403275013 CEST	192.168.2.5	1.1.1.1	0x6cfa	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.404592037 CEST	192.168.2.5	1.1.1.1	0x4544	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.442722082 CEST	192.168.2.5	1.1.1.1	0x3327	Standard query (0)	d.impactradius-event.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.444541931 CEST	192.168.2.5	1.1.1.1	0x7134	Standard query (0)	d.impactradius-event.com	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.446971893 CEST	192.168.2.5	1.1.1.1	0x3304	Standard query (0)	cdnssl.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.447348118 CEST	192.168.2.5	1.1.1.1	0x283e	Standard query (0)	cdnssl.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:27:54.477215052 CEST	192.168.2.5	1.1.1.1	0xf9b6	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.477406979 CEST	192.168.2.5	1.1.1.1	0x8c4	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:09.685199022 CEST	192.168.2.5	1.1.1.1	0x82af	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.685874939 CEST	192.168.2.5	1.1.1.1	0xd829	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:10.539607048 CEST	192.168.2.5	1.1.1.1	0x53ab	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.539880991 CEST	192.168.2.5	1.1.1.1	0x80d2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:10.613396883 CEST	192.168.2.5	1.1.1.1	0x2b26	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.613780022 CEST	192.168.2.5	1.1.1.1	0x2029	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:10.614407063 CEST	192.168.2.5	1.1.1.1	0x1873	Standard query (0)	mscom.demdex.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.614733934 CEST	192.168.2.5	1.1.1.1	0x55e9	Standard query (0)	mscom.demdex.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:10.615838051 CEST	192.168.2.5	1.1.1.1	0xde36	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:10.615838051 CEST	192.168.2.5	1.1.1.1	0xd8b2	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.672971964 CEST	192.168.2.5	1.1.1.1	0xc352	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.673182964 CEST	192.168.2.5	1.1.1.1	0x7229	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.460891962 CEST	192.168.2.5	1.1.1.1	0xe79b	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.461477041 CEST	192.168.2.5	1.1.1.1	0xd3c3	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.465668917 CEST	192.168.2.5	1.1.1.1	0x1740	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.468904018 CEST	192.168.2.5	1.1.1.1	0xcb94	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.530421972 CEST	192.168.2.5	1.1.1.1	0x45b3	Standard query (0)	ats.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.530608892 CEST	192.168.2.5	1.1.1.1	0xf8ba	Standard query (0)	ats.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.531816959 CEST	192.168.2.5	1.1.1.1	0x97b7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.532221079 CEST	192.168.2.5	1.1.1.1	0x589f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.558680058 CEST	192.168.2.5	1.1.1.1	0x5765	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.558926105 CEST	192.168.2.5	1.1.1.1	0x3a8e	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.612442970 CEST	192.168.2.5	1.1.1.1	0x65b4	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.612647057 CEST	192.168.2.5	1.1.1.1	0x55c4	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.717192888 CEST	192.168.2.5	1.1.1.1	0x9d97	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.717458963 CEST	192.168.2.5	1.1.1.1	0x43c3	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.770916939 CEST	192.168.2.5	1.1.1.1	0x3dd3	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.771157026 CEST	192.168.2.5	1.1.1.1	0x45ed	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.831538916 CEST	192.168.2.5	1.1.1.1	0xfa6c	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.831809044 CEST	192.168.2.5	1.1.1.1	0x38b5	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:11.942619085 CEST	192.168.2.5	1.1.1.1	0x6f62	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.942811966 CEST	192.168.2.5	1.1.1.1	0x3473	Standard query (0)	rtd.tubemogul.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.050019026 CEST	192.168.2.5	1.1.1.1	0x7049	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.050163984 CEST	192.168.2.5	1.1.1.1	0x25c4	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.170348883 CEST	192.168.2.5	1.1.1.1	0x208d	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.170488119 CEST	192.168.2.5	1.1.1.1	0xab17	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.199026108 CEST	192.168.2.5	1.1.1.1	0x9e18	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.199445963 CEST	192.168.2.5	1.1.1.1	0xb8f	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.286617994 CEST	192.168.2.5	1.1.1.1	0x4c97	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.286819935 CEST	192.168.2.5	1.1.1.1	0x23ba	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.397152901 CEST	192.168.2.5	1.1.1.1	0x68af	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.397573948 CEST	192.168.2.5	1.1.1.1	0x96db	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.417907000 CEST	192.168.2.5	1.1.1.1	0xbeab	Standard query (0)	ats.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.418075085 CEST	192.168.2.5	1.1.1.1	0xa039	Standard query (0)	ats.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.462151051 CEST	192.168.2.5	1.1.1.1	0x57c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.462311983 CEST	192.168.2.5	1.1.1.1	0xc466	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.721735954 CEST	192.168.2.5	1.1.1.1	0x3f2e	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.721735954 CEST	192.168.2.5	1.1.1.1	0xe8d1	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.788541079 CEST	192.168.2.5	1.1.1.1	0x381e	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.788541079 CEST	192.168.2.5	1.1.1.1	0xb19c	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:12.974548101 CEST	192.168.2.5	1.1.1.1	0xa8fc	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.974773884 CEST	192.168.2.5	1.1.1.1	0x7929	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:13.397443056 CEST	192.168.2.5	1.1.1.1	0x98b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.398175001 CEST	192.168.2.5	1.1.1.1	0x9439	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:13.585268021 CEST	192.168.2.5	1.1.1.1	0x5085	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.585445881 CEST	192.168.2.5	1.1.1.1	0x310	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:13.688918114 CEST	192.168.2.5	1.1.1.1	0xfc71	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.689234972 CEST	192.168.2.5	1.1.1.1	0x8d7b	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:13.909701109 CEST	192.168.2.5	1.1.1.1	0x7306	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.909845114 CEST	192.168.2.5	1.1.1.1	0x8d0	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:14.459152937 CEST	192.168.2.5	1.1.1.1	0x1049	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.459316969 CEST	192.168.2.5	1.1.1.1	0xe935	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Aug 28, 2024 09:28:14.598584890 CEST	192.168.2.5	1.1.1.1	0x39da	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.598897934 CEST	192.168.2.5	1.1.1.1	0xe897	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:14.896255016 CEST	192.168.2.5	1.1.1.1	0x38cf	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.896506071 CEST	192.168.2.5	1.1.1.1	0x83bd	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:15.491621017 CEST	192.168.2.5	1.1.1.1	0x799f	Standard query (0)	publisher.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:15.491930008 CEST	192.168.2.5	1.1.1.1	0xb9e1	Standard query (0)	publisher.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:15.505724907 CEST	192.168.2.5	1.1.1.1	0x5522	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:15.505944014 CEST	192.168.2.5	1.1.1.1	0x6b53	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.304099083 CEST	192.168.2.5	1.1.1.1	0x7128	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.304464102 CEST	192.168.2.5	1.1.1.1	0x4500	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.307429075 CEST	192.168.2.5	1.1.1.1	0x70b6	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.307631969 CEST	192.168.2.5	1.1.1.1	0x9f0c	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.488512039 CEST	192.168.2.5	1.1.1.1	0x9d1b	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.488641977 CEST	192.168.2.5	1.1.1.1	0x5c5e	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.492383957 CEST	192.168.2.5	1.1.1.1	0x74c4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.492542028 CEST	192.168.2.5	1.1.1.1	0x1b44	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.523474932 CEST	192.168.2.5	1.1.1.1	0xaf74	Standard query (0)	cdnssl.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.523736000 CEST	192.168.2.5	1.1.1.1	0x69da	Standard query (0)	cdnssl.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:16.973191023 CEST	192.168.2.5	1.1.1.1	0x11fe	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.973351002 CEST	192.168.2.5	1.1.1.1	0x8258	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:17.093612909 CEST	192.168.2.5	1.1.1.1	0xce21	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:17.094027996 CEST	192.168.2.5	1.1.1.1	0x6161	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:17.897953987 CEST	192.168.2.5	1.1.1.1	0x3ca	Standard query (0)	ds.reson8.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:17.898123026 CEST	192.168.2.5	1.1.1.1	0xfc08	Standard query (0)	ds.reson8.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:18.042872906 CEST	192.168.2.5	1.1.1.1	0x7ae5	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:18.043056965 CEST	192.168.2.5	1.1.1.1	0xac05	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:18.894905090 CEST	192.168.2.5	1.1.1.1	0xc57b	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:18.895123959 CEST	192.168.2.5	1.1.1.1	0x317f	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:19.895077944 CEST	192.168.2.5	1.1.1.1	0xddce	Standard query (0)	dmpsync.3lift.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:19.895328999 CEST	192.168.2.5	1.1.1.1	0xf55d	Standard query (0)	dmpsync.3lift.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:19.896756887 CEST	192.168.2.5	1.1.1.1	0x5457	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:19.897131920 CEST	192.168.2.5	1.1.1.1	0x944b	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:20.275563955 CEST	192.168.2.5	1.1.1.1	0xa7b3	Standard query (0)	q-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.275995016 CEST	192.168.2.5	1.1.1.1	0x1ef3	Standard query (0)	q-aus1.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:20.293378115 CEST	192.168.2.5	1.1.1.1	0xd49d	Standard query (0)	c.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.293540955 CEST	192.168.2.5	1.1.1.1	0xbceb	Standard query (0)	c.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:20.745316982 CEST	192.168.2.5	1.1.1.1	0x80b2	Standard query (0)	srm.bf.contentsquare.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.745488882 CEST	192.168.2.5	1.1.1.1	0xcb5e	Standard query (0)	srm.bf.contentsquare.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:20.898325920 CEST	192.168.2.5	1.1.1.1	0x6e4	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.898487091 CEST	192.168.2.5	1.1.1.1	0xfcbb	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:21.137511015 CEST	192.168.2.5	1.1.1.1	0x6b52	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.137670040 CEST	192.168.2.5	1.1.1.1	0x139b	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:21.172239065 CEST	192.168.2.5	1.1.1.1	0x6b6a	Standard query (0)	q-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.172528982 CEST	192.168.2.5	1.1.1.1	0x8d00	Standard query (0)	q-aus1.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:21.273502111 CEST	192.168.2.5	1.1.1.1	0x1d5d	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.273791075 CEST	192.168.2.5	1.1.1.1	0xdbb3	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:21.307445049 CEST	192.168.2.5	1.1.1.1	0x19a6	Standard query (0)	k-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.307604074 CEST	192.168.2.5	1.1.1.1	0x123a	Standard query (0)	k-aus1.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:21.598723888 CEST	192.168.2.5	1.1.1.1	0xed54	Standard query (0)	srm.bf.contentsquare.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.598864079 CEST	192.168.2.5	1.1.1.1	0x7da6	Standard query (0)	srm.bf.contentsquare.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:22.377710104 CEST	192.168.2.5	1.1.1.1	0xabdb	Standard query (0)	k-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.377923012 CEST	192.168.2.5	1.1.1.1	0x45ab	Standard query (0)	k-aus1.clicktale.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:22.455718040 CEST	192.168.2.5	1.1.1.1	0x2fdd	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.455985069 CEST	192.168.2.5	1.1.1.1	0x3742	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:22.456510067 CEST	192.168.2.5	1.1.1.1	0xbcad	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.456665039 CEST	192.168.2.5	1.1.1.1	0x7259	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:22.942608118 CEST	192.168.2.5	1.1.1.1	0xec20	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.942904949 CEST	192.168.2.5	1.1.1.1	0x4b94	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:23.270677090 CEST	192.168.2.5	1.1.1.1	0x4a1d	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.270677090 CEST	192.168.2.5	1.1.1.1	0x88b	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:23.271904945 CEST	192.168.2.5	1.1.1.1	0x9a41	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.272073030 CEST	192.168.2.5	1.1.1.1	0x37c2	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:23.274115086 CEST	192.168.2.5	1.1.1.1	0xc46d	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.274115086 CEST	192.168.2.5	1.1.1.1	0xfa83	Standard query (0)	static-assets.fs.liveperson.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:23.693039894 CEST	192.168.2.5	1.1.1.1	0x38c	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.693380117 CEST	192.168.2.5	1.1.1.1	0xee59	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:23.895224094 CEST	192.168.2.5	1.1.1.1	0x33cf	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.895389080 CEST	192.168.2.5	1.1.1.1	0x317e	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:24.584737062 CEST	192.168.2.5	1.1.1.1	0xfa9e	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:24.586990118 CEST	192.168.2.5	1.1.1.1	0x6d13	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:25.336338997 CEST	192.168.2.5	1.1.1.1	0xf639	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:25.336771965 CEST	192.168.2.5	1.1.1.1	0xd592	Standard query (0)	static-assets.fs.liveperson.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:26.825936079 CEST	192.168.2.5	1.1.1.1	0xf72c	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:26.826170921 CEST	192.168.2.5	1.1.1.1	0x17d	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:27.456820011 CEST	192.168.2.5	1.1.1.1	0x45ef	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:27.456986904 CEST	192.168.2.5	1.1.1.1	0xf176	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:27.530879974 CEST	192.168.2.5	1.1.1.1	0x49c6	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:27.531095028 CEST	192.168.2.5	1.1.1.1	0x4206	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:28.475092888 CEST	192.168.2.5	1.1.1.1	0xca0c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:28.475260019 CEST	192.168.2.5	1.1.1.1	0x76bf	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:29.052097082 CEST	192.168.2.5	1.1.1.1	0xfa13	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:29.052685976 CEST	192.168.2.5	1.1.1.1	0x1819	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:31.825692892 CEST	192.168.2.5	1.1.1.1	0x81a	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:31.826004982 CEST	192.168.2.5	1.1.1.1	0x7e82	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:32.099205017 CEST	192.168.2.5	1.1.1.1	0xe4b	Standard query (0)	va.v.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:32.099436998 CEST	192.168.2.5	1.1.1.1	0x96f7	Standard query (0)	va.v.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:32.216036081 CEST	192.168.2.5	1.1.1.1	0x9bc1	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:32.216372967 CEST	192.168.2.5	1.1.1.1	0xbf27	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:33.185693979 CEST	192.168.2.5	1.1.1.1	0xf8c5	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.186268091 CEST	192.168.2.5	1.1.1.1	0x4460	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:33.187721014 CEST	192.168.2.5	1.1.1.1	0x7fa	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.188304901 CEST	192.168.2.5	1.1.1.1	0x4a3a	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:33.195828915 CEST	192.168.2.5	1.1.1.1	0xce03	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.196084976 CEST	192.168.2.5	1.1.1.1	0xd2e5	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:33.197191954 CEST	192.168.2.5	1.1.1.1	0x4900	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.532557964 CEST	192.168.2.5	1.1.1.1	0x964b	Standard query (0)	va.v.liveperson.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.532963991 CEST	192.168.2.5	1.1.1.1	0x2787	Standard query (0)	va.v.liveperson.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.143605947 CEST	192.168.2.5	1.1.1.1	0xcf4c	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.143826008 CEST	192.168.2.5	1.1.1.1	0x32cb	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.146038055 CEST	192.168.2.5	1.1.1.1	0x4b9	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.146212101 CEST	192.168.2.5	1.1.1.1	0x12ce	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.146558046 CEST	192.168.2.5	1.1.1.1	0xb2f8	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.146699905 CEST	192.168.2.5	1.1.1.1	0xaf43	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.875195980 CEST	192.168.2.5	1.1.1.1	0x17cc	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.875436068 CEST	192.168.2.5	1.1.1.1	0xcdd6	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.880712032 CEST	192.168.2.5	1.1.1.1	0x706a	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.881120920 CEST	192.168.2.5	1.1.1.1	0x8880	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:34.900849104 CEST	192.168.2.5	1.1.1.1	0x6a52	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.901206017 CEST	192.168.2.5	1.1.1.1	0x4c57	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Aug 28, 2024 09:28:37.988430977 CEST	192.168.2.5	1.1.1.1	0xbcee	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:37.989664078 CEST	192.168.2.5	1.1.1.1	0xb3f	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 09:27:15.886684895 CEST	1.1.1.1	192.168.2.5	0x69b5	No error (0)	aka.ms		2.18.69.150	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:19.018302917 CEST	1.1.1.1	192.168.2.5	0x1e11	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:19.021362066 CEST	1.1.1.1	192.168.2.5	0x6772	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 09:27:20.693604946 CEST	1.1.1.1	192.168.2.5	0xe49d	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.693635941 CEST	1.1.1.1	192.168.2.5	0x8a05	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.699208021 CEST	1.1.1.1	192.168.2.5	0x4d91	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.700227976 CEST	1.1.1.1	192.168.2.5	0xa97	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.704301119 CEST	1.1.1.1	192.168.2.5	0x4428	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.704301119 CEST	1.1.1.1	192.168.2.5	0x4428	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.704301119 CEST	1.1.1.1	192.168.2.5	0x4428	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.704301119 CEST	1.1.1.1	192.168.2.5	0x4428	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.705312014 CEST	1.1.1.1	192.168.2.5	0x3e82	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.705312014 CEST	1.1.1.1	192.168.2.5	0x3e82	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.714076042 CEST	1.1.1.1	192.168.2.5	0xe1df	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.714076042 CEST	1.1.1.1	192.168.2.5	0xe1df	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.714216948 CEST	1.1.1.1	192.168.2.5	0xd9ab	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.714216948 CEST	1.1.1.1	192.168.2.5	0xd9ab	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.714216948 CEST	1.1.1.1	192.168.2.5	0xd9ab	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.715084076 CEST	1.1.1.1	192.168.2.5	0xe363	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.715084076 CEST	1.1.1.1	192.168.2.5	0xe363	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.726840973 CEST	1.1.1.1	192.168.2.5	0x588d	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.726840973 CEST	1.1.1.1	192.168.2.5	0x588d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:20.726840973 CEST	1.1.1.1	192.168.2.5	0x588d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:20.727020979 CEST	1.1.1.1	192.168.2.5	0x4c9a	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:24.622478962 CEST	1.1.1.1	192.168.2.5	0xbcce	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:24.623110056 CEST	1.1.1.1	192.168.2.5	0x1409	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:24.623110056 CEST	1.1.1.1	192.168.2.5	0x1409	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:24.623110056 CEST	1.1.1.1	192.168.2.5	0x1409	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819761992 CEST	1.1.1.1	192.168.2.5	0x4fae	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819761992 CEST	1.1.1.1	192.168.2.5	0x4fae	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819794893 CEST	1.1.1.1	192.168.2.5	0x8aa5	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819822073 CEST	1.1.1.1	192.168.2.5	0x9811	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819834948 CEST	1.1.1.1	192.168.2.5	0x7607	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:25.819988012 CEST	1.1.1.1	192.168.2.5	0xf070	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:26.328435898 CEST	1.1.1.1	192.168.2.5	0xcf75	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:26.328474045 CEST	1.1.1.1	192.168.2.5	0x8622	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.303714037 CEST	1.1.1.1	192.168.2.5	0xafff	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.303714037 CEST	1.1.1.1	192.168.2.5	0xafff	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.303762913 CEST	1.1.1.1	192.168.2.5	0xb3ea	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.303762913 CEST	1.1.1.1	192.168.2.5	0xb3ea	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.303762913 CEST	1.1.1.1	192.168.2.5	0xb3ea	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:29.987745047 CEST	1.1.1.1	192.168.2.5	0xda2c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.987745047 CEST	1.1.1.1	192.168.2.5	0xda2c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.987745047 CEST	1.1.1.1	192.168.2.5	0xda2c	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.987745047 CEST	1.1.1.1	192.168.2.5	0xda2c	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:29.988266945 CEST	1.1.1.1	192.168.2.5	0x507c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:29.988266945 CEST	1.1.1.1	192.168.2.5	0x507c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:31.137166023 CEST	1.1.1.1	192.168.2.5	0x32ca	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:31.137166023 CEST	1.1.1.1	192.168.2.5	0x32ca	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:31.137166023 CEST	1.1.1.1	192.168.2.5	0x32ca	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:31.137415886 CEST	1.1.1.1	192.168.2.5	0xaf2b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:31.137415886 CEST	1.1.1.1	192.168.2.5	0xaf2b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:32.806823969 CEST	1.1.1.1	192.168.2.5	0xe4b	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:32.806823969 CEST	1.1.1.1	192.168.2.5	0xe4b	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:32.839853048 CEST	1.1.1.1	192.168.2.5	0xe202	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:32.917143106 CEST	1.1.1.1	192.168.2.5	0xe964	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:33.034940958 CEST	1.1.1.1	192.168.2.5	0x2be7	No error (0)	microsoftwindows.112.2o7.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:33.034940958 CEST	1.1.1.1	192.168.2.5	0x2be7	No error (0)	microsoftwindows.112.2o7.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:33.034940958 CEST	1.1.1.1	192.168.2.5	0x2be7	No error (0)	microsoftwindows.112.2o7.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.155069113 CEST	1.1.1.1	192.168.2.5	0x1e3b	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.155069113 CEST	1.1.1.1	192.168.2.5	0x1e3b	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.155081987 CEST	1.1.1.1	192.168.2.5	0x771d	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.155081987 CEST	1.1.1.1	192.168.2.5	0x771d	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.155081987 CEST	1.1.1.1	192.168.2.5	0x771d	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.156701088 CEST	1.1.1.1	192.168.2.5	0x6e37	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.157275915 CEST	1.1.1.1	192.168.2.5	0x7ed5	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.157275915 CEST	1.1.1.1	192.168.2.5	0x7ed5	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.157715082 CEST	1.1.1.1	192.168.2.5	0x374	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.157715082 CEST	1.1.1.1	192.168.2.5	0x374	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.157715082 CEST	1.1.1.1	192.168.2.5	0x374	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.173681974 CEST	1.1.1.1	192.168.2.5	0x6ebe	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.173681974 CEST	1.1.1.1	192.168.2.5	0x6ebe	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.235886097 CEST	1.1.1.1	192.168.2.5	0x6e21	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.237373114 CEST	1.1.1.1	192.168.2.5	0xb08c	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.237373114 CEST	1.1.1.1	192.168.2.5	0xb08c	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.237575054 CEST	1.1.1.1	192.168.2.5	0x139f	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.237575054 CEST	1.1.1.1	192.168.2.5	0x139f	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.242145061 CEST	1.1.1.1	192.168.2.5	0xad22	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.242145061 CEST	1.1.1.1	192.168.2.5	0xad22	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.242224932 CEST	1.1.1.1	192.168.2.5	0xd767	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.245558977 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.245558977 CEST	1.1.1.1	192.168.2.5	0xf52a	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:34.439353943 CEST	1.1.1.1	192.168.2.5	0x3606	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:34.439353943 CEST	1.1.1.1	192.168.2.5	0x3606	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:36.399372101 CEST	1.1.1.1	192.168.2.5	0xeba4	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:36.399372101 CEST	1.1.1.1	192.168.2.5	0xeba4	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:36.399372101 CEST	1.1.1.1	192.168.2.5	0xeba4	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:36.401230097 CEST	1.1.1.1	192.168.2.5	0x9b6a	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:36.401230097 CEST	1.1.1.1	192.168.2.5	0x9b6a	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:40.749273062 CEST	1.1.1.1	192.168.2.5	0xdafa	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:40.757040024 CEST	1.1.1.1	192.168.2.5	0xa91d	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:44.456346035 CEST	1.1.1.1	192.168.2.5	0x721f	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:44.457755089 CEST	1.1.1.1	192.168.2.5	0xe864	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.356895924 CEST	1.1.1.1	192.168.2.5	0x5e71	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.375931025 CEST	1.1.1.1	192.168.2.5	0xac57	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.376914024 CEST	1.1.1.1	192.168.2.5	0x1149	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.379010916 CEST	1.1.1.1	192.168.2.5	0x8d85	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.379699945 CEST	1.1.1.1	192.168.2.5	0xa4da	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.390801907 CEST	1.1.1.1	192.168.2.5	0xc7f2	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.399383068 CEST	1.1.1.1	192.168.2.5	0xe6e7	No error (0)	publisher.liveperson.net		34.120.154.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.411473989 CEST	1.1.1.1	192.168.2.5	0x6cfa	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.411473989 CEST	1.1.1.1	192.168.2.5	0x6cfa	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.411473989 CEST	1.1.1.1	192.168.2.5	0x6cfa	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.411473989 CEST	1.1.1.1	192.168.2.5	0x6cfa	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.412755966 CEST	1.1.1.1	192.168.2.5	0x4544	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.412755966 CEST	1.1.1.1	192.168.2.5	0x4544	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.425527096 CEST	1.1.1.1	192.168.2.5	0xd785	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.425527096 CEST	1.1.1.1	192.168.2.5	0xd785	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.425527096 CEST	1.1.1.1	192.168.2.5	0xd785	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.425704956 CEST	1.1.1.1	192.168.2.5	0xb74a	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.461380005 CEST	1.1.1.1	192.168.2.5	0x3327	No error (0)	d.impactradius-event.com		35.186.249.72	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463730097 CEST	1.1.1.1	192.168.2.5	0x283e	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463949919 CEST	1.1.1.1	192.168.2.5	0x3304	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463949919 CEST	1.1.1.1	192.168.2.5	0x3304	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.18	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463949919 CEST	1.1.1.1	192.168.2.5	0x3304	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463949919 CEST	1.1.1.1	192.168.2.5	0x3304	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.85	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.463949919 CEST	1.1.1.1	192.168.2.5	0x3304	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.43	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.482220888 CEST	1.1.1.1	192.168.2.5	0x4f2e	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.482220888 CEST	1.1.1.1	192.168.2.5	0x4f2e	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.482220888 CEST	1.1.1.1	192.168.2.5	0x4f2e	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:54.485110044 CEST	1.1.1.1	192.168.2.5	0xf9b6	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.485110044 CEST	1.1.1.1	192.168.2.5	0xf9b6	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.485528946 CEST	1.1.1.1	192.168.2.5	0x8c4	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:54.485528946 CEST	1.1.1.1	192.168.2.5	0x8c4	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:57.530035019 CEST	1.1.1.1	192.168.2.5	0x7026	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:57.530035019 CEST	1.1.1.1	192.168.2.5	0x7026	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:27:57.530035019 CEST	1.1.1.1	192.168.2.5	0x7026	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:27:57.530518055 CEST	1.1.1.1	192.168.2.5	0x9e41	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.78.109.69	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.60.40	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.50.19.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.33.187.142	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.66.230	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693046093 CEST	1.1.1.1	192.168.2.5	0x82af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.186.105	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693233013 CEST	1.1.1.1	192.168.2.5	0xd829	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693233013 CEST	1.1.1.1	192.168.2.5	0xd829	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:09.693233013 CEST	1.1.1.1	192.168.2.5	0xd829	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.546399117 CEST	1.1.1.1	192.168.2.5	0x53ab	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.546399117 CEST	1.1.1.1	192.168.2.5	0x53ab	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.546672106 CEST	1.1.1.1	192.168.2.5	0x80d2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.620575905 CEST	1.1.1.1	192.168.2.5	0x2b26	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.620575905 CEST	1.1.1.1	192.168.2.5	0x2b26	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.620589972 CEST	1.1.1.1	192.168.2.5	0x2029	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.620589972 CEST	1.1.1.1	192.168.2.5	0x2029	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.625216961 CEST	1.1.1.1	192.168.2.5	0xd8b2	No error (0)	msftenterprise.sc.omtrdc.net		63.140.37.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.625216961 CEST	1.1.1.1	192.168.2.5	0xd8b2	No error (0)	msftenterprise.sc.omtrdc.net		63.140.37.126	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.625216961 CEST	1.1.1.1	192.168.2.5	0xd8b2	No error (0)	msftenterprise.sc.omtrdc.net		63.140.36.51	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.625216961 CEST	1.1.1.1	192.168.2.5	0xd8b2	No error (0)	msftenterprise.sc.omtrdc.net		63.140.36.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.634036064 CEST	1.1.1.1	192.168.2.5	0x55e9	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.634036064 CEST	1.1.1.1	192.168.2.5	0x55e9	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.634036064 CEST	1.1.1.1	192.168.2.5	0x55e9	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.26.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.78.109.69	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.50.19.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.85.140	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.186.105	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.34.48.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.636435986 CEST	1.1.1.1	192.168.2.5	0x1873	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.66.230	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679903030 CEST	1.1.1.1	192.168.2.5	0x7229	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679903030 CEST	1.1.1.1	192.168.2.5	0x7229	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679903030 CEST	1.1.1.1	192.168.2.5	0x7229	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.33.187.142	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.73.191	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.122.221	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.26.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.34.48.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:10.679949999 CEST	1.1.1.1	192.168.2.5	0xc352	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.127.106	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.467546940 CEST	1.1.1.1	192.168.2.5	0xe79b	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.468930960 CEST	1.1.1.1	192.168.2.5	0xd3c3	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.475482941 CEST	1.1.1.1	192.168.2.5	0x1740	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.475482941 CEST	1.1.1.1	192.168.2.5	0x1740	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.475809097 CEST	1.1.1.1	192.168.2.5	0xcb94	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.538847923 CEST	1.1.1.1	192.168.2.5	0x589f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Aug 28, 2024 09:28:11.538990974 CEST	1.1.1.1	192.168.2.5	0x97b7	No error (0)	googleads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.549284935 CEST	1.1.1.1	192.168.2.5	0x45b3	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.549284935 CEST	1.1.1.1	192.168.2.5	0x45b3	No error (0)	dco-ats-00-1519508033.us-east-1.elb.amazonaws.com		52.21.67.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.549284935 CEST	1.1.1.1	192.168.2.5	0x45b3	No error (0)	dco-ats-00-1519508033.us-east-1.elb.amazonaws.com		107.22.246.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.566050053 CEST	1.1.1.1	192.168.2.5	0x5765	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.566050053 CEST	1.1.1.1	192.168.2.5	0x5765	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.566050053 CEST	1.1.1.1	192.168.2.5	0x5765	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.570736885 CEST	1.1.1.1	192.168.2.5	0xf8ba	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.619453907 CEST	1.1.1.1	192.168.2.5	0x65b4	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.698879957 CEST	1.1.1.1	192.168.2.5	0x43f0	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.698879957 CEST	1.1.1.1	192.168.2.5	0x43f0	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.698879957 CEST	1.1.1.1	192.168.2.5	0x43f0	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.698879957 CEST	1.1.1.1	192.168.2.5	0x43f0	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.698950052 CEST	1.1.1.1	192.168.2.5	0xec2b	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.724561930 CEST	1.1.1.1	192.168.2.5	0x9d97	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.743417025 CEST	1.1.1.1	192.168.2.5	0x5d1	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.743417025 CEST	1.1.1.1	192.168.2.5	0x5d1	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.743417025 CEST	1.1.1.1	192.168.2.5	0x5d1	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:11.777571917 CEST	1.1.1.1	192.168.2.5	0x3dd3	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.777571917 CEST	1.1.1.1	192.168.2.5	0x3dd3	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.778788090 CEST	1.1.1.1	192.168.2.5	0x45ed	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.778788090 CEST	1.1.1.1	192.168.2.5	0x45ed	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:11.838464975 CEST	1.1.1.1	192.168.2.5	0xfa6c	No error (0)	cm.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.064656973 CEST	1.1.1.1	192.168.2.5	0x7049	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.064656973 CEST	1.1.1.1	192.168.2.5	0x7049	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.065341949 CEST	1.1.1.1	192.168.2.5	0x6f62	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.066869974 CEST	1.1.1.1	192.168.2.5	0x25c4	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.066869974 CEST	1.1.1.1	192.168.2.5	0x25c4	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.067296982 CEST	1.1.1.1	192.168.2.5	0x3473	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.176959991 CEST	1.1.1.1	192.168.2.5	0x208d	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.176959991 CEST	1.1.1.1	192.168.2.5	0x208d	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.176959991 CEST	1.1.1.1	192.168.2.5	0x208d	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.177432060 CEST	1.1.1.1	192.168.2.5	0xab17	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.177432060 CEST	1.1.1.1	192.168.2.5	0xab17	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.205815077 CEST	1.1.1.1	192.168.2.5	0x9e18	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.205815077 CEST	1.1.1.1	192.168.2.5	0x9e18	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.206094980 CEST	1.1.1.1	192.168.2.5	0xb8f	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.206094980 CEST	1.1.1.1	192.168.2.5	0xb8f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.293292999 CEST	1.1.1.1	192.168.2.5	0x4c97	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.293292999 CEST	1.1.1.1	192.168.2.5	0x4c97	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.293292999 CEST	1.1.1.1	192.168.2.5	0x4c97	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.293292999 CEST	1.1.1.1	192.168.2.5	0x4c97	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404026031 CEST	1.1.1.1	192.168.2.5	0x68af	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404047966 CEST	1.1.1.1	192.168.2.5	0x96db	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.404047966 CEST	1.1.1.1	192.168.2.5	0x96db	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.435975075 CEST	1.1.1.1	192.168.2.5	0xbeab	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.435975075 CEST	1.1.1.1	192.168.2.5	0xbeab	No error (0)	dco-ats-00-1519508033.us-east-1.elb.amazonaws.com		107.22.246.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.435975075 CEST	1.1.1.1	192.168.2.5	0xbeab	No error (0)	dco-ats-00-1519508033.us-east-1.elb.amazonaws.com		52.21.67.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.462801933 CEST	1.1.1.1	192.168.2.5	0xa039	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.468466043 CEST	1.1.1.1	192.168.2.5	0x57c9	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.468780994 CEST	1.1.1.1	192.168.2.5	0xc466	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:12.631654024 CEST	1.1.1.1	192.168.2.5	0xd15	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.644927979 CEST	1.1.1.1	192.168.2.5	0xf9ed	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.644927979 CEST	1.1.1.1	192.168.2.5	0xf9ed	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.644927979 CEST	1.1.1.1	192.168.2.5	0xf9ed	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.644927979 CEST	1.1.1.1	192.168.2.5	0xf9ed	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.729154110 CEST	1.1.1.1	192.168.2.5	0x3f2e	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.729154110 CEST	1.1.1.1	192.168.2.5	0x3f2e	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.729942083 CEST	1.1.1.1	192.168.2.5	0xe8d1	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.729942083 CEST	1.1.1.1	192.168.2.5	0xe8d1	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795074940 CEST	1.1.1.1	192.168.2.5	0xb19c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795074940 CEST	1.1.1.1	192.168.2.5	0xb19c	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795074940 CEST	1.1.1.1	192.168.2.5	0xb19c	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.33.187.142	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.78.109.69	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.122.221	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.85.140	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.148.170	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.795249939 CEST	1.1.1.1	192.168.2.5	0x381e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.253.116.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.981076002 CEST	1.1.1.1	192.168.2.5	0xa8fc	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.981076002 CEST	1.1.1.1	192.168.2.5	0xa8fc	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.981076002 CEST	1.1.1.1	192.168.2.5	0xa8fc	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:12.981898069 CEST	1.1.1.1	192.168.2.5	0x7929	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:12.981898069 CEST	1.1.1.1	192.168.2.5	0x7929	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.403871059 CEST	1.1.1.1	192.168.2.5	0x98b9	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.404833078 CEST	1.1.1.1	192.168.2.5	0x9439	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:13.591922998 CEST	1.1.1.1	192.168.2.5	0x5085	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.591922998 CEST	1.1.1.1	192.168.2.5	0x5085	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.592293978 CEST	1.1.1.1	192.168.2.5	0x310	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.592293978 CEST	1.1.1.1	192.168.2.5	0x310	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.696141958 CEST	1.1.1.1	192.168.2.5	0x8d7b	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.696561098 CEST	1.1.1.1	192.168.2.5	0xfc71	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:13.924031973 CEST	1.1.1.1	192.168.2.5	0x7306	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.924031973 CEST	1.1.1.1	192.168.2.5	0x7306	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:13.924056053 CEST	1.1.1.1	192.168.2.5	0x8d0	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:14.466923952 CEST	1.1.1.1	192.168.2.5	0x1049	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.466923952 CEST	1.1.1.1	192.168.2.5	0x1049	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.466923952 CEST	1.1.1.1	192.168.2.5	0x1049	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.466923952 CEST	1.1.1.1	192.168.2.5	0x1049	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.467103004 CEST	1.1.1.1	192.168.2.5	0xe935	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.467103004 CEST	1.1.1.1	192.168.2.5	0xe935	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.605556011 CEST	1.1.1.1	192.168.2.5	0xe897	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:14.606307030 CEST	1.1.1.1	192.168.2.5	0x39da	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.606307030 CEST	1.1.1.1	192.168.2.5	0x39da	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903103113 CEST	1.1.1.1	192.168.2.5	0x38cf	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903103113 CEST	1.1.1.1	192.168.2.5	0x38cf	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903103113 CEST	1.1.1.1	192.168.2.5	0x38cf	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903103113 CEST	1.1.1.1	192.168.2.5	0x38cf	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903103113 CEST	1.1.1.1	192.168.2.5	0x38cf	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903446913 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903446913 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:14.903446913 CEST	1.1.1.1	192.168.2.5	0x83bd	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:15.498074055 CEST	1.1.1.1	192.168.2.5	0x799f	No error (0)	publisher.liveperson.net		34.120.154.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:15.513344049 CEST	1.1.1.1	192.168.2.5	0x5522	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:15.514436007 CEST	1.1.1.1	192.168.2.5	0x6b53	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311547995 CEST	1.1.1.1	192.168.2.5	0x7128	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311547995 CEST	1.1.1.1	192.168.2.5	0x7128	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311547995 CEST	1.1.1.1	192.168.2.5	0x7128	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311547995 CEST	1.1.1.1	192.168.2.5	0x7128	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311547995 CEST	1.1.1.1	192.168.2.5	0x7128	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311912060 CEST	1.1.1.1	192.168.2.5	0x4500	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311912060 CEST	1.1.1.1	192.168.2.5	0x4500	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.311912060 CEST	1.1.1.1	192.168.2.5	0x4500	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.315613031 CEST	1.1.1.1	192.168.2.5	0x70b6	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.315946102 CEST	1.1.1.1	192.168.2.5	0x9f0c	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.497724056 CEST	1.1.1.1	192.168.2.5	0x9d1b	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.501962900 CEST	1.1.1.1	192.168.2.5	0x1b44	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.501962900 CEST	1.1.1.1	192.168.2.5	0x1b44	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.502047062 CEST	1.1.1.1	192.168.2.5	0x74c4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.502047062 CEST	1.1.1.1	192.168.2.5	0x74c4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.502047062 CEST	1.1.1.1	192.168.2.5	0x74c4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.502047062 CEST	1.1.1.1	192.168.2.5	0x74c4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.512712002 CEST	1.1.1.1	192.168.2.5	0x5c5e	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531131983 CEST	1.1.1.1	192.168.2.5	0xaf74	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531131983 CEST	1.1.1.1	192.168.2.5	0xaf74	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.18	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531131983 CEST	1.1.1.1	192.168.2.5	0xaf74	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.85	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531131983 CEST	1.1.1.1	192.168.2.5	0xaf74	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531131983 CEST	1.1.1.1	192.168.2.5	0xaf74	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.43	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:16.531569958 CEST	1.1.1.1	192.168.2.5	0x69da	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.979995012 CEST	1.1.1.1	192.168.2.5	0x8258	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:16.980040073 CEST	1.1.1.1	192.168.2.5	0x11fe	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:17.100789070 CEST	1.1.1.1	192.168.2.5	0xce21	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:17.115855932 CEST	1.1.1.1	192.168.2.5	0x6161	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:17.905497074 CEST	1.1.1.1	192.168.2.5	0x3ca	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:17.905584097 CEST	1.1.1.1	192.168.2.5	0xfc08	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:18.050693989 CEST	1.1.1.1	192.168.2.5	0x7ae5	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:18.050718069 CEST	1.1.1.1	192.168.2.5	0xac05	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:18.901812077 CEST	1.1.1.1	192.168.2.5	0xc57b	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:18.901812077 CEST	1.1.1.1	192.168.2.5	0xc57b	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:18.901812077 CEST	1.1.1.1	192.168.2.5	0xc57b	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904243946 CEST	1.1.1.1	192.168.2.5	0x944b	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904268026 CEST	1.1.1.1	192.168.2.5	0xddce	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904268026 CEST	1.1.1.1	192.168.2.5	0xddce	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904268026 CEST	1.1.1.1	192.168.2.5	0xddce	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904268026 CEST	1.1.1.1	192.168.2.5	0xddce	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:19.904702902 CEST	1.1.1.1	192.168.2.5	0x5457	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:19.911803007 CEST	1.1.1.1	192.168.2.5	0xf55d	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:19.911803007 CEST	1.1.1.1	192.168.2.5	0xf55d	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.284555912 CEST	1.1.1.1	192.168.2.5	0x1ef3	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.286413908 CEST	1.1.1.1	192.168.2.5	0xa7b3	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.286413908 CEST	1.1.1.1	192.168.2.5	0xa7b3	No error (0)	q-aus1.contentsquare.net		34.200.199.99	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.286413908 CEST	1.1.1.1	192.168.2.5	0xa7b3	No error (0)	q-aus1.contentsquare.net		34.195.65.55	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.286413908 CEST	1.1.1.1	192.168.2.5	0xa7b3	No error (0)	q-aus1.contentsquare.net		3.218.110.123	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303221941 CEST	1.1.1.1	192.168.2.5	0xd49d	No error (0)	c.clicktale.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303221941 CEST	1.1.1.1	192.168.2.5	0xd49d	No error (0)	c.ba.contentsquare.net		52.30.188.204	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303221941 CEST	1.1.1.1	192.168.2.5	0xd49d	No error (0)	c.ba.contentsquare.net		63.33.52.224	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303221941 CEST	1.1.1.1	192.168.2.5	0xd49d	No error (0)	c.ba.contentsquare.net		52.49.131.190	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303221941 CEST	1.1.1.1	192.168.2.5	0xd49d	No error (0)	c.ba.contentsquare.net		52.48.41.39	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.303509951 CEST	1.1.1.1	192.168.2.5	0xbceb	No error (0)	c.clicktale.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.765369892 CEST	1.1.1.1	192.168.2.5	0x80b2	No error (0)	srm.bf.contentsquare.net		54.90.52.195	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.765369892 CEST	1.1.1.1	192.168.2.5	0x80b2	No error (0)	srm.bf.contentsquare.net		3.92.5.152	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.765369892 CEST	1.1.1.1	192.168.2.5	0x80b2	No error (0)	srm.bf.contentsquare.net		3.221.57.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		18.209.2.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		3.232.211.45	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		3.215.245.157	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		44.197.65.163	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		34.235.253.134	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		34.236.172.171	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		54.87.60.177	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906847954 CEST	1.1.1.1	192.168.2.5	0x6e4	No error (0)	aragorn-prod-va-lb.inbake.com		44.208.241.76	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906872988 CEST	1.1.1.1	192.168.2.5	0xfcbb	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:20.906872988 CEST	1.1.1.1	192.168.2.5	0xfcbb	No error (0)	aragorn-uk-prod.inbake.com	aragorn-prod-uk-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.144932032 CEST	1.1.1.1	192.168.2.5	0x139b	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.146240950 CEST	1.1.1.1	192.168.2.5	0x6b52	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.179714918 CEST	1.1.1.1	192.168.2.5	0x8d00	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.183166981 CEST	1.1.1.1	192.168.2.5	0x6b6a	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.183166981 CEST	1.1.1.1	192.168.2.5	0x6b6a	No error (0)	q-aus1.contentsquare.net		34.195.65.55	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.183166981 CEST	1.1.1.1	192.168.2.5	0x6b6a	No error (0)	q-aus1.contentsquare.net		3.218.110.123	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.183166981 CEST	1.1.1.1	192.168.2.5	0x6b6a	No error (0)	q-aus1.contentsquare.net		34.200.199.99	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.282228947 CEST	1.1.1.1	192.168.2.5	0xdbb3	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.282545090 CEST	1.1.1.1	192.168.2.5	0x1d5d	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.328327894 CEST	1.1.1.1	192.168.2.5	0x123a	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.328766108 CEST	1.1.1.1	192.168.2.5	0x19a6	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:21.328766108 CEST	1.1.1.1	192.168.2.5	0x19a6	No error (0)	k.bf.contentsquare.net		54.208.196.179	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.328766108 CEST	1.1.1.1	192.168.2.5	0x19a6	No error (0)	k.bf.contentsquare.net		34.238.211.197	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.606148958 CEST	1.1.1.1	192.168.2.5	0xed54	No error (0)	srm.bf.contentsquare.net		54.90.52.195	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.606148958 CEST	1.1.1.1	192.168.2.5	0xed54	No error (0)	srm.bf.contentsquare.net		3.221.57.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:21.606148958 CEST	1.1.1.1	192.168.2.5	0xed54	No error (0)	srm.bf.contentsquare.net		3.92.5.152	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.393095016 CEST	1.1.1.1	192.168.2.5	0xabdb	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:22.393095016 CEST	1.1.1.1	192.168.2.5	0xabdb	No error (0)	k.bf.contentsquare.net		34.238.211.197	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.393095016 CEST	1.1.1.1	192.168.2.5	0xabdb	No error (0)	k.bf.contentsquare.net		54.208.196.179	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.398251057 CEST	1.1.1.1	192.168.2.5	0x45ab	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:22.462471008 CEST	1.1.1.1	192.168.2.5	0x2fdd	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		23.23.91.66	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		54.84.69.197	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		52.23.108.167	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		18.211.208.102	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		54.242.30.195	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.464236021 CEST	1.1.1.1	192.168.2.5	0xbcad	No error (0)	rtb.adentifi.com		3.208.151.150	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:22.465014935 CEST	1.1.1.1	192.168.2.5	0x3742	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		52.211.24.199	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		54.75.251.201	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		52.51.104.112	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		34.247.16.8	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		52.30.53.126	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		63.32.216.206	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		54.220.6.201	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.073668003 CEST	1.1.1.1	192.168.2.5	0xec20	No error (0)	sync.crwdcntrl.net		54.77.8.248	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.278779984 CEST	1.1.1.1	192.168.2.5	0x88b	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.279943943 CEST	1.1.1.1	192.168.2.5	0x9a41	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.280574083 CEST	1.1.1.1	192.168.2.5	0x37c2	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.286223888 CEST	1.1.1.1	192.168.2.5	0xfa83	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.300079107 CEST	1.1.1.1	192.168.2.5	0xc46d	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.300079107 CEST	1.1.1.1	192.168.2.5	0xc46d	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.103	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.300079107 CEST	1.1.1.1	192.168.2.5	0xc46d	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.32	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.300079107 CEST	1.1.1.1	192.168.2.5	0xc46d	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.34	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.300079107 CEST	1.1.1.1	192.168.2.5	0xc46d	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:23.301733971 CEST	1.1.1.1	192.168.2.5	0x4a1d	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.699767113 CEST	1.1.1.1	192.168.2.5	0x38c	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.700455904 CEST	1.1.1.1	192.168.2.5	0xee59	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903129101 CEST	1.1.1.1	192.168.2.5	0x317e	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903129101 CEST	1.1.1.1	192.168.2.5	0x317e	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903129101 CEST	1.1.1.1	192.168.2.5	0x317e	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903665066 CEST	1.1.1.1	192.168.2.5	0x33cf	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903665066 CEST	1.1.1.1	192.168.2.5	0x33cf	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:23.903665066 CEST	1.1.1.1	192.168.2.5	0x33cf	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:24.592061043 CEST	1.1.1.1	192.168.2.5	0xfa9e	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:24.593760967 CEST	1.1.1.1	192.168.2.5	0x6d13	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:25.345808983 CEST	1.1.1.1	192.168.2.5	0xd592	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:25.349442005 CEST	1.1.1.1	192.168.2.5	0xf639	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:25.349442005 CEST	1.1.1.1	192.168.2.5	0xf639	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.34	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:25.349442005 CEST	1.1.1.1	192.168.2.5	0xf639	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.32	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:25.349442005 CEST	1.1.1.1	192.168.2.5	0xf639	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.103	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:25.349442005 CEST	1.1.1.1	192.168.2.5	0xf639	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.112.120	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:26.833267927 CEST	1.1.1.1	192.168.2.5	0x17d	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:26.833267927 CEST	1.1.1.1	192.168.2.5	0x17d	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:26.833945990 CEST	1.1.1.1	192.168.2.5	0xf72c	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:26.833945990 CEST	1.1.1.1	192.168.2.5	0xf72c	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:27.372581959 CEST	1.1.1.1	192.168.2.5	0x9161	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:27.372581959 CEST	1.1.1.1	192.168.2.5	0x9161	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:27.465163946 CEST	1.1.1.1	192.168.2.5	0x45ef	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:27.465756893 CEST	1.1.1.1	192.168.2.5	0xf176	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:27.537511110 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	cm.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:28.481849909 CEST	1.1.1.1	192.168.2.5	0xca0c	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:28.481849909 CEST	1.1.1.1	192.168.2.5	0xca0c	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:28.482274055 CEST	1.1.1.1	192.168.2.5	0x76bf	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:29.076251030 CEST	1.1.1.1	192.168.2.5	0xfa13	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:29.077069044 CEST	1.1.1.1	192.168.2.5	0x1819	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:31.832474947 CEST	1.1.1.1	192.168.2.5	0x81a	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:31.832474947 CEST	1.1.1.1	192.168.2.5	0x81a	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:31.832889080 CEST	1.1.1.1	192.168.2.5	0x7e82	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Aug 28, 2024 09:28:32.108378887 CEST	1.1.1.1	192.168.2.5	0x96f7	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:32.109204054 CEST	1.1.1.1	192.168.2.5	0xe4b	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:32.223238945 CEST	1.1.1.1	192.168.2.5	0x9bc1	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:32.223238945 CEST	1.1.1.1	192.168.2.5	0x9bc1	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.192775965 CEST	1.1.1.1	192.168.2.5	0xf8c5	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.192775965 CEST	1.1.1.1	192.168.2.5	0xf8c5	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.192775965 CEST	1.1.1.1	192.168.2.5	0xf8c5	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.192935944 CEST	1.1.1.1	192.168.2.5	0x4460	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.192935944 CEST	1.1.1.1	192.168.2.5	0x4460	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.194200993 CEST	1.1.1.1	192.168.2.5	0x7fa	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.195041895 CEST	1.1.1.1	192.168.2.5	0x4a3a	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.202434063 CEST	1.1.1.1	192.168.2.5	0xce03	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.203808069 CEST	1.1.1.1	192.168.2.5	0x4900	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:33.539469004 CEST	1.1.1.1	192.168.2.5	0x964b	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:33.540210962 CEST	1.1.1.1	192.168.2.5	0x2787	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.152143002 CEST	1.1.1.1	192.168.2.5	0xcf4c	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.152143002 CEST	1.1.1.1	192.168.2.5	0xcf4c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.152143002 CEST	1.1.1.1	192.168.2.5	0xcf4c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.152143002 CEST	1.1.1.1	192.168.2.5	0xcf4c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.152143002 CEST	1.1.1.1	192.168.2.5	0xcf4c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.154141903 CEST	1.1.1.1	192.168.2.5	0x32cb	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.154218912 CEST	1.1.1.1	192.168.2.5	0x4b9	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.154218912 CEST	1.1.1.1	192.168.2.5	0x4b9	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.154218912 CEST	1.1.1.1	192.168.2.5	0x4b9	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.155090094 CEST	1.1.1.1	192.168.2.5	0xb2f8	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.155090094 CEST	1.1.1.1	192.168.2.5	0xb2f8	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.155229092 CEST	1.1.1.1	192.168.2.5	0x12ce	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.155229092 CEST	1.1.1.1	192.168.2.5	0x12ce	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.881858110 CEST	1.1.1.1	192.168.2.5	0x17cc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.881858110 CEST	1.1.1.1	192.168.2.5	0x17cc	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.881964922 CEST	1.1.1.1	192.168.2.5	0xcdd6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887475014 CEST	1.1.1.1	192.168.2.5	0x706a	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887475014 CEST	1.1.1.1	192.168.2.5	0x706a	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887475014 CEST	1.1.1.1	192.168.2.5	0x706a	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887475014 CEST	1.1.1.1	192.168.2.5	0x706a	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887475014 CEST	1.1.1.1	192.168.2.5	0x706a	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.887717009 CEST	1.1.1.1	192.168.2.5	0x8880	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		54.165.19.58	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		52.6.202.249	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		54.197.234.7	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		52.7.6.179	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		54.146.156.15	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		54.144.196.235	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		52.71.88.198	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:34.907789946 CEST	1.1.1.1	192.168.2.5	0x6a52	No error (0)	sync.srv.stackadapt.com		54.161.148.55	A (IP address)	IN (0x0001)	false
Aug 28, 2024 09:28:37.996582985 CEST	1.1.1.1	192.168.2.5	0xbcee	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 09:28:37.997222900 CEST	1.1.1.1	192.168.2.5	0xb3f	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

aka.ms

fs.microsoft.com

https:

mem.gfx.ms

js.monitor.azure.com

aadcdn.msftauth.net

aadcdn.msauth.net

logincdn.msftauth.net

wcpstatic.microsoft.com

dpm.demdex.net

www.facebook.com

msftenterprise.sc.omtrdc.net

mscom.demdex.net

bat.bing.com

googleads.g.doubleclick.net

idsync.rlcdn.com

ats.everesttech.net

target.microsoft.com

ib.adnxs.com

cm.g.doubleclick.net

analytics.twitter.com

match.adsrvr.org

www.google.com

cms.quantserve.com

www.clarity.ms

a.tribalfusion.com

s.tribalfusion.com

cdnssl.clicktale.net

cms.analytics.yahoo.com

ups.analytics.yahoo.com

bttrack.com

dmpsync.3lift.com

c.clicktale.net

srm.bf.contentsquare.net

ag.innovid.com

rtb.adentifi.com

k-aus1.clicktale.net

static-assets.fs.liveperson.com

sync.crwdcntrl.net

dsum-sec.casalemedia.com

us-u.openx.net

image2.pubmatic.com

trc.taboola.com

sync.srv.stackadapt.com

q-aus1.clicktale.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49715	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:02 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-08-28 07:27:02 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 07:27:03 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 07:26:02 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C502_BAY x-ms-request-id: 046563f6-c091-4571-b6c7-bc812cdb8a99 PPServer: PPV: 30 H: PH1PEPF00011DA3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 07:27:02 GMT Connection: close Content-Length: 11389
2024-08-28 07:27:03 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49717	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:04 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-08-28 07:27:04 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 07:27:04 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 07:26:04 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30345.1 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C502_BAY x-ms-request-id: 6d97a750-7109-47ff-9f31-b07b008393ad PPServer: PPV: 30 H: PH1PEPF00011CC5 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 07:27:04 GMT Connection: close Content-Length: 11389
2024-08-28 07:27:04 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49719	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:05 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-08-28 07:27:05 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 07:27:06 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 07:26:05 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C502_BAY x-ms-request-id: adabf25b-7aa9-4ed2-ab11-855484330847 PPServer: PPV: 30 H: PH1PEPF00011CC6 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 07:27:05 GMT Connection: close Content-Length: 10901
2024-08-28 07:27:06 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49721	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:06 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-08-28 07:27:06 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 07:27:07 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 07:26:06 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C502_BAY x-ms-request-id: 8e3a052d-0719-4ac2-8c21-40a9261c639c PPServer: PPV: 30 H: PH1PEPF00011CC2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 07:27:06 GMT Connection: close Content-Length: 10901
2024-08-28 07:27:07 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49723	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 70 4a 31 53 72 4f 4a 55 6a 45 65 57 6a 4f 31 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 61 64 64 32 33 32 63 37 30 34 36 33 64 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: pJ1SrOJUjEeWjO1t.1Context: dfadd232c70463df
2024-08-28 07:27:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 70 4a 31 53 72 4f 4a 55 6a 45 65 57 6a 4f 31 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 61 64 64 32 33 32 63 37 30 34 36 33 64 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 39 58 7a 6e 57 43 36 61 55 4b 51 2f 38 57 34 53 59 33 38 49 4b 69 6e 47 73 2f 45 51 49 62 6d 4c 76 70 35 38 73 2f 53 67 2f 36 39 2b 66 46 73 6e 71 4d 75 30 46 54 58 45 6c 6c 4e 6d 35 72 57 52 44 6e 66 74 69 69 6b 34 42 38 73 63 55 52 74 6e 6d 61 56 63 37 71 63 77 55 39 2b 47 59 30 55 63 38 4c 47 76 4f 4a 61 46 52 34 4e 59 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: pJ1SrOJUjEeWjO1t.2Context: dfadd232c70463df<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT9XznWC6aUKQ/8W4SY38IKinGs/EQIbmLvp58s/Sg/69+fFsnqMu0FTXEllNm5rWRDnftiik4B8scURtnmaVc7qcwU9+GY0Uc8LGvOJaFR4NY
2024-08-28 07:27:07 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 70 4a 31 53 72 4f 4a 55 6a 45 65 57 6a 4f 31 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 61 64 64 32 33 32 63 37 30 34 36 33 64 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: pJ1SrOJUjEeWjO1t.3Context: dfadd232c70463df
2024-08-28 07:27:07 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:07 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 6a 4e 42 67 51 65 43 2f 30 71 32 72 68 78 6a 36 6d 70 36 75 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mjNBgQeC/0q2rhxj6mp6uQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49724	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:13 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 53 55 5a 62 48 74 62 67 55 57 38 47 45 74 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 61 32 66 32 32 35 32 33 35 32 39 36 65 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9SUZbHtbgUW8GEtZ.1Context: dda2f225235296e8
2024-08-28 07:27:13 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:13 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 53 55 5a 62 48 74 62 67 55 57 38 47 45 74 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 61 32 66 32 32 35 32 33 35 32 39 36 65 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 69 4e 77 7a 71 38 38 50 5a 4b 47 7a 4a 49 6a 73 5a 55 6b 67 46 76 66 30 4a 59 6b 6e 6d 4e 67 41 38 48 6b 77 44 77 72 42 37 77 6d 4d 2f 6d 76 7a 77 6d 48 70 38 64 37 58 79 55 70 32 75 79 72 75 6e 37 4a 44 6b 75 6f 53 44 53 71 44 55 44 56 68 73 41 47 79 37 61 50 58 50 48 66 6a 45 4a 78 5a 30 78 36 71 31 6a 6b 54 45 2f 6a 6f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9SUZbHtbgUW8GEtZ.2Context: dda2f225235296e8<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWiNwzq88PZKGzJIjsZUkgFvf0JYknmNgA8HkwDwrB7wmM/mvzwmHp8d7XyUp2uyrun7JDkuoSDSqDUDVhsAGy7aPXPHfjEJxZ0x6q1jkTE/jo
2024-08-28 07:27:13 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 53 55 5a 62 48 74 62 67 55 57 38 47 45 74 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 61 32 66 32 32 35 32 33 35 32 39 36 65 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9SUZbHtbgUW8GEtZ.3Context: dda2f225235296e8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-28 07:27:13 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:13 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 68 68 54 41 53 78 54 32 55 75 56 43 30 6a 69 38 53 41 72 34 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JhhTASxT2UuVC0ji8SAr4Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49732	2.18.69.150	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:16 UTC	679	OUT	GET /LearnAboutSenderIdentification HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:16 UTC	511	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Request-Context: appId=cid-v1:9b037ab9-fa5a-4c09-81bd-41ffa859f01e X-Response-Cache-Status: True Expires: Wed, 28 Aug 2024 07:27:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 28 Aug 2024 07:27:16 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49733	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6b 6e 72 36 51 48 49 53 56 6b 71 77 56 6b 66 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 33 61 32 35 64 31 38 66 30 64 64 33 65 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: knr6QHISVkqwVkfo.1Context: 623a25d18f0dd3e6
2024-08-28 07:27:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:16 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6b 6e 72 36 51 48 49 53 56 6b 71 77 56 6b 66 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 33 61 32 35 64 31 38 66 30 64 64 33 65 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 39 58 7a 6e 57 43 36 61 55 4b 51 2f 38 57 34 53 59 33 38 49 4b 69 6e 47 73 2f 45 51 49 62 6d 4c 76 70 35 38 73 2f 53 67 2f 36 39 2b 66 46 73 6e 71 4d 75 30 46 54 58 45 6c 6c 4e 6d 35 72 57 52 44 6e 66 74 69 69 6b 34 42 38 73 63 55 52 74 6e 6d 61 56 63 37 71 63 77 55 39 2b 47 59 30 55 63 38 4c 47 76 4f 4a 61 46 52 34 4e 59 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: knr6QHISVkqwVkfo.2Context: 623a25d18f0dd3e6<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT9XznWC6aUKQ/8W4SY38IKinGs/EQIbmLvp58s/Sg/69+fFsnqMu0FTXEllNm5rWRDnftiik4B8scURtnmaVc7qcwU9+GY0Uc8LGvOJaFR4NY
2024-08-28 07:27:16 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6b 6e 72 36 51 48 49 53 56 6b 71 77 56 6b 66 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 33 61 32 35 64 31 38 66 30 64 64 33 65 36 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: knr6QHISVkqwVkfo.3Context: 623a25d18f0dd3e6
2024-08-28 07:27:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 35 72 47 5a 7a 65 2f 52 55 71 6a 50 55 71 67 79 2f 37 75 46 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: i5rGZze/RUqjPUqgy/7uFA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	2.18.69.150	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:18 UTC	679	OUT	GET /LearnAboutSenderIdentification HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:18 UTC	511	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Request-Context: appId=cid-v1:9b037ab9-fa5a-4c09-81bd-41ffa859f01e X-Response-Cache-Status: True Expires: Wed, 28 Aug 2024 07:27:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 28 Aug 2024 07:27:18 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49737	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:18 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 61 6d 76 62 62 65 54 4b 45 71 55 52 56 6c 4d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 38 38 65 66 31 33 33 33 66 32 37 35 35 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bamvbbeTKEqURVlM.1Context: ec88ef1333f27550
2024-08-28 07:27:18 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:18 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 62 61 6d 76 62 62 65 54 4b 45 71 55 52 56 6c 4d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 38 38 65 66 31 33 33 33 66 32 37 35 35 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 69 4e 77 7a 71 38 38 50 5a 4b 47 7a 4a 49 6a 73 5a 55 6b 67 46 76 66 30 4a 59 6b 6e 6d 4e 67 41 38 48 6b 77 44 77 72 42 37 77 6d 4d 2f 6d 76 7a 77 6d 48 70 38 64 37 58 79 55 70 32 75 79 72 75 6e 37 4a 44 6b 75 6f 53 44 53 71 44 55 44 56 68 73 41 47 79 37 61 50 58 50 48 66 6a 45 4a 78 5a 30 78 36 71 31 6a 6b 54 45 2f 6a 6f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: bamvbbeTKEqURVlM.2Context: ec88ef1333f27550<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWiNwzq88PZKGzJIjsZUkgFvf0JYknmNgA8HkwDwrB7wmM/mvzwmHp8d7XyUp2uyrun7JDkuoSDSqDUDVhsAGy7aPXPHfjEJxZ0x6q1jkTE/jo
2024-08-28 07:27:18 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 61 6d 76 62 62 65 54 4b 45 71 55 52 56 6c 4d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 63 38 38 65 66 31 33 33 33 66 32 37 35 35 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bamvbbeTKEqURVlM.3Context: ec88ef1333f27550<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-28 07:27:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 64 2b 57 67 51 7a 53 30 55 75 36 47 72 31 4d 48 32 6f 36 47 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Md+WgQzS0Uu6Gr1MH2o6Gw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 07:27:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=29586 Date: Wed, 28 Aug 2024 07:27:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49758	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 07:27:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=33499 Date: Wed, 28 Aug 2024 07:27:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-28 07:27:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49768	13.107.246.45	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:24 UTC	566	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:24 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:24 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Wed, 28 Aug 2024 09:08:26 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072724Z-15c77d89844dxft9qmw5gzxgbw00000000gg000000001vcf x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:27:24 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-28 07:27:24 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49774	13.107.246.64	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:26 UTC	385	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:26 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:26 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Wed, 28 Aug 2024 09:08:26 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072726Z-15c77d89844jhl6gb132cscd340000000fzg000000005h05 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:27:26 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-28 07:27:26 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49798	13.107.246.42	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:29 UTC	610	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:29 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:29 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: e03f0d0a-101e-0017-672e-ed844a000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072729Z-15c77d89844678z85cxpgnswe00000000k5g000000000t1q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:27:29 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-08-28 07:27:29 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-08-28 07:27:29 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-08-28 07:27:29 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-08-28 07:27:29 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-08-28 07:27:29 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49817	13.107.246.45	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:30 UTC	602	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:30 UTC	609	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:30 GMT Content-Type: application/javascript Content-Length: 211842 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 15 Aug 2024 20:49:58 GMT ETag: "1daef8f5cfb4c82" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072730Z-15c77d898445pmpjghgxza2m7n0000000hug00000000bd3a x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-08-28 07:27:30 UTC	15775	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 69 29 72 65 74 75 72 6e 20 74 7c 7c Data Ascii: ]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"number"==i)return t\|\|
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d Data Ascii: t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}function be(t,e,r){var n=
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 65 2e 6b 65 79 64 6f 77 Data Ascii: ss,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.keydownHandler=e.keydow
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 65 6d 65 6d 62 65 72 65 64 41 63 63 6f 75 6e 74 73 22 3a 72 Data Ascii: mIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getRememberedAccounts":r
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a Data Ascii: 1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){case"signOutFromIdp":
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c 72 29 7d 7d 72 65 74 75 72 6e 20 48 28 7b 7d 2c 6c 29 3b 63 Data Ascii: 0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,r)}}return H({},l);c
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 2e 67 6c 79 70 68 5f 6d 6f 72 65 5c 78 37 62 77 69 64 74 68 Data Ascii: 6\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d.glyph_more\x7bwidth
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 36 34 5c 78 32 37 20 73 74 72 6f 6b 65 5c 78 33 64 5c 78 32 Data Ascii: _account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64 64\x27 stroke\x3d\x2
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 Data Ascii: 2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\x7d\x40media screen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49815	152.199.21.175	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:30 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_LITcRq6S7_1gG8CPmkPzQQ2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:30 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2158416 Cache-Control: public, max-age=31536000 Content-MD5: XueIUMsJzh+QJNYy+M6ZEQ== Content-Type: application/x-javascript Date: Wed, 28 Aug 2024 07:27:30 GMT Etag: 0x8DCB28280D5C32B Last-Modified: Thu, 01 Aug 2024 23:34:35 GMT Server: ECAcc (lhc/795D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a6cb7348-801e-009d-5e7a-e53896000000 x-ms-version: 2009-09-19 Content-Length: 141640 Connection: close
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-28 07:27:30 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c Data Ascii: e?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){_.isHistorySupported()&&d.history.pushState(e,n)},replaceState:function(e,n){_.isHistorySupported()&&d.history.replaceState(e,n)}},addEventL
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f Data Ascii: VALID_SMS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_O
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 5b 74 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 69 66 28 6e 2e 63 61 6c 6c 28 74 2c 65 5b 72 5d 2c 72 2c 65 29 29 72 65 74 75 72 6e 20 65 5b 72 5d 3b 72 65 74 75 72 6e 20 61 7d 2c 50 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 53 2e 61 2e 41 28 65 2c 6e 29 3b 30 3c 74 3f 65 2e 73 70 6c 69 63 65 28 74 2c 31 29 3a 30 3d 3d 3d 74 26 26 65 2e 73 68 69 66 74 28 29 7d 2c 77 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 26 26 53 2e 61 2e 44 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3e 53 2e 61 2e 41 28 6e Data Ascii: [t]===n)return t;return-1},Lb:function(e,n,t){for(var r=0,o=e.length;r<o;r++)if(n.call(t,e[r],r,e))return e[r];return a},Pa:function(e,n){var t=S.a.A(e,n);0<t?e.splice(t,1):0===t&&e.shift()},wc:function(e){var n=[];return e&&S.a.D(e,(function(e){0>S.a.A(n
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 62 65 66 6f 72 65 43 68 61 6e 67 65 22 29 7d 7d 3b 53 2e 61 2e 42 61 26 26 53 2e 61 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 50 2c 53 2e 54 2e 66 6e 29 3b 76 61 72 20 54 3d 53 2e 74 61 2e 4d 61 3d 22 5f 5f 6b 6f 5f 70 72 6f 74 6f 5f 5f 22 3b 50 5b 54 5d 3d 53 2e 74 61 2c 53 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 28 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 5b 54 5d 29 26 26 65 21 3d 3d 50 5b 54 5d 26 26 65 21 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 6f 62 6a 65 63 74 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 6e 20 6f 62 73 65 72 76 61 62 Data Ascii: this.notifySubscribers(this[w],"beforeChange")}};S.a.Ba&&S.a.setPrototypeOf(P,S.T.fn);var T=S.ta.Ma="__ko_proto__";P[T]=S.ta,S.O=function(e){if((e="function"==typeof e&&e[T])&&e!==P[T]&&e!==S.o.fn[T])throw Error("Invalid object that looks like an observab
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 28 65 2c 6e 29 7b 76 61 72 20 74 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 6e 29 3b 69 66 28 74 29 7b 76 61 72 20 72 2c 6f 3d 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 2c 69 3d 6f 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 3b 69 66 28 69 29 7b 66 6f 72 28 3b 72 3d 74 3b 29 74 3d 53 2e 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 72 29 2c 69 2e 63 61 6c 6c 28 6f 2c 72 29 3b 74 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 6e 29 7d 66 6f 72 28 3b 72 3d 74 3b 29 74 3d 53 2e 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 72 29 2c 66 28 65 2c 72 29 7d 53 2e 69 2e 6d 61 28 6e 2c 53 2e 69 2e 48 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2c 72 3d 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 72 26 26 53 2e 68 2e 53 63 28 6e 29 2c 28 Data Ascii: (e,n){var t=S.h.firstChild(n);if(t){var r,o=S.ga.instance,i=o.preprocessNode;if(i){for(;r=t;)t=S.h.nextSibling(r),i.call(o,r);t=S.h.firstChild(n)}for(;r=t;)t=S.h.nextSibling(r),f(e,r)}S.i.ma(n,S.i.H)}function f(e,n){var t=e,r=1===n.nodeType;r&&S.h.Sc(n),(
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 2e 42 62 28 72 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 2e 77 2e 63 62 28 72 2c 61 29 29 3a 28 69 3d 6f 28 6e 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 56 61 6c 75 65 22 29 2c 6e 29 2c 53 2e 77 2e 63 62 28 72 2c 53 2e 61 2e 66 28 69 29 29 2c 6e 3d 6f 28 6e 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 54 65 78 74 22 29 2c 69 29 2c 53 2e 61 2e 42 62 28 72 2c 6e 29 29 2c 5b 72 5d 7d 29 2c 6e 2c 63 29 2c 6c 7c 7c 28 73 3f 70 2e 6c 65 6e 67 74 68 26 26 72 28 29 2e 6c 65 6e 67 74 68 3c 70 2e 6c 65 6e 67 74 68 3a 70 2e 6c 65 6e 67 74 68 26 26 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3f 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 21 3d 3d 70 5b 30 5d 3a Data Ascii: .Bb(r,t.get("optionsCaption")),S.w.cb(r,a)):(i=o(n,t.get("optionsValue"),n),S.w.cb(r,S.a.f(i)),n=o(n,t.get("optionsText"),i),S.a.Bb(r,n)),[r]}),n,c),l\|\|(s?p.length&&r().length<p.length:p.length&&0<=e.selectedIndex?S.w.M(e.options[e.selectedIndex])!==p[0]:
2024-08-28 07:27:30 UTC	6	IN	Data Raw: 72 6e 28 72 3d 22 Data Ascii: rn(r="
2024-08-28 07:27:30 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 76 61 72 20 6f 3d 74 28 37 29 2c 69 3d 74 28 30 29 2c 61 3d 74 28 31 29 2c 73 3d 74 28 31 37 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 74 61 6e 63 Data Ascii: function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}var o=t(7),i=t(0),a=t(1),s=t(17),u=t(9).getInstanc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49821	13.107.246.60	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:30 UTC	393	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:30 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:30 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: dd3e0e27-001e-0056-16f7-f4dcae000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072730Z-15c77d89844dxft9qmw5gzxgbw000000009g000000001x8w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:27:30 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-08-28 07:27:30 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-08-28 07:27:30 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49824	13.107.246.64	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:32 UTC	385	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:32 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:32 GMT Content-Type: application/javascript Content-Length: 211842 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 15 Aug 2024 20:49:58 GMT ETag: "1daef8f5cfb4c82" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072732Z-15c77d89844678z85cxpgnswe00000000k1000000000c2qy x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:27:32 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e Data Ascii: y(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"n
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 Data Ascii: "string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}funct
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 Data Ascii: his.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.key
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 Data Ascii: Url);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getR
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: n gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){c
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c Data Ascii: ad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 36 36 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 Data Ascii: line-color\x3a\x23666\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 Data Ascii: rl_theme_gray .glyph_account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c Data Ascii: 3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49827	13.107.246.45	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:32 UTC	602	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:32 UTC	622	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:32 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 15 Aug 2024 20:50:00 GMT ETag: "1daef8f5e282da1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072732Z-15c77d89844bhmk535uzmhuz380000000kx000000000a4ru x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:27:32 UTC	15762	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 2c 74 2e 6f Data Ascii: andler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault()),t.o
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 6c 6f Data Ascii: ontent);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.round(e.lo
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c Data Ascii: r\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 61 5c 78 33 61 Data Ascii: ck\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu ul a\x3a
2024-08-28 07:27:32 UTC	16384	IN	Data Raw: 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 Data Ascii: er .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-color\x3
2024-08-28 07:27:32 UTC	3087	IN	Data Raw: 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 Data Ascii: azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x3boutli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49825	152.199.21.175	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:32 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_LITcRq6S7_1gG8CPmkPzQQ2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:32 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2158418 Cache-Control: public, max-age=31536000 Content-MD5: XueIUMsJzh+QJNYy+M6ZEQ== Content-Type: application/x-javascript Date: Wed, 28 Aug 2024 07:27:32 GMT Etag: 0x8DCB28280D5C32B Last-Modified: Thu, 01 Aug 2024 23:34:35 GMT Server: ECAcc (lhc/795D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a6cb7348-801e-009d-5e7a-e53896000000 x-ms-version: 2009-09-19 Content-Length: 141640 Connection: close
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 Data Ascii: le?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){_.isHistorySupported()&&d.history.pushState(e,n)},replaceState:function(e,n){_.isHistorySupported()&&d.history.replaceState(e,n)}},addEvent
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f Data Ascii: NVALID_SMS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_
2024-08-28 07:27:32 UTC	3	IN	Data Raw: 65 5b 74 Data Ascii: e[t
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 69 66 28 6e 2e 63 61 6c 6c 28 74 2c 65 5b 72 5d 2c 72 2c 65 29 29 72 65 74 75 72 6e 20 65 5b 72 5d 3b 72 65 74 75 72 6e 20 61 7d 2c 50 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 53 2e 61 2e 41 28 65 2c 6e 29 3b 30 3c 74 3f 65 2e 73 70 6c 69 63 65 28 74 2c 31 29 3a 30 3d 3d 3d 74 26 26 65 2e 73 68 69 66 74 28 29 7d 2c 77 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 26 26 53 2e 61 2e 44 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3e 53 2e 61 2e 41 28 6e 2c 65 Data Ascii: ]===n)return t;return-1},Lb:function(e,n,t){for(var r=0,o=e.length;r<o;r++)if(n.call(t,e[r],r,e))return e[r];return a},Pa:function(e,n){var t=S.a.A(e,n);0<t?e.splice(t,1):0===t&&e.shift()},wc:function(e){var n=[];return e&&S.a.D(e,(function(e){0>S.a.A(n,e
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 62 65 66 6f 72 65 43 68 61 6e 67 65 22 29 7d 7d 3b 53 2e 61 2e 42 61 26 26 53 2e 61 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 50 2c 53 2e 54 2e 66 6e 29 3b 76 61 72 20 54 3d 53 2e 74 61 2e 4d 61 3d 22 5f 5f 6b 6f 5f 70 72 6f 74 6f 5f 5f 22 3b 50 5b 54 5d 3d 53 2e 74 61 2c 53 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 28 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 5b 54 5d 29 26 26 65 21 3d 3d 50 5b 54 5d 26 26 65 21 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 6f 62 6a 65 63 74 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 6e 20 6f 62 73 65 72 76 61 62 6c 65 Data Ascii: is.notifySubscribers(this[w],"beforeChange")}};S.a.Ba&&S.a.setPrototypeOf(P,S.T.fn);var T=S.ta.Ma="__ko_proto__";P[T]=S.ta,S.O=function(e){if((e="function"==typeof e&&e[T])&&e!==P[T]&&e!==S.o.fn[T])throw Error("Invalid object that looks like an observable
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 74 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 6e 29 3b 69 66 28 74 29 7b 76 61 72 20 72 2c 6f 3d 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 2c 69 3d 6f 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 3b 69 66 28 69 29 7b 66 6f 72 28 3b 72 3d 74 3b 29 74 3d 53 2e 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 72 29 2c 69 2e 63 61 6c 6c 28 6f 2c 72 29 3b 74 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 6e 29 7d 66 6f 72 28 3b 72 3d 74 3b 29 74 3d 53 2e 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 72 29 2c 66 28 65 2c 72 29 7d 53 2e 69 2e 6d 61 28 6e 2c 53 2e 69 2e 48 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2c 72 3d 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 72 26 26 53 2e 68 2e 53 63 28 6e 29 2c 28 72 7c Data Ascii: ,n){var t=S.h.firstChild(n);if(t){var r,o=S.ga.instance,i=o.preprocessNode;if(i){for(;r=t;)t=S.h.nextSibling(r),i.call(o,r);t=S.h.firstChild(n)}for(;r=t;)t=S.h.nextSibling(r),f(e,r)}S.i.ma(n,S.i.H)}function f(e,n){var t=e,r=1===n.nodeType;r&&S.h.Sc(n),(r\|
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 62 28 72 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 2e 77 2e 63 62 28 72 2c 61 29 29 3a 28 69 3d 6f 28 6e 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 56 61 6c 75 65 22 29 2c 6e 29 2c 53 2e 77 2e 63 62 28 72 2c 53 2e 61 2e 66 28 69 29 29 2c 6e 3d 6f 28 6e 2c 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 54 65 78 74 22 29 2c 69 29 2c 53 2e 61 2e 42 62 28 72 2c 6e 29 29 2c 5b 72 5d 7d 29 2c 6e 2c 63 29 2c 6c 7c 7c 28 73 3f 70 2e 6c 65 6e 67 74 68 26 26 72 28 29 2e 6c 65 6e 67 74 68 3c 70 2e 6c 65 6e 67 74 68 3a 70 2e 6c 65 6e 67 74 68 26 26 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3f 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 21 3d 3d 70 5b 30 5d 3a 70 2e Data Ascii: b(r,t.get("optionsCaption")),S.w.cb(r,a)):(i=o(n,t.get("optionsValue"),n),S.w.cb(r,S.a.f(i)),n=o(n,t.get("optionsText"),i),S.a.Bb(r,n)),[r]}),n,c),l\|\|(s?p.length&&r().length<p.length:p.length&&0<=e.selectedIndex?S.w.M(e.options[e.selectedIndex])!==p[0]:p.
2024-08-28 07:27:32 UTC	16383	IN	Data Raw: 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 76 61 72 20 6f 3d 74 28 37 29 2c 69 3d 74 28 30 29 2c 61 3d 74 28 31 29 2c 73 3d 74 28 31 37 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 Data Ascii: (r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}var o=t(7),i=t(0),a=t(1),s=t(17),u=t(9).getIns
2024-08-28 07:27:32 UTC	10573	IN	Data Raw: 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 6e 67 4d 6f 64 65 22 29 7c 7c 28 73 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 63 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 4e 6f 6e 65 29 2c 73 2e 65 76 65 6e 74 49 64 29 7b 28 61 3d 7b 7d 29 2e 65 76 65 6e 74 54 79 70 65 3d 74 2c 61 2e 65 76 65 6e 74 49 64 3d 73 2e 65 76 65 6e 74 49 64 2c 61 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 73 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 63 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 41 70 69 52 65 71 75 65 73 74 3b 76 61 72 20 6c 3d 7b 7d 3b 6c 2e 72 65 71 75 65 73 74 54 69 6d 65 6f 75 74 3d 72 2c 6f 26 26 28 6c 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 6f 29 2c 6c 2e 72 65 71 75 65 73 74 54 79 70 65 3d 74 2c 69 26 26 28 6c 2e 6e 6f 43 61 6c 6c 62 61 63 6b 3d 21 30 Data Ascii: ntId,s.hasOwnProperty("hidingMode")\|\|(s.hidingMode=c.HidingMode.None),s.eventId){(a={}).eventType=t,a.eventId=s.eventId,a.eventLevel=s.eventLevel\|\|c.EventLevel.ApiRequest;var l={};l.requestTimeout=r,o&&(l.contentType=o),l.requestType=t,i&&(l.noCallback=!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49832	13.107.246.42	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:33 UTC	633	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:34 UTC	798	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:34 GMT Content-Type: application/x-javascript Content-Length: 51912 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:37 GMT ETag: 0x8DCB563D601E66B x-ms-request-id: 685929b1-501e-001c-041b-f9e689000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072733Z-15c77d89844sw96qqartrpgkmc0000000keg000000000yfw x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-08-28 07:27:34 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 69 5b e3 48 d2 28 fa fd fc 0a a3 99 4b 4b 6d 61 bc b0 ca a5 f2 eb 02 aa 8a 6e b6 c1 d0 dd 33 c0 f0 c8 b6 6c d4 65 24 bf 92 0c 45 1b 9f df 7e 62 c9 4c a5 64 99 aa 9a f7 3c f7 7e b8 bd 18 29 33 32 95 4b 44 64 44 64 64 e4 e6 cf 6b ff ab f2 73 65 e3 fb ff a9 f4 ae ba 97 57 95 f3 8f 95 ab cf c7 97 87 95 0b 78 fb 67 e5 ec fc ea f8 e0 e8 fb eb c1 8f e2 ff 57 0f 41 52 19 05 13 bf 02 7f fb 5e e2 0f 2b 51 58 89 e2 4a 10 0e a2 78 1a c5 5e ea 27 95 47 f8 8d 03 6f 52 19 c5 d1 63 25 7d f0 2b d3 38 fa d3 1f a4 49 65 12 24 29 14 ea fb 93 e8 b9 62 42 75 f1 b0 72 e1 c5 e9 4b e5 f8 c2 aa 41 fd 3e d4 16 8c 83 10 4a 0f a2 e9 0b 3c 3f a4 95 30 4a 83 81 5f f1 c2 21 d5 36 81 97 30 f1 2b b3 70 e8 c7 95 e7 87 60 f0 50 39 0d 06 71 94 44 a3 b4 12 Data Ascii: i[H(KKman3le$E~bLd<~)32KDdDddkseWxgWAR^+QXJx^'GoRc%}+8Ie$)bBurKA>J<?0J_!60+p`P9qD
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: c1 14 d0 b7 f0 d5 d2 fd e5 3a 11 12 78 ec 48 8b 3c bc 65 76 63 6e 35 57 84 73 1f 91 57 07 f6 c8 15 8c 0a 9f 2d 7b f0 35 b7 0e 0d 84 9a 4a 99 b8 df 82 05 f0 47 ad 44 83 af 65 8e ae ff e9 fa 62 d9 68 c7 bd b3 9d f9 e2 36 b9 fb f9 ef 9b d9 e7 b3 0b ea 6f 6f cd 8e 73 83 ab eb 66 7f 14 c6 e9 dd eb 0c 0f 10 78 1b a3 ee c6 c7 bb f9 d6 c2 82 35 dd f8 2f 23 73 0f d9 34 6e fe 8d f0 e1 6d 7c f7 b3 f1 9a c6 33 ff 95 ee 61 a7 4d b3 d7 8d ce ed b0 0a 75 de d6 c8 51 07 6b f7 8f ee 6e aa b7 1b 77 98 63 75 b0 be 3b bd 3e 00 f9 f7 ab f3 6a 5b 58 2a f9 f9 f6 c6 aa 22 8c 61 29 a7 c5 3f 5d 3c f4 6b 1a a6 51 c5 d6 57 0d cb 58 b1 6e d1 cc 74 68 4e 11 3f ff 5c 60 3d ce 9f ed 0c b9 b5 a8 34 02 c5 09 33 0d 44 64 4d e2 76 f1 c7 66 69 bf 26 a4 7d 4a 43 17 fe a5 03 b0 6c 78 e5 6d d1 Data Ascii: :xH<evcn5WsW-{5JGDebh6oosfx5/#s4nm\|3aMuQknwcu;>j[X*"a)?]<kQWXnthN?\`=43DdMvfi&}JClxm
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: e2 09 ef e6 61 b2 e6 64 0d 53 8e 98 a0 4e 4c 15 ae 1c a7 25 f3 17 51 25 6c 2e 37 f9 a2 c7 c9 53 6d ae e9 68 ea 7a 61 ce d9 73 af a2 69 5f da bf ee bb 85 4b 2f 49 c2 83 3e 87 82 9c 1e ad 87 17 18 95 3e 97 af 9c c1 a8 0a f7 8a 2d f6 fe 05 9c fc fb ca 71 58 40 be 96 55 cf d7 58 ce a9 e5 0a 90 c8 b3 06 a4 9c 22 db bb 7e 7e c2 0f 4f 3d 57 72 7c db 3b df 12 fc 13 84 f0 6b d5 2b e6 e4 28 38 20 5e 01 d1 71 3a ba 16 a0 c6 ea fb ee 22 c2 ef 7d f1 57 f0 fb 9a b3 88 ef 6b cf 22 e6 06 65 b2 33 1b 49 4a f1 79 d6 05 23 26 af eb f5 c8 79 28 ef d6 8c 71 d4 8c 53 b1 00 ad 88 20 a6 2a fa 84 33 fd e0 d5 b8 d7 38 40 b2 0b bc 8a e3 80 71 80 f9 8c d1 40 06 a2 be 56 4f 9a fe 48 ac 33 ce 04 79 d8 0a 5b 29 40 69 fb f4 69 24 21 d2 7e 4d 44 10 ce 21 30 40 6e d4 5b b8 86 e3 a4 e7 b7 Data Ascii: adSNL%Q%l.7Smhzasi_K/I>>-qX@UX"~~O=Wr\|;k+(8 ^q:"}Wk"e3IJy#&y(qS *38@q@VOH3y[)@ii$!~MD!0@n[
2024-08-28 07:27:34 UTC	3558	IN	Data Raw: d0 23 82 83 3f 3e 6e 10 b3 6a 43 33 68 e7 22 d7 e9 57 11 3b fe dd b5 89 14 df f7 35 d6 4b 58 b9 df fe 95 a8 2c ed 31 3a 01 b3 7c 59 86 5b 0b cb a4 18 a4 af e3 cf 34 91 93 cb 17 79 f1 cf 2c 9f 5c d2 f0 f2 96 34 e2 40 09 a0 55 d1 06 42 4c 45 d9 a3 f4 8f e4 07 de 9f c5 31 1d a9 ee 9f ad d1 f3 db a0 11 02 a5 5e 9b b2 f6 37 6b 4b ff da d0 96 32 88 47 aa f5 9b 08 28 7f 59 55 0b 78 4b f9 4b a5 10 1d 66 81 9a 20 de 3c 77 50 22 85 12 53 e9 ff 00 6b dc 0f 07 c7 8e c0 e6 4d a2 2c 90 cd 78 f7 21 2b b5 d9 38 dc d9 f3 91 09 93 64 b9 5d ff 39 75 21 fc ce 57 2b 31 fc eb 9a aa 67 ee 23 ba 7b ab 97 5d e8 c4 9f e2 cf a5 fc 70 7c 15 44 23 77 13 31 28 bf d5 27 97 dc ad e4 87 83 75 25 63 1d dd 9d 83 97 61 b8 2b 6e bc e8 66 7b 42 2d 1c 67 58 b3 5c 31 4c aa e2 c9 d0 8e 9c 74 2b Data Ascii: #?>njC3h"W;5KX,1:\|Y[4y,\4@UBLE1^7kK2G(YUxKKf <wP"SkM,x!+8d]9u!W+1g#{]p\|D#w1('u%ca+nf{B-gX\1Lt+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49844	13.107.246.64	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:33 UTC	385	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:34 UTC	609	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:34 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:08 GMT ETag: "1daf5236222e5a1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072733Z-15c77d898445pmpjghgxza2m7n0000000hyg0000000056qb x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-08-28 07:27:34 UTC	15775	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 2c 74 2e 6f 6e 43 6c 69 63 6b 26 26 28 74 2e 6f 6e Data Ascii: unce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault()),t.onClick&&(t.on
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 6c 6f 61 64 54 69 6d 65 29 2c 74 69 6d 69 6e Data Ascii: n{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.round(e.loadTime),timin
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 Data Ascii: x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x2
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 61 5c 78 33 61 66 6f 63 75 73 2c 2e 6d 65 63 74 72 6c Data Ascii: ctrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu ul a\x3afocus,.mectrl
2024-08-28 07:27:34 UTC	16384	IN	Data Raw: 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 69 6e 64 69 67 6f 5c 78 37 64 5c 78 Data Ascii: tion.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-color\x3aindigo\x7d\x
2024-08-28 07:27:34 UTC	3074	IN	Data Raw: 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c Data Ascii: .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x3boutline-color\x3a\

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49846	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 50 7a 41 41 43 4a 39 68 30 61 6f 6a 62 73 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 38 66 34 61 61 66 38 37 61 31 31 38 63 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ZPzAACJ9h0aojbsZ.1Context: 548f4aaf87a118c8
2024-08-28 07:27:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 5a 50 7a 41 41 43 4a 39 68 30 61 6f 6a 62 73 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 38 66 34 61 61 66 38 37 61 31 31 38 63 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 39 58 7a 6e 57 43 36 61 55 4b 51 2f 38 57 34 53 59 33 38 49 4b 69 6e 47 73 2f 45 51 49 62 6d 4c 76 70 35 38 73 2f 53 67 2f 36 39 2b 66 46 73 6e 71 4d 75 30 46 54 58 45 6c 6c 4e 6d 35 72 57 52 44 6e 66 74 69 69 6b 34 42 38 73 63 55 52 74 6e 6d 61 56 63 37 71 63 77 55 39 2b 47 59 30 55 63 38 4c 47 76 4f 4a 61 46 52 34 4e 59 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: ZPzAACJ9h0aojbsZ.2Context: 548f4aaf87a118c8<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT9XznWC6aUKQ/8W4SY38IKinGs/EQIbmLvp58s/Sg/69+fFsnqMu0FTXEllNm5rWRDnftiik4B8scURtnmaVc7qcwU9+GY0Uc8LGvOJaFR4NY
2024-08-28 07:27:34 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 5a 50 7a 41 41 43 4a 39 68 30 61 6f 6a 62 73 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 34 38 66 34 61 61 66 38 37 61 31 31 38 63 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: ZPzAACJ9h0aojbsZ.3Context: 548f4aaf87a118c8
2024-08-28 07:27:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 57 35 59 31 31 43 4b 65 45 69 43 41 5a 38 46 30 5a 42 66 47 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yW5Y11CKeEiCAZ8F0ZBfGA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49848	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:35 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 76 4f 33 77 43 47 70 62 30 79 6d 52 33 50 73 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 39 66 38 30 39 37 32 39 66 38 34 61 39 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tvO3wCGpb0ymR3Ps.1Context: c69f809729f84a9b
2024-08-28 07:27:35 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:35 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 76 4f 33 77 43 47 70 62 30 79 6d 52 33 50 73 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 39 66 38 30 39 37 32 39 66 38 34 61 39 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 69 4e 77 7a 71 38 38 50 5a 4b 47 7a 4a 49 6a 73 5a 55 6b 67 46 76 66 30 4a 59 6b 6e 6d 4e 67 41 38 48 6b 77 44 77 72 42 37 77 6d 4d 2f 6d 76 7a 77 6d 48 70 38 64 37 58 79 55 70 32 75 79 72 75 6e 37 4a 44 6b 75 6f 53 44 53 71 44 55 44 56 68 73 41 47 79 37 61 50 58 50 48 66 6a 45 4a 78 5a 30 78 36 71 31 6a 6b 54 45 2f 6a 6f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tvO3wCGpb0ymR3Ps.2Context: c69f809729f84a9b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWiNwzq88PZKGzJIjsZUkgFvf0JYknmNgA8HkwDwrB7wmM/mvzwmHp8d7XyUp2uyrun7JDkuoSDSqDUDVhsAGy7aPXPHfjEJxZ0x6q1jkTE/jo
2024-08-28 07:27:35 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 76 4f 33 77 43 47 70 62 30 79 6d 52 33 50 73 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 39 66 38 30 39 37 32 39 66 38 34 61 39 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tvO3wCGpb0ymR3Ps.3Context: c69f809729f84a9b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-28 07:27:35 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:35 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 42 64 69 38 73 4c 48 55 30 43 71 73 33 7a 77 4a 62 30 54 52 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: cBdi8sLHU0Cqs3zwJb0TRA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49860	13.107.246.60	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:35 UTC	408	OUT	GET /shared/1.0/content/js/FetchSessions_Core_VRFGv7Cn5qZDpUQIsx-pnA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:35 UTC	818	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:35 GMT Content-Type: application/x-javascript Content-Length: 51912 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:37 GMT ETag: 0x8DCB563D601E66B x-ms-request-id: 685929b1-501e-001c-041b-f9e689000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072735Z-15c77d89844678z85cxpgnswe00000000k3g000000002ysm x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:27:35 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 69 5b e3 48 d2 28 fa fd fc 0a a3 99 4b 4b 6d 61 bc b0 ca a5 f2 eb 02 aa 8a 6e b6 c1 d0 dd 33 c0 f0 c8 b6 6c d4 65 24 bf 92 0c 45 1b 9f df 7e 62 c9 4c a5 64 99 aa 9a f7 3c f7 7e b8 bd 18 29 33 32 95 4b 44 64 44 64 64 e4 e6 cf 6b ff ab f2 73 65 e3 fb ff a9 f4 ae ba 97 57 95 f3 8f 95 ab cf c7 97 87 95 0b 78 fb 67 e5 ec fc ea f8 e0 e8 fb eb c1 8f e2 ff 57 0f 41 52 19 05 13 bf 02 7f fb 5e e2 0f 2b 51 58 89 e2 4a 10 0e a2 78 1a c5 5e ea 27 95 47 f8 8d 03 6f 52 19 c5 d1 63 25 7d f0 2b d3 38 fa d3 1f a4 49 65 12 24 29 14 ea fb 93 e8 b9 62 42 75 f1 b0 72 e1 c5 e9 4b e5 f8 c2 aa 41 fd 3e d4 16 8c 83 10 4a 0f a2 e9 0b 3c 3f a4 95 30 4a 83 81 5f f1 c2 21 d5 36 81 97 30 f1 2b b3 70 e8 c7 95 e7 87 60 f0 50 39 0d 06 71 94 44 a3 b4 12 Data Ascii: i[H(KKman3le$E~bLd<~)32KDdDddkseWxgWAR^+QXJx^'GoRc%}+8Ie$)bBurKA>J<?0J_!60+p`P9qD
2024-08-28 07:27:35 UTC	16384	IN	Data Raw: 42 f2 c4 88 4a 90 3f a2 e1 24 df e3 e8 fb f0 30 82 09 83 96 c1 14 d0 b7 f0 d5 d2 fd e5 3a 11 12 78 ec 48 8b 3c bc 65 76 63 6e 35 57 84 73 1f 91 57 07 f6 c8 15 8c 0a 9f 2d 7b f0 35 b7 0e 0d 84 9a 4a 99 b8 df 82 05 f0 47 ad 44 83 af 65 8e ae ff e9 fa 62 d9 68 c7 bd b3 9d f9 e2 36 b9 fb f9 ef 9b d9 e7 b3 0b ea 6f 6f cd 8e 73 83 ab eb 66 7f 14 c6 e9 dd eb 0c 0f 10 78 1b a3 ee c6 c7 bb f9 d6 c2 82 35 dd f8 2f 23 73 0f d9 34 6e fe 8d f0 e1 6d 7c f7 b3 f1 9a c6 33 ff 95 ee 61 a7 4d b3 d7 8d ce ed b0 0a 75 de d6 c8 51 07 6b f7 8f ee 6e aa b7 1b 77 98 63 75 b0 be 3b bd 3e 00 f9 f7 ab f3 6a 5b 58 2a f9 f9 f6 c6 aa 22 8c 61 29 a7 c5 3f 5d 3c f4 6b 1a a6 51 c5 d6 57 0d cb 58 b1 6e d1 cc 74 68 4e 11 3f ff 5c 60 3d ce 9f ed 0c b9 b5 a8 34 02 c5 09 33 0d 44 64 4d e2 76 Data Ascii: BJ?$0:xH<evcn5WsW-{5JGDebh6oosfx5/#s4nm\|3aMuQknwcu;>j[X*"a)?]<kQWXnthN?\`=43DdMv
2024-08-28 07:27:35 UTC	16384	IN	Data Raw: 99 f3 f8 9f 9c 03 ab 09 49 6d 81 9f 79 cd 3f ae 4f c5 70 ad e2 09 ef e6 61 b2 e6 64 0d 53 8e 98 a0 4e 4c 15 ae 1c a7 25 f3 17 51 25 6c 2e 37 f9 a2 c7 c9 53 6d ae e9 68 ea 7a 61 ce d9 73 af a2 69 5f da bf ee bb 85 4b 2f 49 c2 83 3e 87 82 9c 1e ad 87 17 18 95 3e 97 af 9c c1 a8 0a f7 8a 2d f6 fe 05 9c fc fb ca 71 58 40 be 96 55 cf d7 58 ce a9 e5 0a 90 c8 b3 06 a4 9c 22 db bb 7e 7e c2 0f 4f 3d 57 72 7c db 3b df 12 fc 13 84 f0 6b d5 2b e6 e4 28 38 20 5e 01 d1 71 3a ba 16 a0 c6 ea fb ee 22 c2 ef 7d f1 57 f0 fb 9a b3 88 ef 6b cf 22 e6 06 65 b2 33 1b 49 4a f1 79 d6 05 23 26 af eb f5 c8 79 28 ef d6 8c 71 d4 8c 53 b1 00 ad 88 20 a6 2a fa 84 33 fd e0 d5 b8 d7 38 40 b2 0b bc 8a e3 80 71 80 f9 8c d1 40 06 a2 be 56 4f 9a fe 48 ac 33 ce 04 79 d8 0a 5b 29 40 69 fb f4 69 Data Ascii: Imy?OpadSNL%Q%l.7Smhzasi_K/I>>-qX@UX"~~O=Wr\|;k+(8 ^q:"}Wk"e3IJy#&y(qS *38@q@VOH3y[)@ii
2024-08-28 07:27:35 UTC	3578	IN	Data Raw: 49 fc f9 ee 7f fd c0 22 b8 1b db c0 f6 ae 38 19 b9 7c a8 e0 d0 23 82 83 3f 3e 6e 10 b3 6a 43 33 68 e7 22 d7 e9 57 11 3b fe dd b5 89 14 df f7 35 d6 4b 58 b9 df fe 95 a8 2c ed 31 3a 01 b3 7c 59 86 5b 0b cb a4 18 a4 af e3 cf 34 91 93 cb 17 79 f1 cf 2c 9f 5c d2 f0 f2 96 34 e2 40 09 a0 55 d1 06 42 4c 45 d9 a3 f4 8f e4 07 de 9f c5 31 1d a9 ee 9f ad d1 f3 db a0 11 02 a5 5e 9b b2 f6 37 6b 4b ff da d0 96 32 88 47 aa f5 9b 08 28 7f 59 55 0b 78 4b f9 4b a5 10 1d 66 81 9a 20 de 3c 77 50 22 85 12 53 e9 ff 00 6b dc 0f 07 c7 8e c0 e6 4d a2 2c 90 cd 78 f7 21 2b b5 d9 38 dc d9 f3 91 09 93 64 b9 5d ff 39 75 21 fc ce 57 2b 31 fc eb 9a aa 67 ee 23 ba 7b ab 97 5d e8 c4 9f e2 cf a5 fc 70 7c 15 44 23 77 13 31 28 bf d5 27 97 dc ad e4 87 83 75 25 63 1d dd 9d 83 97 61 b8 2b 6e bc Data Ascii: I"8\|#?>njC3h"W;5KX,1:\|Y[4y,\4@UBLE1^7kK2G(YUxKKf <wP"SkM,x!+8d]9u!W+1g#{]p\|D#w1('u%ca+n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49856	152.199.21.175	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:36 UTC	602	OUT	GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:36 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7316808 Cache-Control: public, max-age=31536000 Content-MD5: PS13nXT03y6zfgtuT9Kz1Q== Content-Type: application/x-javascript Date: Wed, 28 Aug 2024 07:27:36 GMT Etag: 0x8DC7F9D3D11D389 Last-Modified: Wed, 29 May 2024 05:07:29 GMT Server: ECAcc (lhc/7956) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7348d602-c01e-00d3-078f-b61346000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-08-28 07:27:36 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-08-28 07:27:36 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49872	152.199.21.175	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:37 UTC	399	OUT	GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:37 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7316809 Cache-Control: public, max-age=31536000 Content-MD5: PS13nXT03y6zfgtuT9Kz1Q== Content-Type: application/x-javascript Date: Wed, 28 Aug 2024 07:27:37 GMT Etag: 0x8DC7F9D3D11D389 Last-Modified: Wed, 29 May 2024 05:07:29 GMT Server: ECAcc (lhc/7956) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7348d602-c01e-00d3-078f-b61346000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-08-28 07:27:37 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-08-28 07:27:37 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	54672	13.107.246.60	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:57 UTC	1133	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54
2024-08-28 07:27:57 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:57 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 1343 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 435d5f20-601e-0058-3018-f9f8c5000000 x-ms-version: 2009-09-19 x-azure-ref: 20240828T072757Z-15c77d89844vht6zmafxh7wdkg0000000mm0000000004uwn Accept-Ranges: bytes
2024-08-28 07:27:57 UTC	16383	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-08-28 07:27:57 UTC	16383	IN	Data Raw: 61 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f Data Ascii: a-label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mo
2024-08-28 07:27:57 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-08-28 07:27:57 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	54694	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:58 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 52 2f 30 49 56 38 77 39 6b 32 77 2f 67 2b 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 37 66 65 34 31 64 39 37 30 65 62 66 33 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2R/0IV8w9k2w/g+L.1Context: 5f7fe41d970ebf3c
2024-08-28 07:27:58 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:58 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 52 2f 30 49 56 38 77 39 6b 32 77 2f 67 2b 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 37 66 65 34 31 64 39 37 30 65 62 66 33 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 39 58 7a 6e 57 43 36 61 55 4b 51 2f 38 57 34 53 59 33 38 49 4b 69 6e 47 73 2f 45 51 49 62 6d 4c 76 70 35 38 73 2f 53 67 2f 36 39 2b 66 46 73 6e 71 4d 75 30 46 54 58 45 6c 6c 4e 6d 35 72 57 52 44 6e 66 74 69 69 6b 34 42 38 73 63 55 52 74 6e 6d 61 56 63 37 71 63 77 55 39 2b 47 59 30 55 63 38 4c 47 76 4f 4a 61 46 52 34 4e 59 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2R/0IV8w9k2w/g+L.2Context: 5f7fe41d970ebf3c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAT9XznWC6aUKQ/8W4SY38IKinGs/EQIbmLvp58s/Sg/69+fFsnqMu0FTXEllNm5rWRDnftiik4B8scURtnmaVc7qcwU9+GY0Uc8LGvOJaFR4NY
2024-08-28 07:27:58 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 32 52 2f 30 49 56 38 77 39 6b 32 77 2f 67 2b 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 37 66 65 34 31 64 39 37 30 65 62 66 33 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 2R/0IV8w9k2w/g+L.3Context: 5f7fe41d970ebf3c
2024-08-28 07:27:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4b 2f 39 46 41 44 32 49 79 45 79 62 73 56 59 6c 41 64 6b 50 48 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: K/9FAD2IyEybsVYlAdkPHA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	54701	13.107.246.61	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:58 UTC	957	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54
2024-08-28 07:27:58 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:58 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 1344 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 435d5f20-601e-0058-3018-f9f8c5000000 x-ms-version: 2009-09-19 x-azure-ref: 20240828T072758Z-15c77d89844j2tjq56kca6f6zs0000000gsg000000004hc2 Accept-Ranges: bytes
2024-08-28 07:27:58 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-08-28 07:27:58 UTC	16382	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-08-28 07:27:58 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-08-28 07:27:58 UTC	3568	IN	Data Raw: 74 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 Data Ascii: t("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentCha

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	54695	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:58 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 45 39 65 62 6b 42 6b 6a 54 55 69 75 50 63 32 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 33 35 62 39 61 63 62 30 32 36 32 34 30 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: E9ebkBkjTUiuPc2m.1Context: 3835b9acb026240b
2024-08-28 07:27:58 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-28 07:27:58 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 45 39 65 62 6b 42 6b 6a 54 55 69 75 50 63 32 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 33 35 62 39 61 63 62 30 32 36 32 34 30 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 69 4e 77 7a 71 38 38 50 5a 4b 47 7a 4a 49 6a 73 5a 55 6b 67 46 76 66 30 4a 59 6b 6e 6d 4e 67 41 38 48 6b 77 44 77 72 42 37 77 6d 4d 2f 6d 76 7a 77 6d 48 70 38 64 37 58 79 55 70 32 75 79 72 75 6e 37 4a 44 6b 75 6f 53 44 53 71 44 55 44 56 68 73 41 47 79 37 61 50 58 50 48 66 6a 45 4a 78 5a 30 78 36 71 31 6a 6b 54 45 2f 6a 6f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: E9ebkBkjTUiuPc2m.2Context: 3835b9acb026240b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWiNwzq88PZKGzJIjsZUkgFvf0JYknmNgA8HkwDwrB7wmM/mvzwmHp8d7XyUp2uyrun7JDkuoSDSqDUDVhsAGy7aPXPHfjEJxZ0x6q1jkTE/jo
2024-08-28 07:27:58 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 45 39 65 62 6b 42 6b 6a 54 55 69 75 50 63 32 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 38 33 35 62 39 61 63 62 30 32 36 32 34 30 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: E9ebkBkjTUiuPc2m.3Context: 3835b9acb026240b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-28 07:27:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-28 07:27:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 2f 6d 56 66 4b 4e 77 34 30 57 42 67 43 65 6a 61 6f 30 30 2b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8/mVfKNw40WBgCejao00+g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	54671	13.107.246.45	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:27:59 UTC	562	OUT	GET /meversion?partner=OfficeProducts&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:27:59 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:27:59 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Wed, 28 Aug 2024 07:30:33 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072759Z-15c77d89844lpwvj5ntbmq1cg80000000kw00000000059z3 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:27:59 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 66 66 69 63 65 70 72 6f 64 75 63 74 73 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-28 07:27:59 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	54722	13.107.246.64	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:00 UTC	385	OUT	GET /meversion?partner=OfficeProducts&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:00 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:00 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Wed, 28 Aug 2024 07:30:33 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072800Z-15c77d89844zfzwvumakpphgy00000000m2000000000am48 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-08-28 07:28:00 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 32 32 38 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 66 66 69 63 65 70 72 6f 64 75 63 74 73 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-08-28 07:28:00 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	54795	13.107.246.64	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:08 UTC	442	OUT	GET /scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=195979-195979 If-Range: "1daef8f5cfb4c82"
2024-08-28 07:28:08 UTC	608	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:08 GMT Content-Type: application/javascript Content-Length: 211842 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 22 Aug 2024 23:12:06 GMT ETag: "1daf52360f10482" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240828T072808Z-15c77d89844kcg9tenmhtd29e40000000fqg00000000010s x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:28:08 UTC	15776	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 69 29 72 65 74 75 72 6e 20 74 7c 7c 22 Data Ascii: =arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"number"==i)return t\|\|"
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 53 Data Ascii: \|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}function be(t,e,r){var n=S
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 65 2e 6b 65 79 64 6f 77 6e Data Ascii: s,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.keydownHandler=e.keydown
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 65 6d 65 6d 62 65 72 65 64 41 63 63 6f 75 6e 74 73 22 3a 72 65 Data Ascii: Idp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getRememberedAccounts":re
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 Data Ascii: <mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){case"signOutFromIdp":r
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c 72 29 7d 7d 72 65 74 75 72 6e 20 48 28 7b 7d 2c 6c 29 3b 63 61 Data Ascii: ;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,r)}}return H({},l);ca
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 2e 67 6c 79 70 68 5f 6d 6f 72 65 5c 78 37 62 77 69 64 74 68 5c Data Ascii: \x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d.glyph_more\x7bwidth\
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 36 34 5c 78 32 37 20 73 74 72 6f 6b 65 5c 78 33 64 5c 78 32 37 Data Ascii: account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64 64\x27 stroke\x3d\x27
2024-08-28 07:28:08 UTC	16384	IN	Data Raw: 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 Data Ascii: fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\x7d\x40media screen a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	54804	54.78.109.69	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:10 UTC	721	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1724830088450 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:10 UTC	824	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:10 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: 0uldwv0qRA0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v065-0128520ac.edge-irl1.demdex.com 13 ms set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:10 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 34 35 34 38 35 39 31 39 30 30 33 31 32 36 31 31 33 34 35 30 30 38 36 39 32 34 36 34 30 34 32 31 35 38 34 32 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56454859190031261134500869246404215842","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	54814	157.240.253.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	660	OUT	GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	54813	157.240.253.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	653	OUT	GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	54812	157.240.253.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	652	OUT	GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	54817	63.140.37.206	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	748	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=56454859190031261134500869246404215842&ts=1724830089405 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	442	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true date: Wed, 28 Aug 2024 07:28:11 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-08-28 07:28:11 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	54815	157.240.253.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	645	OUT	GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	54818	54.171.26.222	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	754	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: mscom.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917
2024-08-28 07:28:11 UTC	607	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:11 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 1vVBdPJkT8o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Mon, 19 Aug 2024 12:39:49 GMT DCS: dcs-prod-irl1-2-v065-0ce9f7ae2.edge-irl1.demdex.com 2 ms
2024-08-28 07:28:11 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	54820	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	519	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1724830088450 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917
2024-08-28 07:28:11 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:11 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: T7SHhxbTSDM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v065-0128520ac.edge-irl1.demdex.com 9 ms set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:11 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:11 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 34 35 34 38 35 39 31 39 30 30 33 31 32 36 31 31 33 34 35 30 30 38 36 39 32 34 36 34 30 34 32 31 35 38 34 32 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56454859190031261134500869246404215842","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	54676	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:11 UTC	519	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:11 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 49706 Content-Type: application/javascript Last-Modified: Sat, 13 Jul 2024 20:42:16 GMT Accept-Ranges: bytes ETag: "044982565d5da1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 26D9B771613247D6990036B2E9DBFD07 Ref B: EWR311000107053 Ref C: 2024-08-28T07:28:11Z Date: Wed, 28 Aug 2024 07:28:11 GMT Connection: close
2024-08-28 07:28:11 UTC	3375	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-08-28 07:28:11 UTC	8192	IN	Data Raw: 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 70 69 64 3a 7b 74 79 70 65 3a 22 6f 62 6a 65 63 74 22 7d 2c 22 70 69 64 2e 65 6d 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 7d 2c 22 70 69 64 2e 65 6d 61 69 6c 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 2c 62 65 61 63 6f 6e 3a 22 65 6d 22 7d 2c 22 70 69 64 2e 70 68 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 7d 2c 22 70 69 64 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 2c 62 65 61 63 6f 6e 3a 22 70 68 22 7d 7d 3b 74 68 69 73 2e 6b 6e 6f 77 6e 45 76 65 6e 74 73 3d 7b 61 64 64 5f 70 61 79 6d 65 6e 74 5f 69 6e 66 6f 3a 5b 5d 2c 61 64 64 5f 74 6f 5f 63 61 72 74 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 5d 2c Data Ascii: ,"promotions.name":{},pid:{type:"object"},"pid.em":{type:"pid"},"pid.email":{type:"pid",beacon:"em"},"pid.ph":{type:"pid"},"pid.phone_number":{type:"pid",beacon:"ph"}};this.knownEvents={add_payment_info:[],add_to_cart:["revenue_value","currency","items"],
2024-08-28 07:28:11 UTC	4441	IN	Data Raw: 43 6f 6e 74 61 69 6e 65 72 3d 6f 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 3d 3d 21 30 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 74 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 69 6d 67 41 6c 74 3d 6f 2e 61 6c 74 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 22 29 26 26 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 26 26 74 79 70 65 6f 66 20 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 61 72 69 74 79 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 Data Ascii: Container=o.disableContainer===!0);o.hasOwnProperty("alt")&&(this.uetConfig.imgAlt=o.alt);o.hasOwnProperty("clarityProjectId")&&o.clarityProjectId&&typeof o.clarityProjectId=="string"&&(n=document.createElement("script"),n.src="https://clarity.microsoft.c
2024-08-28 07:28:11 UTC	8192	IN	Data Raw: 68 69 73 2e 66 69 72 65 50 69 64 45 76 65 6e 74 28 65 2e 70 69 64 29 29 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 63 6f 6e 73 65 6e 74 22 29 7b 69 66 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 3d 6e 5b 31 5d 5b 31 5d 2c 66 3d 6e 5b 31 5d 5b 30 5d 2c 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 3d 3d 3d 22 64 65 66 61 75 6c 74 22 3f 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 5f 73 74 6f 72 61 67 65 22 29 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 61 64 53 74 6f 72 61 67 65 55 70 64 61 74 65 64 3d 3d 3d 21 31 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 Data Ascii: his.firePidEvent(e.pid)))}else if(n[0]==="consent"){if(this.uetConfig.consent.enabled=!0,t=n[1][1],f=n[1][0],t===null\|\|typeof t!="object")return;f==="default"?(t.hasOwnProperty("ad_storage")&&this.uetConfig.consent.adStorageUpdated===!1&&(this.uetConfig.c
2024-08-28 07:28:11 UTC	8192	IN	Data Raw: 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 72 29 7d 74 68 72 6f 77 20 6e 3b 7d 3b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 30 2c 66 3d 74 2c 65 3d 69 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 69 3d 3d 3d 30 3f 21 30 3a 21 31 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 21 3d 3d 2d 31 26 26 28 66 3d 74 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 22 29 29 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 28 69 73 4e 61 4e 28 66 29 7c 7c 69 73 4e 61 4e 28 75 29 7c 7c 65 26 26 75 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 21 3d 3d 2d 31 29 26 26 74 68 69 73 2e 74 68 72 6f 77 Data Ascii: this.fireBeaconImg(r)}throw n;};this.validateValue=function(n,t,i,r){var u=0,f=t,e=i===undefined\|\|i===0?!0:!1;return t.toString().indexOf(",")!==-1&&(f=t.replace(/,/g,"")),u=parseFloat(f),(isNaN(f)\|\|isNaN(u)\|\|e&&u.toString().indexOf(".")!==-1)&&this.throw
2024-08-28 07:28:11 UTC	8192	IN	Data Raw: 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 22 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 79 70 65 6f 66 20 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 7b 65 6d 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 65 6d 61 69 6c 2c 70 68 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 7d 29 2c 72 26 26 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 Data Ascii: Config.gtagPid===!0&&"enhanced_conversion_data"in window&&typeof enhanced_conversion_data=="object"&&(this.pageLevelParams.pid={em:window.enhanced_conversion_data.email,ph:window.enhanced_conversion_data.phone_number}),r&&this.pageLevelParams.hasOwnProper
2024-08-28 07:28:11 UTC	8192	IN	Data Raw: 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 55 65 74 45 76 65 6e 74 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 75 65 74 45 76 65 6e 74 3a 72 7d 7d 29 2c 74 68 69 73 2e 69 6e 76 69 73 69 62 6c 65 44 69 76 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 3b 74 68 69 73 2e 66 69 72 65 50 61 67 65 53 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 3d 3d 21 31 26 Data Ascii: &&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEvent("UetEvent",{bubbles:!0,detail:{uetEvent:r}}),this.invisibleDiv.dispatchEvent(s))}catch(h){}};this.firePageShow=function(n){this.uetConfig.disableVisibilityEvents===!1&
2024-08-28 07:28:11 UTC	930	IN	Data Raw: 45 78 74 65 72 6e 61 6c 4d 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 6e 29 26 26 6e 2e 6d 61 74 63 68 28 2f 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 38 7d 2d 3f 28 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 2d 3f 29 7b 33 7d 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 31 32 7d 24 2f 29 26 26 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 3d 6e 2c 74 68 69 73 2e 6d 69 64 4f 76 65 72 72 69 64 65 3d 21 30 29 7d 3b 74 68 69 73 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 2e 62 6c 6f 62 3d 6e 2c 74 68 69 73 Data Ascii: ExternalMid=function(n){this.stringExists(n)&&n.match(/^[0-9a-fA-F]{8}-?([0-9a-fA-F]{4}-?){3}[0-9a-fA-F]{12}$/)&&(this.beaconParams.mid=n,this.midOverride=!0)};this.setUserSignals=function(n){typeof n=="object"&&n!==null&&(this.uetConfig.cusig.blob=n,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	54828	157.240.252.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	423	OUT	GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	54830	216.58.206.34	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	861	OUT	GET /pagead/viewthroughconversion/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	997	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 28 Aug 2024 07:28:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDpaXnfUeW4IogxBTg8KWPwDJ4t7tFA0bvMJQ&random=2221103673 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 28-Aug-2024 07:43:12 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-28 07:28:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	54829	54.78.109.69	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	988	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=56454859190031261134500869246404215842&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&d_cid_ic=MC1%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&ts=1724830090333 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917
2024-08-28 07:28:12 UTC	823	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: +T9S9TUQSK8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v065-089d90dfe.edge-irl1.demdex.com 9 ms set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:12 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 34 35 34 38 35 39 31 39 30 30 33 31 32 36 31 31 33 34 35 30 30 38 36 39 32 34 36 34 30 34 32 31 35 38 34 32 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56454859190031261134500869246404215842","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	54833	63.140.62.27	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	491	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=56454859190031261134500869246404215842&ts=1724830089405 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Wed, 28 Aug 2024 07:28:12 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-08-28 07:28:12 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	54832	157.240.252.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	415	OUT	GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	54836	35.244.174.68	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	637	OUT	GET /365868.gif?partner_uid=56916935156195165264526806106049391917 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTcQABoNCIyju7YGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=PoliTs6/YjkuWWSkWzaZFqpgkUYP/zrjr0/CbHZL5/0=; Path=/; Domain=rlcdn.com; Expires=Thu, 28 Aug 2025 07:28:12 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 27 Oct 2024 07:28:12 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	54825	157.240.252.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	416	OUT	GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	54827	157.240.252.35	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	408	OUT	GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1724830088508 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1392, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	54831	52.21.67.222	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	719	OUT	GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=112026161 HTTP/1.1 Host: ats.everesttech.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	391	IN	HTTP/1.1 200 Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Set-Cookie: everest_g_v2=g_surferid~Zs7RjAAAxL7TUkdc;path=/;Max-Age=63072000;domain=.everesttech.net;Secure;SameSite=None Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Expires: Wed Aug 28 07:28:12 UTC 2024
2024-08-28 07:28:12 UTC	814	IN	Data Raw: 33 32 37 0d 0a 47 49 46 38 39 61 01 00 01 00 e7 0f 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 Data Ascii: 327GIF89a3f3333f333ff3fffff3f3f3f3333f
2024-08-28 07:28:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	54837	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 49706 Content-Type: application/javascript Last-Modified: Sat, 13 Jul 2024 20:42:16 GMT Accept-Ranges: bytes ETag: "044982565d5da1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 242018029A2146C38A52322C212A7E0B Ref B: EWR311000104049 Ref C: 2024-08-28T07:28:12Z Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close
2024-08-28 07:28:12 UTC	3078	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-08-28 07:28:12 UTC	8192	IN	Data Raw: 74 65 6d 73 2e 69 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6c 69 73 74 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6c 69 73 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 7b 74 79 70 65 3a 22 69 6e 74 65 67 65 72 22 7d 2c 22 69 74 65 6d 73 2e 6c 6f 63 61 74 69 6f 6e 5f 69 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 70 72 69 63 65 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 71 75 61 6e 74 69 74 79 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 76 61 72 69 61 6e 74 22 3a 7b 7d 2c 70 72 6f 6d 6f 74 69 6f 6e 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 70 72 6f 6d 6f Data Ascii: tems.id":{},"items.list_name":{},"items.list_position":{type:"integer"},"items.location_id":{},"items.name":{},"items.price":{type:"number"},"items.quantity":{type:"number"},"items.variant":{},promotions:{type:"array"},"promotions.creative_name":{},"promo
2024-08-28 07:28:12 UTC	4738	IN	Data Raw: 73 2e 70 69 64 3d 6f 2e 70 61 67 65 50 69 64 3a 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 67 74 61 67 50 69 64 22 29 26 26 6f 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 31 3b 6f 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 21 31 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 Data Ascii: s.pid=o.pagePid:o.hasOwnProperty("gtagPid")&&o.gtagPid===!0&&(this.uetConfig.gtagPid=!0);this.uetConfig.enableAutoSpaTracking=!1;o.enableAutoSpaTracking===!0&&(this.uetConfig.enableAutoSpaTracking=!0);this.uetConfig.disableContainer=!1;o.hasOwnProperty("d
2024-08-28 07:28:12 UTC	8192	IN	Data Raw: 68 69 73 2e 66 69 72 65 50 69 64 45 76 65 6e 74 28 65 2e 70 69 64 29 29 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 63 6f 6e 73 65 6e 74 22 29 7b 69 66 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 61 62 6c 65 64 3d 21 30 2c 74 3d 6e 5b 31 5d 5b 31 5d 2c 66 3d 6e 5b 31 5d 5b 30 5d 2c 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 3d 3d 3d 22 64 65 66 61 75 6c 74 22 3f 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 5f 73 74 6f 72 61 67 65 22 29 26 26 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 61 64 53 74 6f 72 61 67 65 55 70 64 61 74 65 64 3d 3d 3d 21 31 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 Data Ascii: his.firePidEvent(e.pid)))}else if(n[0]==="consent"){if(this.uetConfig.consent.enabled=!0,t=n[1][1],f=n[1][0],t===null\|\|typeof t!="object")return;f==="default"?(t.hasOwnProperty("ad_storage")&&this.uetConfig.consent.adStorageUpdated===!1&&(this.uetConfig.c
2024-08-28 07:28:12 UTC	8192	IN	Data Raw: 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 72 29 7d 74 68 72 6f 77 20 6e 3b 7d 3b 74 68 69 73 2e 76 61 6c 69 64 61 74 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 30 2c 66 3d 74 2c 65 3d 69 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 69 3d 3d 3d 30 3f 21 30 3a 21 31 3b 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 21 3d 3d 2d 31 26 26 28 66 3d 74 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 22 29 29 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 28 69 73 4e 61 4e 28 66 29 7c 7c 69 73 4e 61 4e 28 75 29 7c 7c 65 26 26 75 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 21 3d 3d 2d 31 29 26 26 74 68 69 73 2e 74 68 72 6f 77 Data Ascii: this.fireBeaconImg(r)}throw n;};this.validateValue=function(n,t,i,r){var u=0,f=t,e=i===undefined\|\|i===0?!0:!1;return t.toString().indexOf(",")!==-1&&(f=t.replace(/,/g,"")),u=parseFloat(f),(isNaN(f)\|\|isNaN(u)\|\|e&&u.toString().indexOf(".")!==-1)&&this.throw
2024-08-28 07:28:12 UTC	8192	IN	Data Raw: 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 22 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 79 70 65 6f 66 20 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 7b 65 6d 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 65 6d 61 69 6c 2c 70 68 3a 77 69 6e 64 6f 77 2e 65 6e 68 61 6e 63 65 64 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 64 61 74 61 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 7d 29 2c 72 26 26 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 Data Ascii: Config.gtagPid===!0&&"enhanced_conversion_data"in window&&typeof enhanced_conversion_data=="object"&&(this.pageLevelParams.pid={em:window.enhanced_conversion_data.email,ph:window.enhanced_conversion_data.phone_number}),r&&this.pageLevelParams.hasOwnProper
2024-08-28 07:28:12 UTC	8192	IN	Data Raw: 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 55 65 74 45 76 65 6e 74 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 75 65 74 45 76 65 6e 74 3a 72 7d 7d 29 2c 74 68 69 73 2e 69 6e 76 69 73 69 62 6c 65 44 69 76 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 3b 74 68 69 73 2e 66 69 72 65 50 61 67 65 53 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 3d 3d 21 31 26 Data Ascii: &&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEvent("UetEvent",{bubbles:!0,detail:{uetEvent:r}}),this.invisibleDiv.dispatchEvent(s))}catch(h){}};this.firePageShow=function(n){this.uetConfig.disableVisibilityEvents===!1&
2024-08-28 07:28:12 UTC	930	IN	Data Raw: 45 78 74 65 72 6e 61 6c 4d 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 6e 29 26 26 6e 2e 6d 61 74 63 68 28 2f 5e 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 38 7d 2d 3f 28 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 2d 3f 29 7b 33 7d 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 31 32 7d 24 2f 29 26 26 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 3d 6e 2c 74 68 69 73 2e 6d 69 64 4f 76 65 72 72 69 64 65 3d 21 30 29 7d 3b 74 68 69 73 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 2e 62 6c 6f 62 3d 6e 2c 74 68 69 73 Data Ascii: ExternalMid=function(n){this.stringExists(n)&&n.match(/^[0-9a-fA-F]{8}-?([0-9a-fA-F]{4}-?){3}[0-9a-fA-F]{12}$/)&&(this.beaconParams.mid=n,this.midOverride=!0)};this.setUserSignals=function(n){typeof n=="object"&&n!==null&&(this.uetConfig.cusig.blob=n,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	54835	66.235.152.225	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	2150	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=5b8737ccf81d4cfda55b9d042ee355c4&version=2.4.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1279 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54; MUID=7abfd6b577da470d85f1555f65baaf67; MSCC=NR; fptctx2=H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLv7xZ3VWqcpppR2Wxlzz44CYD6U6stdLxh3oXIxHiEmsm5ysh%252fZrlfd9f6v8ymqHIGDGulDCuqnWWVtz2lkJuaFJyPJ6P8ebqHey2zUfTFwsEnn9kl1Ujtcx%252bY01TMlHHcUd%252biC3MUfEKaCId%252bLszGQtHbbyuiojpXNWhI9BSmUm91d4wgZJEboctSUeu5JvaHnhdWGCFpnEGyaYznfHDis%252f26P6ktO6huzyiHQt9XXcE0e753x3JYvZNDGbuYgX3w%253d% [TRUNCATED]
2024-08-28 07:28:12 UTC	1279	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 31 38 64 32 63 65 30 62 34 39 38 34 64 31 33 62 62 33 65 30 33 37 30 63 33 66 66 30 36 32 33 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"718d2ce0b4984d13bb3e0370c3ff0623","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-08-28 07:28:12 UTC	843	IN	HTTP/1.1 200 OK date: Wed, 28 Aug 2024 07:28:12 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true x-request-id: 1461dc18-0165-4fba-ade4-39867be69a18 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-08-28 07:28:12 UTC	8532	IN	Data Raw: 32 31 34 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 31 38 64 32 63 65 30 62 34 39 38 34 64 31 33 62 62 33 65 30 33 37 30 63 33 66 66 30 36 32 33 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 35 62 38 37 33 37 63 63 66 38 31 64 34 63 66 64 61 35 35 62 39 64 30 34 32 65 65 33 35 35 63 34 2e 33 37 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 66 38 33 33 38 66 35 38 62 66 65 61 34 64 32 39 38 39 63 33 62 62 36 65 65 39 31 61 38 64 64 63 22 2c 22 63 75 73 74 6f 6d 65 72 49 64 73 22 3a 5b 7b 22 69 64 22 3a 22 66 38 33 33 38 66 35 38 62 66 65 61 34 64 32 39 38 39 63 33 62 62 36 65 65 39 31 61 38 64 64 63 22 Data Ascii: 214c{"status":200,"requestId":"718d2ce0b4984d13bb3e0370c3ff0623","client":"microsoftmscompoc","id":{"tntId":"5b8737ccf81d4cfda55b9d042ee355c4.37_0","thirdPartyId":"f8338f58bfea4d2989c3bb6ee91a8ddc","customerIds":[{"id":"f8338f58bfea4d2989c3bb6ee91a8ddc"
2024-08-28 07:28:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	54834	185.89.210.90	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	644	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	1492	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: 06555d4a-7c84-49fd-a26a-7d3f4d1cfd1e Set-Cookie: XANDR_PANID=eXrnm5AWp7l-dGVPt6-TJg9ZgCaDS2DGdUnKo-JSbRR783KAd4-8Yq7nZ4onTvRK9euamLqZRLbkMC2KTD6rCgveeZFLbF5mEaK3uC5dxu0.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 26-Nov-2024 07:28:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 16-Aug-2034 07:28:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4769043448713762178; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 26-Nov-2024 07:28:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	54839	142.250.184.226	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	797	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc=&google_tc= Date: Wed, 28 Aug 2024 07:28:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 28-Aug-2024 07:43:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-28 07:28:12 UTC	378	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	54843	104.244.42.67	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	648	OUT	GET /i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	572	IN	HTTP/1.1 200 OK date: Wed, 28 Aug 2024 07:28:12 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_g5CHpwrtONdguZ6SOdQZsA=="; Max-Age=63072000; Expires=Fri, 28 Aug 2026 07:28:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a438cee6646900a3 strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: 0f3a86de86f35067236699ccec76d4e8c3f32cfd85a1117a9f41b3e595c4e8c7 connection: close
2024-08-28 07:28:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	54846	35.244.174.68	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	760	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTcQABoNCIyju7YGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=PoliTs6/YjkuWWSkWzaZFqpgkUYP/zrjr0/CbHZL5/0=; pxrc=CAA=
2024-08-28 07:28:13 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=c04b199ec87ac081064989c39fe1c0a02c7bd49d4dd92cc6db61501c503cc257b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=PoliTs6/YjkuWWSkWzaZFqpgkUYP/zrjr0/CbHZL5/0=; Path=/; Domain=rlcdn.com; Expires=Thu, 28 Aug 2025 07:28:12 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIyju7YGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Sun, 27 Oct 2024 07:28:12 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	54845	52.223.40.198	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:12 UTC	661	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:12 UTC	521	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:12 GMT Content-Length: 251 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 set-cookie: TDID=37c904be-5f57-42ac-8e81-66b35f658bff; expires=Thu, 28 Aug 2025 07:28:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIqKnvyrbPoz0QBTgB; expires=Thu, 28 Aug 2025 07:28:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-08-28 07:28:12 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	54849	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	532	OUT	GET /p/action/4000034.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:13 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=60 Content-Length: 4075 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CBB06ECC2C604B76A0290FEBEC8B76D7 Ref B: EWR30EDGE1414 Ref C: 2024-08-28T07:28:13Z Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close
2024-08-28 07:28:13 UTC	3752	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 Data Ascii: (function(w,d,c,k,a,b) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a,
2024-08-28 07:28:13 UTC	61	IN	Data Raw: 49 4e 49 54 5f 43 4c 41 52 49 54 59 5f 45 56 45 4e 54 5f 53 45 54 55 50 27 7d 2c 20 65 2e 6f 72 69 67 69 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 Data Ascii: INIT_CLARITY_EVENT_SETUP'}, e.origin); }
2024-08-28 07:28:13 UTC	262	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 73 74 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 70 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 6c 61 75 6e 63 68 45 76 65 6e 74 53 65 74 75 70 28 29 3b 0d 0a 7d 29 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 27 73 63 72 69 70 74 27 2c 20 27 34 30 30 30 30 Data Ascii: f.parentNode.insertBefore(est,f); }; f.parentNode.insertBefore(cp,f); w.removeEventListener('message', eventListener); }); } launchEventSetup();})(window, document, 'script', '40000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	54850	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	900	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=56454859190031261134500869246404215842&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&d_cid_ic=MC1%01f8338f58bfea4d2989c3bb6ee91a8ddc%012&ts=1724830090333 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197
2024-08-28 07:28:13 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: U25cYHj1Sxk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v065-03268ba7d.edge-irl1.demdex.com 8 ms set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:13 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 36 34 35 34 38 35 39 31 39 30 30 33 31 32 36 31 31 33 34 35 30 30 38 36 39 32 34 36 34 30 34 32 31 35 38 34 32 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"56454859190031261134500869246404215842","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	54851	142.250.74.196	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	913	OUT	GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDpaXnfUeW4IogxBTg8KWPwDJ4t7tFA0bvMJQ&random=2221103673 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:13 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 28 Aug 2024 07:28:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-28 07:28:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	54848	107.22.246.206	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	532	OUT	GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=112026161 HTTP/1.1 Host: ats.everesttech.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: everest_g_v2=g_surferid~Zs7RjAAAxL7TUkdc
2024-08-28 07:28:13 UTC	268	IN	HTTP/1.1 200 Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Expires: Wed Aug 28 07:28:13 UTC 2024
2024-08-28 07:28:13 UTC	814	IN	Data Raw: 33 32 37 0d 0a 47 49 46 38 39 61 01 00 01 00 e7 0f 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 Data Ascii: 327GIF89a3f3333f333ff3fffff3f3f3f3333f
2024-08-28 07:28:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	54852	54.78.109.69	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	856	OUT	GET /ibs:dpid=411&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307
2024-08-28 07:28:13 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Zqj/h839SNw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-025fd1665.edge-irl1.demdex.com 8 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	54853	185.89.210.90	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	861	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=eXrnm5AWp7l-dGVPt6-TJg9ZgCaDS2DGdUnKo-JSbRR783KAd4-8Yq7nZ4onTvRK9euamLqZRLbkMC2KTD6rCgveeZFLbF5mEaK3uC5dxu0.; receive-cookie-deprecation=1; uuid2=4769043448713762178
2024-08-28 07:28:13 UTC	1425	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=4769043448713762178 AN-X-Request-Uuid: 9cac9135-4b39-4735-87a5-0b847601e5a2 Set-Cookie: XANDR_PANID=eXrnm5AWp7l-dGVPt6-TJg9ZgCaDS2DGdUnKo-JSbRR783KAd4-8Yq7nZ4onTvRK9euamLqZRLbkMC2KTD6rCgveeZFLbF5mEaK3uC5dxu0.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 26-Nov-2024 07:28:13 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 16-Aug-2034 07:28:13 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4769043448713762178; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 26-Nov-2024 07:28:13 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	54847	91.228.74.244	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	634	OUT	GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:13 UTC	696	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://dpm.demdex.net/ibs:dpid=1175&gdpr=0&dpuuid=ZwoOBTUNVQR8CAhQM11ABDIFWFF8CgxTYAtD7_dB P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EJABDAHWLLmvYA; expires=Tue, 26-Nov-2024 07:28:13 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=66ced18d-4e0ba-dc951-6a317; expires=Sun, 28-Sep-2025 07:28:13 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	54855	66.235.152.225	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	1946	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=5b8737ccf81d4cfda55b9d042ee355c4&version=2.4.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54; MUID=7abfd6b577da470d85f1555f65baaf67; MSCC=NR; fptctx2=H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLv7xZ3VWqcpppR2Wxlzz44CYD6U6stdLxh3oXIxHiEmsm5ysh%252fZrlfd9f6v8ymqHIGDGulDCuqnWWVtz2lkJuaFJyPJ6P8ebqHey2zUfTFwsEnn9kl1Ujtcx%252bY01TMlHHcUd%252biC3MUfEKaCId%252bLszGQtHbbyuiojpXNWhI9BSmUm91d4wgZJEboctSUeu5JvaHnhdWGCFpnEGyaYznfHDis%252f26P6ktO6huzyiHQt9XXcE0e753x3JYvZNDGbuYgX3w%253d% [TRUNCATED]
2024-08-28 07:28:13 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Wed, 28 Aug 2024 07:28:13 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-08-28 07:28:13 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-08-28 07:28:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	54857	142.250.184.226	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	849	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NTY5MTY5MzUxNTYxOTUxNjUyNjQ1MjY4MDYxMDYwNDkzOTE5MTc=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-08-28 07:28:13 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent= Date: Wed, 28 Aug 2024 07:28:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkh0DCp5LuXvaDLMvjENXICXa_jFGo-4wt4DNZcWk-D3aqV06kDOLHZ_AUoDO0; expires=Fri, 28-Aug-2026 07:28:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-28 07:28:13 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 42 42 69 59 73 30 4d 58 6e 49 36 61 4f 50 33 51 67 5f 76 42 6d 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	54858	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	852	OUT	GET /ibs:dpid=992&dpuuid=1rfmbuho6m3dl HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307
2024-08-28 07:28:13 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: UZGEXkwQTbU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-019845f57.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	54862	104.244.42.131	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	470	OUT	GET /i/adsct?p_user_id=56916935156195165264526806106049391917&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_g5CHpwrtONdguZ6SOdQZsA=="
2024-08-28 07:28:13 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 28 Aug 2024 07:28:12 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 643f6d7600466860 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: fc0b1f2174053b08a96976e503d42e7bb525beee5c4bcf01e43a5fb743c798e7 connection: close
2024-08-28 07:28:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	54860	52.223.40.198	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	748	OUT	GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=37c904be-5f57-42ac-8e81-66b35f658bff; TDCPM=CAEYBSgCMgsIqKnvyrbPoz0QBTgB
2024-08-28 07:28:13 UTC	522	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Length: 189 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff set-cookie: TDID=37c904be-5f57-42ac-8e81-66b35f658bff; expires=Thu, 28 Aug 2025 07:28:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsInJuppKDPoz0QBRgFIAEoAjILCKip78q2z6M9EAU4AQ..; expires=Thu, 28 Aug 2025 07:28:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-08-28 07:28:13 UTC	189	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 33 37 63 39 30 34 62 65 2d 35 66 35 37 2d 34 32 61 63 2d 38 65 38 31 2d 36 36 62 33 35 66 36 35 38 62 66 66 22 3e 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 33 37 63 39 30 34 62 65 2d 35 66 35 37 2d 34 32 61 63 2d 38 65 38 31 2d 36 36 62 33 35 66 36 35 38 62 66 66 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://dpm.demdex.net/ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff">https://dpm.demdex.net/ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	54865	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	940	OUT	GET /ibs:dpid=477&dpuuid=c04b199ec87ac081064989c39fe1c0a02c7bd49d4dd92cc6db61501c503cc257b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
2024-08-28 07:28:13 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 1A+VkD3eSMc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0aef3418d.edge-irl1.demdex.com 4 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	54866	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	1156	OUT	GET /action/0?ti=4000034&Ver=2&mid=da24a130-fbd9-433d-8a13-23c301cbc52d&sid=148cd540650f11efb81be72fdc445a4a&vid=148cf0a0650f11efa9d179927a34e56a&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Compare%20All%20Microsoft%20365%20Plans%20(Formerly%20Office%20365)%20-%20Microsoft%20Store&p=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products%3Focid%3Dcmmibbws4d3&r=&lt=14912&pt=1724830070081,,,,,2011,2013,2013,2013,2671,2014,2671,2969,3368,2980,12190,14867,14912,,,&pn=0,0&evt=pageLoad&sv=1&cdb=AQAA&rn=786674 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:13 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=0DF5573F0A556D4B390643D60B376C7C; domain=.bing.com; expires=Mon, 22-Sep-2025 07:28:13 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Wed, 04-Sep-2024 07:28:13 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 3932007A14F940D0AC7CD789E7F4F54B Ref B: EWR30EDGE1015 Ref C: 2024-08-28T07:28:13Z Date: Wed, 28 Aug 2024 07:28:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	54867	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	355	OUT	GET /p/action/4000034.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:13 UTC	571	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=60 Content-Length: 4075 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: FF95E7472DD94395AC5C6BA078A95B4B Ref B: EWR311000102031 Ref C: 2024-08-28T07:28:13Z Date: Wed, 28 Aug 2024 07:28:13 GMT Connection: close
2024-08-28 07:28:13 UTC	726	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 Data Ascii: (function(w,d,c,k,a,b) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a,
2024-08-28 07:28:13 UTC	3087	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 63 29 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 29 20 7b 20 72 65 74 75 72 6e 20 75 20 26 26 20 74 79 70 65 6f 66 20 75 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 21 28 75 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 20 26 26 20 75 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 20 26 26 20 75 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 20 26 26 20 77 2e 63 6c 61 72 69 74 79 3b 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 34 30 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 2d 2d 20 3c 20 31 29 20 72 65 Data Ascii: { if (!c) return; var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; }; var r = 40; var cl = function() { if (r-- < 1) re
2024-08-28 07:28:13 UTC	262	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 73 74 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 70 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 6c 61 75 6e 63 68 45 76 65 6e 74 53 65 74 75 70 28 29 3b 0d 0a 7d 29 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 27 73 63 72 69 70 74 27 2c 20 27 34 30 30 30 30 Data Ascii: f.parentNode.insertBefore(est,f); }; f.parentNode.insertBefore(cp,f); w.removeEventListener('message', eventListener); }); } launchEventSetup();})(window, document, 'script', '40000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	54868	150.171.27.10	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:13 UTC	906	OUT	GET /action/0?ti=4000034&Ver=2&mid=da24a130-fbd9-433d-8a13-23c301cbc52d&sid=148cd540650f11efb81be72fdc445a4a&vid=148cf0a0650f11efa9d179927a34e56a&vids=0&msclkid=N&ea=view_item_list&en=Y&p=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&sw=1280&sh=1024&sc=24&evt=custom&cdb=AQAA&rn=641266 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:14 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=0E2BE84A9FB2629B136EFCA39EC06317; domain=.bing.com; expires=Mon, 22-Sep-2025 07:28:14 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Wed, 04-Sep-2024 07:28:14 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 71DDC78EDAB44D17B4D3A25448EE85BB Ref B: EWR30EDGE0414 Ref C: 2024-08-28T07:28:13Z Date: Wed, 28 Aug 2024 07:28:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	54869	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	876	OUT	GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9mwHY9kJTPk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09970398b.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	54871	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	908	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=ZwoOBTUNVQR8CAhQM11ABDIFWFF8CgxTYAtD7_dB HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: tdGdY1pCTKI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-02693e0c6.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	54870	142.250.185.164	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	676	OUT	GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDpaXnfUeW4IogxBTg8KWPwDJ4t7tFA0bvMJQ&random=2221103673 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 28 Aug 2024 07:28:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	54874	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	923	OUT	GET /ibs:dpid=358&dpuuid=4769043448713762178 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: cX+VElZSTo0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0e37898ce.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	54875	66.235.152.225	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	2327	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=5b8737ccf81d4cfda55b9d042ee355c4&version=2.4.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1633 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=09E8AE30C124980B29DCDCD10D284972~000000000000000000000000000000~YAAQU/AQAmE7C4GRAQAAocHhlxjkr5gQJujrOc8nIMms493q6ZVFtUfSNSeNum7F46Qc5RfxPiVdmJwo1H65q+IlsbyKrNpIOa/5rPbvOmxkNvoOjnj3zLD5wSBoLE1U8iD/bQPAt0o0XO6nHJIzAcyi2T8orivQ7zsjDsXHrlR1/216Jw5UDtJTRr7+REaTGihRvomFwIkCjtSP4+3bgbStsACb6gdDWHuxK87l6+wR3DBRwLZ9V++5m4B+iByWw4tFrDkw74yBAQ1lRDcHtd65jNClbkcGdz6dHvwnwlVJ4WZ8iozKUa5vwkQ0cB0gsxiaLXkpFQaUtXTwIi9UiMoRTaioMZECwcaJFU1Z7GLqEOpcGqP4ntZ7aUg=; MC1=GUID=f8338f58bfea4d2989c3bb6ee91a8ddc&HASH=f833&LV=202408&V=4&LU=1724830048599; MS0=3cb9cf02f98e4d5ca69f9e1a6daf2c54; MUID=7abfd6b577da470d85f1555f65baaf67; MSCC=NR; fptctx2=H3ihr9e92IdW6yd1ZgQ9Sz4bj6XMGo9empP83sM5eweXkbenF%252bvbx6tet2ZbmiVdOcS%252b%252fIMhcVBpajE%252bYIgyLv7xZ3VWqcpppR2Wxlzz44CYD6U6stdLxh3oXIxHiEmsm5ysh%252fZrlfd9f6v8ymqHIGDGulDCuqnWWVtz2lkJuaFJyPJ6P8ebqHey2zUfTFwsEnn9kl1Ujtcx%252bY01TMlHHcUd%252biC3MUfEKaCId%252bLszGQtHbbyuiojpXNWhI9BSmUm91d4wgZJEboctSUeu5JvaHnhdWGCFpnEGyaYznfHDis%252f26P6ktO6huzyiHQt9XXcE0e753x3JYvZNDGbuYgX3w%253d% [TRUNCATED]
2024-08-28 07:28:14 UTC	1633	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 31 63 37 35 36 31 39 66 33 36 36 34 38 61 38 38 35 66 32 31 65 32 32 61 31 39 30 30 66 66 34 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"f1c75619f36648a885f21e22a1900ff4","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-08-28 07:28:14 UTC	568	IN	HTTP/1.1 204 No Content date: Wed, 28 Aug 2024 07:28:14 GMT vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true x-request-id: 4d597ece-6d0a-4dbb-bf1c-fa8990455a0f referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	54872	13.107.246.42	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	541	OUT	GET /tag/uet/4000034?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:14 UTC	379	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: application/x-javascript Content-Length: 866 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:9c7c879b-c51a-427e-9701-218438da5f81 x-azure-ref: 20240828T072814Z-15c77d89844n8m75vqkmf3rwqs0000000m5000000000duub X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-08-28 07:28:14 UTC	866	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 34 30 30 30 30 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","4000034")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	54880	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	940	OUT	GET /ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: SoZIG2BBTNE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-00ea0a4e4.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	54873	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	684	OUT	GET /ibs:dpid=411&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: qLw9wqg6QgQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0ce9f7ae2.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	54878	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	937	OUT	GET /ibs:dpid=1957&dpuuid=38E007E636376F42355E130F379F6ED7 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: hvlaBkkmQ3k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0f3bcf1c5.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	54881	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	681	OUT	GET /ibs:dpid=992&dpuuid=1rfmbuho6m3dl HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: vjaskcRxR7I= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09970398b.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	54885	172.64.150.63	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	713	OUT	GET /i.match?p=b13&u=56916935156195165264526806106049391917&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:14 UTC	903	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 429 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aLnoeUpkijsDifqGdSBi8AlqeiRsMv6a8lHh2VZcB; path=/; domain=.tribalfusion.com; expires=Tue, 26-Nov-2024 07:28:14 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aLnoeUpkijsDifqGdSBi8AlqeiRsMv6a8lHh2VZcB; path=/; domain=.tribalfusion.com; expires=Tue, 26-Nov-2024 07:28:14 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b13&u=56916935156195165264526806106049391917&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ba2955a590a43be-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-08-28 07:28:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	54883	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	966	OUT	GET /ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697; dpm=56916935156195165264526806106049391917
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: zbaItksUQVo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-097ef2758.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	54884	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:14 UTC	770	OUT	GET /ibs:dpid=477&dpuuid=c04b199ec87ac081064989c39fe1c0a02c7bd49d4dd92cc6db61501c503cc257b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:14 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: MDwiL3rNTUg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0b3327ba6.edge-irl1.demdex.com 8 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	54894	172.64.150.63	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	774	OUT	GET /z/i.match?p=b13&u=56916935156195165264526806106049391917&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aLnoeUpkijsDifqGdSBi8AlqeiRsMv6a8lHh2VZcB
2024-08-28 07:28:15 UTC	864	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 127 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr74cBR3dZdc6LrtCiq9QLZccygTRJTyAbdZbVZaxhKwCbW3eorEHXh0iVbUUBCabhZa; path=/; domain=.tribalfusion.com; expires=Tue, 26-Nov-2024 07:28:15 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aCnsPCO5nP87PRo7TGr74cBR3dZdc6LrtCiq9QLZccygTRJTyAbdZbVZaxhKwCbW3eorEHXh0iVbUUBCabhZa; path=/; domain=.tribalfusion.com; expires=Tue, 26-Nov-2024 07:28:15 GMT; Location: https://dpm.demdex.net/ibs:dpid=22054 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ba2955eac0143b6-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-08-28 07:28:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	54887	13.107.246.42	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	534	OUT	GET /s/0.7.45/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:15 UTC	619	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65276 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 26 Aug 2024 15:33:45 GMT ETag: "0x8DCC5E478FBED4A" x-ms-request-id: a53a2ad0-c01e-0004-39d1-f7a3dc000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240828T072815Z-15c77d89844hdn28tw7kbz7eas0000000mrg00000000g8w2 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:28:15 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 35 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.45: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-08-28 07:28:15 UTC	16384	IN	Data Raw: 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 2c 6c 3d 5b 22 63 6c 61 73 73 22 2c 22 73 74 79 6c 65 22 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="",l=["class","style"];Object.keys(
2024-08-28 07:28:15 UTC	16384	IN	Data Raw: 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 74 29 7b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2a 65 29 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c 61 63 65 28 47 6e 2c 22 22 29 29 2a 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 51 6e 3d 5b 22 74 69 74 6c 65 22 2c 22 61 6c 74 22 2c 22 6f 6e 6c 6f 61 64 22 2c 22 6f 6e 66 6f 63 75 73 22 2c 22 6f 6e 65 72 72 Data Ascii: !==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(typeof t){case"number":return Math.round(te);case"string":return Math.round(parseFloat(t.replace(Gn,""))e)}return null}var Qn=["title","alt","onload","onfocus","onerr
2024-08-28 07:28:15 UTC	16384	IN	Data Raw: 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 20 69 6e 20 77 72 26 26 77 72 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 7c 7c 28 62 72 3d 7b 63 6f 64 65 3a 74 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 61 2c 73 74 61 63 6b 3a 72 2c 73 65 76 65 72 69 74 79 3a 65 7d 2c 74 20 69 6e 20 77 72 3f 77 72 5b 74 5d 2e 70 75 73 68 28 69 29 3a 77 72 5b 74 5d 3d 5b 69 5d 2c 79 72 28 33 33 29 29 7d 76 61 72 20 53 72 2c 45 72 3d 7b 7d 2c 4f 72 3d 6e 65 77 20 53 65 74 2c 4e 72 3d 7b 7d 2c 54 72 3d 7b 7d 2c 4d 72 3d 7b 7d 2c 78 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 72 28 29 7b 6a 72 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 73 70 6c 69 74 28 2f Data Ascii: (n,"\|").concat(a):"";t in wr&&wr[t].indexOf(i)>=0\|\|(br={code:t,name:n,message:a,stack:r,severity:e},t in wr?wr[t].push(i):wr[t]=[i],yr(33))}var Sr,Er={},Or=new Set,Nr={},Tr={},Mr={},xr={};function _r(){jr()}function Ir(t){try{var e=t&&t.length>0?t.split(/
2024-08-28 07:28:15 UTC	359	IN	Data Raw: 67 72 61 64 65 3a 65 74 2c 76 65 72 73 69 6f 6e 3a 6c 7d 29 2c 61 6f 3d 77 69 6e 64 6f 77 2c 72 6f 3d 22 63 6c 61 72 69 74 79 22 3b 66 75 6e 63 74 69 6f 6e 20 69 6f 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 6f 29 7b 69 66 28 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 76 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 45 72 72 6f 72 20 43 4c 30 30 31 3a 20 4d 75 6c 74 69 70 6c 65 20 43 6c 61 72 69 74 79 20 74 61 67 73 20 64 65 74 65 63 74 65 64 2e 22 29 3b 76 61 72 20 74 3d 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 71 7c 7c 5b 5d 3b 66 6f 72 28 61 6f 5b 72 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e Data Ascii: grade:et,version:l}),ao=window,ro="clarity";function io(){if(void 0!==ao){if(ao[ro]&&ao[ro].v)return console.warn("Error CL001: Multiple Clarity tags detected.");var t=ao[ro]&&ao[ro].q\|\|[];for(ao[ro]=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	54888	13.107.246.67	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	364	OUT	GET /tag/uet/4000034?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:15 UTC	379	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: application/x-javascript Content-Length: 866 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0 x-azure-ref: 20240828T072815Z-15c77d89844n6dtp5f09y9f4c80000000mdg00000000d50p X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-08-28 07:28:15 UTC	866	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 34 30 30 30 30 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","4000034")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	54889	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	706	OUT	GET /ibs:dpid=782&dpuuid=Zs7RjAAAAGivrgN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Vft3JOtXRBo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-096c66b28.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	54892	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	738	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=ZwoOBTUNVQR8CAhQM11ABDIFWFF8CgxTYAtD7_dB HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: EMLOqfulQhQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0810a4d20.edge-irl1.demdex.com 4 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	54893	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	726	OUT	GET /ibs:dpid=903&dpuuid=37c904be-5f57-42ac-8e81-66b35f658bff HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: bq0a+AHpQxQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0f96a41d4.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	54890	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	709	OUT	GET /ibs:dpid=358&dpuuid=4769043448713762178 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Ay/2075FTKw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0045007f2.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	54891	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	723	OUT	GET /ibs:dpid=1957&dpuuid=38E007E636376F42355E130F379F6ED7 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: WH8qBi3TSRk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0555cb038.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	54896	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	962	OUT	GET /ibs:dpid=3047&dpuuid=6084CD362F368F&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 3EIZijc8RFA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09970398b.edge-irl1.demdex.com 17 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	54897	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	752	OUT	GET /ibs:dpid=771&dpuuid=CAESEBBiYs0MXnI6aOP3Qg_vBmc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709
2024-08-28 07:28:15 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: VpHWeqw4QbI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-05b027f1f.edge-irl1.demdex.com 3 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	54674	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	570	OUT	GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:16 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 101932 Connection: close Date: Wed, 28 Aug 2024 07:28:16 GMT Last-Modified: Thu, 15 Feb 2024 10:35:13 GMT ETag: "b7fe6dd421c792f445730d6d393e72d5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=900 Content-Encoding: gzip x-amz-version-id: JUwHso4GCTdeT8XY56XFxnSiy_sxhSap Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 409b27093eb36cec367cdee5f3ecf8b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: GQXfVlZxEN3kcb6CdHKyED37G2-qgBOEVMLwBG7KJGqZY9bZtNnZbQ== Timing-Allow-Origin: * age: 0 Vary: Origin
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db c8 b2 28 fc 7d ff 0a a3 cd 30 52 10 06 93 cc cc 1a 3b 8a 37 01 27 61 c2 6d 30 e4 66 1c 22 ec 06 2b 31 92 23 b5 21 8c ad f3 db 4f 55 f5 45 ad 8b 81 99 b5 f6 79 de 0f ef ec b5 83 d5 f7 ae ae aa ae aa ae ae be f1 e3 da 76 f7 7c fb f0 e0 95 37 b3 26 71 f4 95 0d f8 ee d0 6a 6e 3e db dc 74 ad 84 fb 7c 9a 58 cd 86 6b 8d a2 84 87 fe 35 83 af 9e 75 1d 0c e2 28 89 2e 79 7d 10 5d 5b ae 75 1b 84 c3 e8 36 91 5f fe 5f d3 98 dd b2 8b 24 e0 2c a9 87 8c 43 9a ae 91 f0 28 66 58 b0 3e 08 55 d9 7a b1 bd 64 f2 97 bf 36 f0 43 3f be 93 f5 45 39 91 7b 39 8e 6e a1 f9 35 18 dd 55 10 5e d5 c3 c4 e7 03 2a d7 77 2d 6c 28 d9 89 ae fd 20 3c 89 fd c1 37 28 60 35 37 72 e9 5d 48 1b b3 dd cb 18 a6 93 2f 13 85 09 0b f9 31 fb 3e 0d 62 36 a4 34 7f Data Ascii: k[(}0R;7'am0f"+1#!OUEyv\|7&qjn>t\|Xk5u(.y}][u6__$,C(fX>Uzd6C?E9{9n5U^*w-l( <7(`57r]H/1>b64
2024-08-28 07:28:16 UTC	496	IN	Data Raw: 24 a7 57 06 ac 10 6d d0 b1 5b df 1d 0a 34 d9 61 2a e5 1f 55 3b 2a 97 07 54 bd a8 7a 3c e9 91 e9 4f 87 5b 91 3c c8 a3 4b 76 76 c3 6d 38 2d 0c 2a 37 8e fc a1 f7 c9 c5 9f 82 83 7c 72 cb 57 f6 92 78 a0 7c 45 d4 0e ae a9 2b 55 5b 3a 50 57 fb cb ba f1 95 92 67 44 1b 77 3e d8 f8 76 05 9b 89 ab 4e f6 8c d0 b2 d0 7e ee 28 2d fd e2 6e ba ff d2 bb 46 bc 88 da df 29 2a df 2e ec 1a 07 34 f9 50 c6 17 7b 57 cf 0b e9 52 13 3b a8 df 4f d8 58 48 36 2f b1 46 d1 f9 a1 ea 17 9b 40 6c 7a 40 0a f2 c5 96 72 88 87 c2 ee 58 7d 8c e9 d0 ea 5a 7d ca 2b 42 6e a2 12 40 0a 1c 7c 43 41 97 a5 ca 69 6c c4 bd f5 2c 7e 6d fd fc a7 d5 b5 3e be e5 f1 3f f3 9f 9e 6d cc 7f da fc e5 d9 86 63 e4 ff b4 76 0e d9 e2 b9 8e 9f 36 7b ac d3 37 72 a1 a6 83 af 6f 46 b9 36 57 cf d7 fa 85 06 d7 dd 01 f7 2c Data Ascii: $Wm[4aU;Tz<O[<Kvvm8-7\|rWx\|E+U[:PWgDw>vN~(-nF).4P{WR;OXH6/F@lz@rX}Z}+Bn@\|CAil,~m>?mcv6{7roF6W,
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 37 97 07 0e 2c d9 f2 0c 15 5d 07 01 f4 cd 64 79 3a 60 70 ce b1 4b b8 39 06 de 86 3e 00 4f b2 00 5c 9b ad 04 03 70 25 6b 6b c2 b7 84 99 8d 80 24 d2 4a 7e da f4 bc 0d 74 11 79 e2 6d 3a 6e b0 ea 19 1e 00 6c bd b1 e1 ac b2 9f 1a 1b 4a 01 68 6c ac 05 f0 89 62 70 b6 78 7f dc f2 9c 68 f5 d0 52 f9 25 8c f8 e3 fd 09 08 43 ba 41 53 63 5a 28 b0 e5 f6 0f 71 cb 62 86 73 aa 46 68 12 bb 08 ab 95 87 2a 50 7d e3 69 fd 5f bf d7 37 8d cb 13 93 4c 7a 9d dd 34 2f 75 e9 5b 10 d0 c2 e8 96 5c 2f f4 11 a2 dc 7e 0c eb d5 ca 4a 39 ad 0e f5 da 15 c9 9c 2c 5d ea 92 76 20 a3 16 ad 8a ad 22 9a ea b8 08 c5 b6 80 c3 37 45 0c 0d f1 65 c4 b4 b8 36 64 6f 63 19 6f b9 28 b9 de 60 4f 0d 07 50 7c cc fb 9f bb a8 64 57 ee 72 cd 3c ee 8a a0 9b 64 0f 67 64 6a 94 e0 5f 57 8b f6 c3 65 b5 2f ed 01 f2 Data Ascii: 7,]dy:`pK9>O\p%kk$J~tym:nlJhlbpxhR%CAScZ(qbsFh*P}i_7Lz4/u[\/~J9,]v "7Ee6doco(`OP\|dWr<dgdj_We/
2024-08-28 07:28:16 UTC	1024	IN	Data Raw: c4 82 c6 68 d6 0d 25 19 30 35 45 79 8b d1 3a dc 4d 93 5b 44 0d 47 b1 8a 33 3f b6 07 81 38 7a cd 5d ea 53 30 2c 96 f0 22 5e 8d dc fb db d9 ea 18 2f 16 67 da 8c 43 7a 7c b1 6f 3a 6b 24 62 5b 24 42 27 2b 5a 44 d3 eb 73 ee 8a 7a 35 f1 8e d6 bd 25 e1 93 c1 27 cc 3b e2 d0 88 86 19 34 c5 d2 fa 93 54 1b 0f 82 8c d0 51 ec 13 d6 47 5a ab 64 40 45 8b 9d 98 e5 49 5a 96 78 29 7a f8 ec 5c 53 b4 f3 cc 05 2d 67 57 a5 b3 b1 43 8c 32 29 bf 2b 87 0a 4c 6d 5d e6 1e b8 01 18 a1 39 21 30 6c 9d 60 81 ad 62 a9 10 d1 e2 52 d0 32 ca bf 1c 44 cd bc 40 d3 75 6d da 20 ad 5f 3b c1 03 b0 63 5a 95 3d 2b f5 91 b8 0c fb 68 33 ab 2b 20 5b d8 0e 8c 0c dc 08 05 62 c8 e1 4d a0 8d d5 68 ce 40 58 c0 e2 d1 20 ce 0f af 22 8b b0 c6 57 43 7c aa 11 23 87 3e a3 d4 da e1 d6 c1 ae 56 37 8e ff 91 dd 7b Data Ascii: h%05Ey:M[DG3?8z]S0,"^/gCz\|o:k$b[$B'+ZDsz5%';4TQGZd@EIZx)z\S-gWC2)+Lm]9!0l`bR2D@um _;cZ=+h3+ [bMh@X "WC\|#>V7{
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 85 99 51 56 c1 ac 8f 80 6a 31 49 4a bb 87 0a a8 6e 98 1b ee fa 59 72 92 88 3e 3e e2 f6 c5 a7 cf 15 5a 39 e4 8a cd 3d 64 dc 96 02 5d d9 d6 63 0d 09 04 9d 8b 29 cc 68 83 98 5e 1c 59 f0 7a 3e cc 5e f5 0f 0f 5a 1a db a4 c9 3c 3a dc 99 b8 08 e9 bc 91 ef 54 37 ec 1e b0 a1 d4 79 ca 3a 04 aa ac fa 07 aa 3d dc dc d7 d2 7c f5 86 34 5a b8 20 71 60 c4 71 f4 c0 13 79 d1 16 93 59 d5 ec c1 92 f7 78 b8 cf 8d 00 6b 07 37 66 f4 92 b7 fa 2f 0f df 5c 6c ed ed 91 30 49 29 99 09 7e fa 9b 8a 94 36 7b a2 b6 b3 12 ae c5 89 98 c2 37 83 c9 0d 80 1b 01 d5 04 24 a3 58 f4 e7 ae 69 ad 96 d2 37 8d 64 66 ee 32 f5 4b 66 ae 78 9a 29 3a 12 99 db 05 e8 d2 71 58 df da f9 0f 16 ba 23 c4 72 92 f2 9b 7a c8 4b e1 f1 28 0f 81 69 26 96 ed 81 ac d5 b5 4e 48 07 89 da 4c 34 de 1a dd b5 b5 d4 c8 ae 53 Data Ascii: QVj1IJnYr>>Z9=d]c)h^Yz>^Z<:T7y:=\|4Z q`qyYxk7f/\l0I)~6{7$Xi7df2Kfx):qX#rzK(i&NHL4S
2024-08-28 07:28:16 UTC	1024	IN	Data Raw: 1f b1 f3 25 d6 ea 32 a9 b0 56 16 fb 5c 62 ad 5e 27 15 d6 ca c3 e6 97 aa 77 19 f9 c5 d5 3b fc fb e2 06 b8 0c fd 51 e2 18 2b 2c 78 d4 85 a4 bf 3d d9 28 b6 65 ae 65 50 be 60 89 70 69 d5 0b 72 97 c3 ef c8 7b 52 ca db d3 07 f0 4d 62 24 1e 97 89 ed d6 57 ca 86 b6 fb 7d 43 05 d7 f8 f8 e5 7a 3f 79 bc fb 22 95 8f be 7d a9 46 d9 e7 42 7b 28 79 64 35 e1 f5 5f 6d c2 48 ef 92 b9 4d c0 4a e4 c8 01 87 7a 63 33 ff 75 20 65 96 34 c4 ac 22 5f db 9c 25 a5 e4 22 56 8b 6b e4 26 66 f8 82 e2 d1 ff 86 06 99 c1 d4 37 48 df 6f 23 f4 25 d1 e6 3f 7b 24 b1 7c 85 8c 6c 36 f8 cc 9a 0f 37 ec 5e 8c be 98 a6 01 e2 66 65 21 43 4c ce 36 2f 64 f6 3d a0 4f 4f 94 a7 a4 63 b1 a3 c6 70 4f a8 83 63 0f b9 4c 0d 65 1e 36 08 40 cc a0 c7 f1 cd 6a 3a 2e ef 6a 0a b4 f1 df b8 d2 02 9d 5f eb 97 04 ec f1 Data Ascii: %2V\b^'w;Q+,x=(eeP`pir{RMb$W}Cz?y"}FB{(yd5_mHMJzc3u e4"_%"Vk&f7Ho#%?{$\|l67^fe!CL6/d=OOcpOcLe6@j:.j_
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: a6 cb c4 d8 c5 23 99 52 b7 c0 14 38 51 2d b1 4b 34 e9 ac 22 4d 4a 53 66 d1 ec 42 eb bb be d6 9f 59 e3 00 b4 88 fa 90 88 93 aa d1 c7 dd d7 dd e3 7e 37 da f8 bb 9d 48 05 4b 14 49 3d 72 4f fe 01 a9 f4 77 29 5a 17 e6 a6 d2 85 15 cd 7b 68 ee bd a7 b9 da c0 c1 68 33 35 04 61 a1 f4 91 40 2c 92 0d 53 c6 62 63 0a c1 6b 53 4a c5 03 f0 2c d9 c7 4c 87 26 7e 6b ca b5 4c 06 04 cd 22 cd 0e 9b 8a 25 3e 80 d7 90 b9 a9 8d 9f 36 d1 c8 4d dd 7a 2d 3d a6 06 b6 ac c6 d8 48 90 dd b8 b2 9e da 95 08 3d df 4a 3a 7b 6b 22 3b 2a 75 65 19 b5 ab 31 be 82 74 6c 09 4e ca ae a4 28 da dc db 39 c9 60 59 9d 93 fd ba 37 99 db e5 00 35 f3 b5 bd b9 b7 5a d5 ae 84 78 b2 2f d9 07 ab fd 9e bc 70 55 09 0e 7b 7b 96 82 ce a2 35 dd 51 35 1f 03 5f 22 cd 6b 58 b7 d7 0e 65 7d e4 15 c6 e5 43 64 4a a5 22 Data Ascii: #R8Q-K4"MJSfBY~7HKI=rOw)Z{hh35a@,SbckSJ,L&~kL"%>6Mz-=H=J:{k";*ue1tlN(9`Y75Zx/pU{{5Q5_"kXe}CdJ"
2024-08-28 07:28:16 UTC	1024	IN	Data Raw: 94 05 64 2c ef e8 fa da 79 d3 54 98 29 15 ce 9b 3e 3f e3 7a 8a a6 de b7 11 08 a5 51 3f 94 6e 68 5e aa 1b b2 1d a0 a2 9a 6c 8c 54 5b ee 87 72 6d d4 cc c8 6c 41 5c b4 0a 64 90 73 e6 10 79 56 15 37 2c 29 be ce e8 9e 37 ea bf ab fb cf da 90 c4 dd bf 5e e5 52 7b 6e e0 e4 e5 ac 5f 59 59 68 c7 04 5c b0 72 e6 1c 5c 95 0a 3c 42 8f ac d6 34 55 8b 4a d9 9d a9 23 82 08 b8 a1 4d 25 0f 0c 07 33 23 b0 b2 37 94 e6 bd ac 46 93 a4 80 2c c7 d7 13 68 f7 fb f7 4a d6 04 70 ca dd fa ec ab 34 b9 9b 5e 22 7b 80 b1 dc e8 02 8d 49 fc 25 46 ca 52 47 db da 1c 6a db de 51 d0 d9 1b 4a fc ee 74 e8 d4 1b 7c a7 82 8a bf 1a 29 27 a5 1f c9 ba 64 ba e1 70 9f fd aa 9e 91 be 2c ac ed 69 3a da 0b 32 7c 44 0f 31 c0 50 5a 8d 53 fb 2e 40 a8 eb 2a e7 70 3e 59 c2 0f 5f 8d f0 c1 0e c9 65 e8 91 56 b6 Data Ascii: d,yT)>?zQ?nh^lT[rmlA\dsyV7,)7^R{n_YYh\r\<B4UJ#M%3#7F,hJp4^"{I%FRGjQJt\|)'dp,i:2\|D1PZS.@*p>Y_eV
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 81 c5 c5 27 75 a1 a9 e0 5b b8 96 59 33 a4 20 40 c1 35 a7 d8 3c 4d 9b 4d 9d 96 02 a9 4a 4b 2b 0f b1 d6 68 d1 f1 61 68 5a 74 38 f7 c0 f6 73 f3 c6 01 ef cb d0 fd a3 04 ee 67 12 b6 9b d6 a2 64 76 7a 2c 19 ff 2e 7b 52 fd 14 6f 06 79 20 0f ca 23 0c 14 5f d8 1d f4 b9 ec 33 af 82 d1 f0 8f 08 ce d1 5a 93 ce 25 5b 94 66 8b 8b ca 29 37 e7 91 33 6e c8 6c 2f 9c 40 b5 85 61 30 1e 87 71 b6 70 37 0c e3 85 60 21 8b 23 f8 86 13 89 4f ef 42 9e 2c a0 f6 2b 8f 04 35 e5 82 85 2b ba e8 80 1d c3 ff c1 f5 c2 5d 90 2d 70 20 03 40 82 fa ed 06 83 fa 47 8a 88 85 ba be cc 8c ed 84 85 2f c4 05 d9 5a d6 41 c5 04 17 da 21 2d 61 63 63 e0 b2 fb 7f d3 c0 35 8a d3 49 e5 90 e3 b5 b8 a3 e2 d6 9b bb e0 21 f5 b7 83 53 cd 44 5f 5c 33 f4 cc 66 bc 94 83 80 e1 76 67 a4 98 5d 31 12 96 18 ce 5b c4 39 Data Ascii: 'u[Y3 @5<MMJK+hahZt8sgdvz,.{Roy #_3Z%[f)73nl/@a0qp7`!#OB,+5+]-p @G/ZA!-acc5I!SD_\3fvg]1[9
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: bf b7 05 10 1f 81 c4 9e 1b 75 e5 13 05 14 1b 84 c4 93 6e 38 48 5f bc a0 50 21 61 9c d0 35 ef e7 0f 01 d4 12 51 fd e7 0b e9 9f 50 73 00 45 30 8a fc 1e 31 66 ec d5 09 d7 14 6e f5 e3 b9 37 43 47 f4 4d 12 8c ad ea 51 4c f2 69 15 7f c0 fe 6c cb e0 5d 47 bc 46 cf 0b e8 85 ed dc c5 55 ba 0b aa 34 6b 53 71 6b 26 e9 6f c3 82 b5 f9 db d0 10 c8 4c 9f 79 cc 44 c1 3e 4e bf e9 92 3f ca a3 be 03 73 c5 c4 53 58 b3 05 3e 64 1e ea f6 a8 2f df 8e 6a cf 8e 07 95 b0 3a 40 87 4e b7 44 a8 b2 b4 38 22 65 89 fe dc 95 83 10 6a 80 08 8c fb 63 68 8e e7 93 9b c5 90 27 f4 31 0c b1 0f 80 e1 e3 83 20 87 bc 19 23 c8 08 65 8e 41 54 3e a0 53 ec a8 62 ac ef 0c 47 59 5c 5d e8 f0 27 df 0f 5a c0 f5 46 15 e7 5e 37 7a 6d 72 13 a1 8f d3 c8 bf b9 c1 03 4e 75 fc b9 98 8b 52 69 65 ee a3 34 1d 6e 3a Data Ascii: un8H_P!a5QPsE01fn7CGMQLil]GFU4kSqk&oLyD>N?sSX>d/j:@ND8"ejch'1 #eAT>SbGY\]'ZF^7zmrNuRie4n:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	54898	3.71.149.231	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:15 UTC	674	OUT	GET /cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:15 UTC	343	IN	HTTP/1.1 302 Redirect Date: Wed, 28 Aug 2024 07:28:15 GMT Connection: close Server: ATS/9.1.10.134 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 415
2024-08-28 07:28:15 UTC	415	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	54899	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:16 UTC	942	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695
2024-08-28 07:28:16 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: mSl/DgBkR5E= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-00f8aa9d1.edge-irl1.demdex.com 1 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	54900	13.107.246.67	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:16 UTC	357	OUT	GET /s/0.7.45/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:16 UTC	619	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:16 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65276 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 26 Aug 2024 15:33:45 GMT ETag: "0x8DCC5E478FBED4A" x-ms-request-id: a53a2ad0-c01e-0004-39d1-f7a3dc000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240828T072816Z-15c77d89844bhmk535uzmhuz380000000ktg00000000fgmn Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:28:16 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 35 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.45: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 2c 6c 3d 5b 22 63 6c 61 73 73 22 2c 22 73 74 79 6c 65 22 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="",l=["class","style"];Object.keys(
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 74 29 7b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2a 65 29 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 72 65 70 6c 61 63 65 28 47 6e 2c 22 22 29 29 2a 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 51 6e 3d 5b 22 74 69 74 6c 65 22 2c 22 61 6c 74 22 2c 22 6f 6e 6c 6f 61 64 22 2c 22 6f 6e 66 6f 63 75 73 22 2c 22 6f 6e 65 72 72 Data Ascii: !==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(typeof t){case"number":return Math.round(te);case"string":return Math.round(parseFloat(t.replace(Gn,""))e)}return null}var Qn=["title","alt","onload","onfocus","onerr
2024-08-28 07:28:16 UTC	16384	IN	Data Raw: 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 20 69 6e 20 77 72 26 26 77 72 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 7c 7c 28 62 72 3d 7b 63 6f 64 65 3a 74 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 61 2c 73 74 61 63 6b 3a 72 2c 73 65 76 65 72 69 74 79 3a 65 7d 2c 74 20 69 6e 20 77 72 3f 77 72 5b 74 5d 2e 70 75 73 68 28 69 29 3a 77 72 5b 74 5d 3d 5b 69 5d 2c 79 72 28 33 33 29 29 7d 76 61 72 20 53 72 2c 45 72 3d 7b 7d 2c 4f 72 3d 6e 65 77 20 53 65 74 2c 4e 72 3d 7b 7d 2c 54 72 3d 7b 7d 2c 4d 72 3d 7b 7d 2c 78 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 72 28 29 7b 6a 72 28 29 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 73 70 6c 69 74 28 2f Data Ascii: (n,"\|").concat(a):"";t in wr&&wr[t].indexOf(i)>=0\|\|(br={code:t,name:n,message:a,stack:r,severity:e},t in wr?wr[t].push(i):wr[t]=[i],yr(33))}var Sr,Er={},Or=new Set,Nr={},Tr={},Mr={},xr={};function _r(){jr()}function Ir(t){try{var e=t&&t.length>0?t.split(/
2024-08-28 07:28:16 UTC	359	IN	Data Raw: 67 72 61 64 65 3a 65 74 2c 76 65 72 73 69 6f 6e 3a 6c 7d 29 2c 61 6f 3d 77 69 6e 64 6f 77 2c 72 6f 3d 22 63 6c 61 72 69 74 79 22 3b 66 75 6e 63 74 69 6f 6e 20 69 6f 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 6f 29 7b 69 66 28 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 76 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 45 72 72 6f 72 20 43 4c 30 30 31 3a 20 4d 75 6c 74 69 70 6c 65 20 43 6c 61 72 69 74 79 20 74 61 67 73 20 64 65 74 65 63 74 65 64 2e 22 29 3b 76 61 72 20 74 3d 61 6f 5b 72 6f 5d 26 26 61 6f 5b 72 6f 5d 2e 71 7c 7c 5b 5d 3b 66 6f 72 28 61 6f 5b 72 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e Data Ascii: grade:et,version:l}),ao=window,ro="clarity";function io(){if(void 0!==ao){if(ao[ro]&&ao[ro].v)return console.warn("Error CL001: Multiple Clarity tags detected.");var t=ao[ro]&&ao[ro].q\|\|[];for(ao[ro]=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	54905	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:16 UTC	748	OUT	GET /ibs:dpid=3047&dpuuid=6084CD362F368F&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695
2024-08-28 07:28:16 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: CiWJX9eyQqE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0fbcb9133.edge-irl1.demdex.com 10 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	54910	3.75.62.37	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:16 UTC	684	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:17 UTC	672	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent=&uid=56916935156195165264526806106049391917&verify=true Age: 0 Connection: close Server: ATS/9.1.10.134 Set-Cookie: A3=d=AQABBJHRzmYCEK-ZxQ55hAIOdc2zPBjT7wkFEgEBAQEj0GbYZtxA0iMA_eMAAA&S=AQAAAjrd_CivSliVaIADqiZyGcQ; Expires=Thu, 28 Aug 2025 13:28:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	54913	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:17 UTC	728	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107
2024-08-28 07:28:17 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eZ7kl5uAQjw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0b320fe1c.edge-irl1.demdex.com 1 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	54912	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:17 UTC	596	OUT	GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:17 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 9077 Connection: close Date: Wed, 28 Aug 2024 07:28:18 GMT Last-Modified: Thu, 13 Jun 2024 09:22:21 GMT ETag: "d2ba765f9d6c67ba7509d5da2286bbb7" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: .7nUC3X5TW_ivyGxSQ.GDKNPomyOddlI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c0c6d7afa25d841027d75444425d2010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: U5AEqylJ0DQCWmNSuQoIczYRprxEjEcBsCYFtsh0ESnJLQq0l7LbCw== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Access-Control-Allow-Origin: *
2024-08-28 07:28:17 UTC	9077	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 6b 5b db ba d2 e8 67 fa 3c eb 3f 18 ef 77 93 a4 38 4e 02 2d 5d 0d cb ed cb a5 5d 84 03 94 4d 28 dd 9b cb ee 63 6c 25 71 71 ec 2c db 09 64 95 fc f7 33 a3 8b 2d db 72 a0 eb 72 3e 9c f4 29 c4 d2 68 34 1a cd 8c 66 46 b2 68 b5 b4 bd 70 32 8f bc e1 28 d1 36 da ed ad e6 46 7b e3 95 b6 e7 7b ce dd b9 ed 13 ed 28 71 4d 43 fb dc d7 4e ed 84 04 89 76 4a 02 d7 0b 86 3f bd f8 e9 c5 bd 17 b8 e1 bd 99 c2 fe ea 87 b7 b6 af 59 5a 45 c5 e3 a3 f6 7d b1 5d 6e d7 27 49 02 28 63 45 cb b4 4a b4 fd e9 45 01 ab e9 05 5e 02 2d 95 c5 a2 55 b1 32 76 22 6f 92 c4 8a 66 a2 e6 89 96 e6 8c 44 b1 17 06 88 e2 bb 7e 1f e9 5d 4d bf 8d 3c 77 48 9a 5f ce 3a 9d b6 f9 2d d6 0d 4d 9f 38 0e d6 b4 5f bb 9b 1b 9b 5b 9b 4d f7 f5 e6 ab e6 2b f7 ed 66 f3 ed ed d6 eb Data Ascii: }k[g<?w8N-]]M(cl%qq,d3-rr>)h4fFhp2(6F{{(qMCNvJ?YZE}]n'I(cEJE^-U2v"ofD~]M<wH_:-M8_[M+f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	54915	13.107.246.45	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:17 UTC	563	OUT	GET /scripts/c/ms.analytics-web-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://publisher.liveperson.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:17 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:17 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 140778 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:57 GMT ETag: 0x8DC99EFA7D93FA1 x-ms-request-id: 45038a1b-801e-00f1-26af-ef346c000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-3.2.18.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072817Z-15c77d89844x4cv6tct3vbzssn0000000hn000000000axbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:28:17 UTC	15436	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 7a 69 28 65 29 7b 76 61 72 20 74 3d 30 2c 6e 3d 72 65 28 7a 6e 29 7c 7c 72 65 28 47 6e 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 6e 26 26 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 26 46 69 3a 74 29 26 26 64 69 28 29 26 26 28 42 69 7c 7c 71 69 28 29 2c 74 3d 47 69 28 29 26 46 69 29 2c 30 3d 3d 3d 74 26 26 28 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 56 69 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 29 2c 65 7c 7c 28 74 3e 3e 3e 3d 30 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 69 28 65 29 7b 76 61 72 20 74 3d 28 28 4b 69 3d 33 36 39 36 39 2a 28 36 35 35 33 35 26 4b 69 29 2b 28 4b 69 3e 3e 31 Data Ascii: function zi(e){var t=0,n=re(zn)\|\|re(Gn);return 0===(t=n&&n.getRandomValues?n.getRandomValues(new Uint32Array(1))[0]&Fi:t)&&di()&&(Bi\|\|qi(),t=Gi()&Fi),0===t&&(t=Math.floor(ViMath.random()\|0)),e\|\|(t>>>=0),t}function Gi(e){var t=((Ki=36969(65535&Ki)+(Ki>>1
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 65 22 29 2c 54 3d 65 7c 7c 7b 7d 2c 76 5b 71 5d 3d 54 2c 51 28 65 5b 7a 5d 29 26 26 6a 28 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 20 6b 65 79 22 29 2c 72 3d 69 2c 76 5b 4c 61 5d 3d 69 3b 65 3d 24 74 28 54 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 44 26 26 28 72 5b 68 65 5d 28 44 29 2c 44 3d 6e 75 6c 6c 29 2c 72 26 26 21 44 26 26 21 30 21 3d 3d 65 26 26 28 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 69 29 7b 6d 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 79 69 5b 52 5d 3b 74 2b 2b 29 6d 69 5b 79 69 5b 74 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 49 69 28 6e 29 3b 65 26 Data Ascii: e"),T=e\|\|{},v[q]=T,Q(e[z])&&j("Please provide instrumentation key"),r=i,v[La]=i;e=$t(T.disableDbgExt),!0===e&&D&&(r[he](D),D=null),r&&!D&&!0!==e&&(D=function(e){if(!mi){mi={};for(var t=0;t<yi[R];t++)mi[yi[t]]=function(t,n){return function(){var e=Ii(n);e&
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 72 20 66 3d 65 5b 73 5d 3b 69 66 28 66 29 7b 69 66 28 68 3c 3d 6e 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 76 61 72 20 64 3d 6d 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 28 66 29 3b 69 66 28 64 26 26 64 2e 6c 65 6e 67 74 68 3c 3d 75 29 7b 76 61 72 20 70 3d 64 2e 6c 65 6e 67 74 68 3b 69 66 28 63 3c 74 2e 6c 65 6e 67 74 68 2b 70 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 74 26 26 28 74 2b 3d 22 5c 6e 22 29 2c 74 2b 3d 64 2c 32 30 3c 2b 2b 6c 26 26 28 74 2e 73 75 62 73 74 72 28 30 2c 31 29 2c 6c 3d 30 29 2c 69 3d 21 30 2c 6e 2b 2b 7d 65 6c 73 65 28 64 3f 72 3a 61 29 2e 70 75 73 68 28 66 29 2c 65 2e 73 70 6c 69 63 65 28 73 2c 31 29 2c 73 2d 2d 7d 73 2b 2b 7d 72 26 26 Data Ascii: r f=e[s];if(f){if(h<=n){g.overflow=v.split(s);break}var d=m.getEventBlob(f);if(d&&d.length<=u){var p=d.length;if(c<t.length+p){g.overflow=v.split(s);break}t&&(t+="\n"),t+=d,20<++l&&(t.substr(0,1),l=0),i=!0,n++}else(d?r:a).push(f),e.splice(s,1),s--}s++}r&&
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 74 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 2c 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 29 2c 4a 3d 21 77 2e 64 69 73 61 62 6c 65 4f 70 74 69 6d 69 7a 65 4f 62 6a 26 26 21 21 72 65 28 22 63 68 72 6f 6d 65 22 29 2c 74 3d 65 2e 67 65 74 57 50 61 72 61 6d 2c 65 2e 67 65 74 57 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 77 2e 69 67 6e 6f 72 65 4d 63 31 4d 73 30 43 6f 6f 6b 69 65 50 72 6f 63 65 73 73 69 6e 67 26 26 28 65 7c 3d 32 29 2c 65 7c 74 28 29 7d 2c 30 3c 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 26 26 28 48 3d 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 29 2c 30 3c 77 2e 69 6d 6d 65 64 69 61 74 65 45 76 65 6e 74 4c 69 6d 69 74 26 26 28 46 3d 77 2e 69 Data Ascii: tTimeoutOverride,w.clearTimeoutOverride),J=!w.disableOptimizeObj&&!!re("chrome"),t=e.getWParam,e.getWParam=function(){var e=0;return w.ignoreMc1Ms0CookieProcessing&&(e\|=2),e\|t()},0<w.eventsLimitInMem&&(H=w.eventsLimitInMem),0<w.immediateEventLimit&&(F=w.i
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 56 75 28 34 2c 65 2c 71 63 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 6c 28 29 2c 65 29 2c 73 29 7d 2c 6e 2e 61 70 70 6c 79 44 65 76 69 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 64 65 76 69 63 65 3b 56 75 28 31 2c 65 2c 7a 63 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 74 2e 6c 6f 63 61 6c 49 64 2c 65 5b 32 5d 3d 74 2e 6d 61 6b 65 2c 65 5b 33 5d 3d 74 2e 6d 6f 64 65 6c 2c 65 5b 31 5d 3d 74 2e 64 65 76 69 63 65 43 6c 61 73 73 2c 65 29 2c 73 29 7d 2c 6e 2e 61 70 70 6c 79 43 6c 6f 75 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 63 6c 6f 75 64 3b 56 75 28 31 30 2c 65 2c 47 63 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 74 2e 72 6f 6c 65 2c 65 5b 31 5d 3d 74 2e Data Ascii: unction(e){Vu(4,e,qc,((e={})[0]=l(),e),s)},n.applyDeviceContext=function(e){var t=n.device;Vu(1,e,zc,((e={})[0]=t.localId,e[2]=t.make,e[3]=t.model,e[1]=t.deviceClass,e),s)},n.applyCloudContext=function(e){var t=n.cloud;Vu(10,e,Gc,((e={})[0]=t.role,e[1]=t.
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 63 2c 74 2c 75 3d 69 2e 6e 61 6d 65 2c 73 3d 28 21 51 28 75 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 7c 7c 28 65 3d 6f 65 28 29 2c 75 3d 69 2e 6e 61 6d 65 3d 65 26 26 65 2e 74 69 74 6c 65 7c 7c 22 22 29 2c 69 2e 75 72 69 29 3b 21 51 28 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 7c 7c 28 65 3d 63 69 28 29 2c 73 3d 69 2e 75 72 69 3d 65 26 26 65 5b 59 6c 5d 7c 7c 22 22 29 2c 76 5b 73 66 5d 28 29 3f 28 61 3d 21 31 2c 30 3c 28 63 3d 76 5b 6c 66 5d 28 29 5b 66 66 5d 29 26 26 28 6f 3d 59 73 28 63 2c 2b 6e 65 77 20 44 61 74 65 29 2c 76 5b 64 66 5d 28 6f 29 7c 7c 28 6f 3d 75 6e 64 65 66 69 6e 65 64 29 29 2c 51 28 72 29 7c 7c 51 28 72 5b 63 66 5d 29 7c 7c 28 74 3d 72 5b 63 66 5d 29 2c 21 67 26 26 69 73 4e 61 4e 28 74 29 Data Ascii: c,t,u=i.name,s=(!Q(u)&&"string"==typeof u\|\|(e=oe(),u=i.name=e&&e.title\|\|""),i.uri);!Q(s)&&"string"==typeof s\|\|(e=ci(),s=i.uri=e&&e[Yl]\|\|""),v[sf]()?(a=!1,0<(c=v[lf]()[ff])&&(o=Ys(c,+new Date),v[df](o)\|\|(o=undefined)),Q(r)\|\|Q(r[cf])\|\|(t=r[cf]),!g&&isNaN(t)
2024-08-28 07:28:17 UTC	16384	IN	Data Raw: 5b 69 2e 56 49 44 45 4f 45 52 52 4f 52 3d 32 34 37 5d 3d 22 56 49 44 45 4f 45 52 52 4f 52 22 2c 69 5b 69 2e 56 49 44 45 4f 4d 55 54 45 3d 32 34 38 5d 3d 22 56 49 44 45 4f 4d 55 54 45 22 2c 69 5b 69 2e 56 49 44 45 4f 55 4e 4d 55 54 45 3d 32 34 39 5d 3d 22 56 49 44 45 4f 55 4e 4d 55 54 45 22 2c 69 5b 69 2e 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 69 5b 69 2e 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 31 5d 3d 22 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 22 2c 69 5b 69 2e 56 49 44 45 4f 52 45 50 4c 41 59 3d 32 35 32 5d 3d 22 56 49 44 45 4f 52 45 50 4c 41 59 22 2c 69 5b 69 2e 56 49 44 45 4f 50 4c 41 59 45 52 4c 4f 41 44 3d 32 35 33 5d 3d 22 56 49 44 45 4f 50 Data Ascii: [i.VIDEOERROR=247]="VIDEOERROR",i[i.VIDEOMUTE=248]="VIDEOMUTE",i[i.VIDEOUNMUTE=249]="VIDEOUNMUTE",i[i.VIDEOFULLSCREEN=250]="VIDEOFULLSCREEN",i[i.VIDEOUNFULLSCREEN=251]="VIDEOUNFULLSCREEN",i[i.VIDEOREPLAY=252]="VIDEOREPLAY",i[i.VIDEOPLAYERLOAD=253]="VIDEOP
2024-08-28 07:28:17 UTC	10654	IN	Data Raw: 6d 65 3a 6e 2e 74 4e 2c 70 72 6f 64 75 63 74 49 64 3a 6e 2e 70 69 64 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 6e 2e 63 54 2c 70 61 72 65 6e 74 49 64 3a 6e 2e 70 49 2c 70 61 72 65 6e 74 4e 61 6d 65 3a 6e 2e 70 4e 7d 29 3b 66 6f 72 28 76 61 72 20 61 2c 6f 3d 30 3b 6f 3c 65 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 28 61 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 6f 5d 29 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 64 26 26 61 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 61 72 65 61 4e 61 6d 65 26 26 61 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 Data Ascii: me:n.tN,productId:n.pid,contentType:n.cT,parentId:n.pI,parentName:n.pN});for(var a,o=0;o<e.attributes.length;o++)(a=e.attributes[o]).name!==this._contentBlobFieldNames.id&&a.name!==this._contentBlobFieldNames.areaName&&a.name!==this._contentBlobFieldNames

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	54918	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:17 UTC	393	OUT	GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:17 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 101932 Connection: close Date: Wed, 28 Aug 2024 07:28:18 GMT Last-Modified: Thu, 15 Feb 2024 10:35:13 GMT ETag: "b7fe6dd421c792f445730d6d393e72d5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=900 Content-Encoding: gzip x-amz-version-id: JUwHso4GCTdeT8XY56XFxnSiy_sxhSap Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8d07edb8bf98788bf512d51f8cc554f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: rB58UYt2zKS992OSnOw5h2m67YTQOhmiJ1oXi2OqLIzS_Dm52jktNA== Timing-Allow-Origin: * age: 0 Vary: Origin
2024-08-28 07:28:17 UTC	15720	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db c8 b2 28 fc 7d ff 0a a3 cd 30 52 10 06 93 cc cc 1a 3b 8a 37 01 27 61 c2 6d 30 e4 66 1c 22 ec 06 2b 31 92 23 b5 21 8c ad f3 db 4f 55 f5 45 ad 8b 81 99 b5 f6 79 de 0f ef ec b5 83 d5 f7 ae ae aa ae aa ae ae be f1 e3 da 76 f7 7c fb f0 e0 95 37 b3 26 71 f4 95 0d f8 ee d0 6a 6e 3e db dc 74 ad 84 fb 7c 9a 58 cd 86 6b 8d a2 84 87 fe 35 83 af 9e 75 1d 0c e2 28 89 2e 79 7d 10 5d 5b ae 75 1b 84 c3 e8 36 91 5f fe 5f d3 98 dd b2 8b 24 e0 2c a9 87 8c 43 9a ae 91 f0 28 66 58 b0 3e 08 55 d9 7a b1 bd 64 f2 97 bf 36 f0 43 3f be 93 f5 45 39 91 7b 39 8e 6e a1 f9 35 18 dd 55 10 5e d5 c3 c4 e7 03 2a d7 77 2d 6c 28 d9 89 ae fd 20 3c 89 fd c1 37 28 60 35 37 72 e9 5d 48 1b b3 dd cb 18 a6 93 2f 13 85 09 0b f9 31 fb 3e 0d 62 36 a4 34 7f Data Ascii: k[(}0R;7'am0f"+1#!OUEyv\|7&qjn>t\|Xk5u(.y}][u6__$,C(fX>Uzd6C?E9{9n5U^*w-l( <7(`57r]H/1>b64
2024-08-28 07:28:17 UTC	26	IN	Data Raw: 96 71 51 9f 18 b8 34 46 42 a1 a0 ef 25 c2 1c 30 a2 03 42 7c d9 2c 1d 09 cb 90 Data Ascii: qQ4FB%0B\|,
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 95 5b 7b aa 98 c5 50 30 6d 07 89 e3 5a 26 70 73 45 73 36 04 2c 59 85 13 b9 1a 95 d2 86 ae 59 c6 82 72 e5 0a 61 09 eb df b3 6e b9 36 ee 93 99 68 1c 99 fd 23 df b7 61 17 c1 72 6a e5 73 85 32 7d 78 09 cb 68 92 cf 15 ca 18 01 90 2b 37 2d 64 22 02 10 ba a7 09 9b 6e d5 8d 32 8d 4a b3 49 30 6c 2a 1c d6 d6 18 c0 d1 74 3a 19 62 00 29 b1 87 bd 02 f1 66 98 c8 45 2f 48 a1 b9 61 15 25 d4 c7 03 23 9d aa 50 56 ca dd 60 fd f3 d9 ba 5d 7f e2 c0 bf bd ab e0 ba 8f 6f ae 9b 51 ca 94 c3 49 cf 95 58 aa 5c 09 b2 9d f9 cb 67 3c db 5b fe 82 78 bb 38 77 51 e4 b0 20 79 c3 fc 21 8b 33 a5 42 13 22 5d 7e 74 f3 61 98 b4 7e 0f 02 21 55 00 e6 11 0e fd 78 28 5a 01 b9 49 1f fd 7a b6 0c e6 92 d5 21 2b 8a d0 cc 65 79 67 3e cf ae 8a ab 63 5c 6d 47 cc b5 96 14 5b 03 7e 1e 84 0b 5b 4b 54 6b 3a Data Ascii: [{P0mZ&psEs6,YYran6h#arjs2}xh+7-d"n2JI0l*t:b)fE/Ha%#PV`]oQIX\g<[x8wQ y!3B"]~ta~!Ux(ZIz!+eyg>c\mG[~[KTk:
2024-08-28 07:28:18 UTC	1024	IN	Data Raw: 46 70 24 89 03 10 a0 80 9b e0 35 1d 38 18 70 1d 28 7a fc 85 9c f5 92 3c 28 0f 87 3a 23 fa f6 43 f6 06 8f eb 4c 4a 85 e0 b1 56 89 03 8a ce 20 4a c2 e6 30 4a 03 b3 50 a2 81 b5 68 fc 64 e2 10 ac f3 68 30 1b e1 03 92 1a 68 d7 36 68 a9 60 72 13 09 e4 4b 8a da 4c c3 70 20 17 eb c3 40 8c d3 67 90 61 41 8e 31 70 57 23 56 0e db b0 8e e3 23 ee 5a af eb a9 89 97 5a 4d a8 e4 46 da 1a 31 5c f6 57 fc 7a 96 e2 3a fa 8e 65 34 95 65 2f bf 8c 3c eb 42 13 6d 96 8d b3 bb 16 0a c1 8f 78 16 92 a1 16 01 d7 3c 73 73 93 12 3e 0b 68 71 50 10 1c 65 fe a9 37 33 ef 9f 59 18 69 d0 36 c2 46 6e 3e c0 f6 4f 8b b6 a0 78 31 2c 83 30 f1 4f 7b 0c 61 85 2a ce 9d 52 e6 99 52 e6 4e e9 65 f9 86 ed 0b 6a 4f 95 35 1a b5 0d f2 3c 88 5a 00 ce 51 ec a0 0d 34 f5 03 93 9e b5 35 cb bb 04 51 ca 79 4b 6a Data Ascii: Fp$58p(z<(:#CLJV J0JPhdh0h6h`rKLp @gaA1pW#V#ZZMF1\Wz:e4e/<Bmx<ss>hqPe73Yi6Fn>Ox1,0O{a*RRNejO5<ZQ45QyKj
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 51 eb 14 96 d0 04 8b 00 f9 ab b9 1e 50 0c c9 1f 20 e5 f4 0b 85 c8 5e 99 00 ea 9a d8 f0 a4 05 41 0b bc 81 cb 0e 25 8e 13 1c d5 a7 ff 6c a6 d7 97 83 6f e3 6c 32 08 de 03 92 7e b8 22 fe f9 bf 9b fa cf fa fb e0 d1 d3 56 2e 8e 29 c1 c2 04 f6 c5 e2 98 03 d7 8c 7a c8 51 c6 71 95 3f 6e fd f4 5f 72 ec 05 ad 04 3e 2e a6 14 e4 de 05 a9 71 c4 82 c6 68 d6 0d 25 19 30 35 45 79 8b d1 3a dc 4d 93 5b 44 0d 47 b1 8a 33 3f b6 07 81 38 7a cd 5d ea 53 30 2c 96 f0 22 5e 8d dc fb db d9 ea 18 2f 16 67 da 8c 43 7a 7c b1 6f 3a 6b 24 62 5b 24 42 27 2b 5a 44 d3 eb 73 ee 8a 7a 35 f1 8e d6 bd 25 e1 93 c1 27 cc 3b e2 d0 88 86 19 34 c5 d2 fa 93 54 1b 0f 82 8c d0 51 ec 13 d6 47 5a ab 64 40 45 8b 9d 98 e5 49 5a 96 78 29 7a f8 ec 5c 53 b4 f3 cc 05 2d 67 57 a5 b3 b1 43 8c 32 29 bf 2b 87 0a Data Ascii: QP ^A%lol2~"V.)zQq?n_r>.qh%05Ey:M[DG3?8z]S0,"^/gCz\|o:k$b[$B'+ZDsz5%';4TQGZd@EIZx)z\S-gWC2)+
2024-08-28 07:28:18 UTC	1024	IN	Data Raw: fd 7e 54 14 a9 35 2f 8d 46 47 83 4e 8a 05 00 12 b1 0c de 1e 03 03 35 5b 7a 13 d0 2f 93 16 61 dc ba b8 18 d2 60 65 9f 66 e2 54 bd 30 c2 00 04 80 53 7b 7c 54 e1 e3 2b 4f d7 1f b5 5b e2 24 d1 4e 80 33 34 6c 12 14 43 32 cd d9 c8 b8 48 f4 98 2b 35 06 95 44 20 6b 50 47 82 e3 01 e2 13 78 d2 d8 e7 43 11 24 78 7e 48 46 c0 ce 8e 0d d5 82 6a 95 e0 71 98 b8 8f e5 83 24 3a e2 4d 09 14 6d 1e 21 6d dd 75 4f 4b a5 6d 8a 8d 00 23 17 df c4 2e af da 9b a5 4b ab b1 47 51 96 30 0a 3c 54 12 ff 4b 76 1e 61 48 a5 b2 76 a2 68 a2 41 22 0b 19 24 15 67 29 13 15 37 b1 e3 82 12 76 ec f7 37 42 2e 98 2b dd 88 61 e2 0a 90 ed 46 55 5d ac d8 cd b2 63 2d 99 87 ab d0 a2 9e 30 ed f7 c9 56 75 26 6a 5e 29 e5 09 ae ac 7a 12 38 ff 7d b9 4d ed 65 75 97 ff 50 fd 30 a9 34 29 23 c9 44 7c e4 5a 6a 74 Data Ascii: ~T5/FGN5[z/a`efT0S{\|T+O[$N34lC2H+5D kPGxC$x~HFjq$:Mm!muOKm#.KGQ0<TKvaHvhA"$g)7v7B.+aFU]c-0Vu&j^)z8}MeuP04)#D\|Zjt
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 73 e4 e3 9e 6a a4 82 ba 53 fa 95 f8 81 6f 65 10 5a b9 df 55 47 8e bd 52 3d 8b 55 eb 27 da 16 f5 c4 fc ec 25 4d a3 6f 59 cb 60 b8 84 d7 51 d2 94 25 86 79 b0 89 94 7a d1 9e eb b4 ce 24 0f 8d 6b c4 7e e2 a1 56 1c b3 55 99 0b 70 b5 d0 6f 02 f8 e6 28 16 72 32 fe c6 9e 7c 5f 63 4f 4a 8d 3d 59 aa b1 27 e5 c6 2a 6e 5f 71 51 72 52 14 72 1f b1 f3 25 d6 ea 32 a9 b0 56 16 fb 5c 62 ad 5e 27 15 d6 ca c3 e6 97 aa 77 19 f9 c5 d5 3b fc fb e2 06 b8 0c fd 51 e2 18 2b 2c 78 d4 85 a4 bf 3d d9 28 b6 65 ae 65 50 be 60 89 70 69 d5 0b 72 97 c3 ef c8 7b 52 ca db d3 07 f0 4d 62 24 1e 97 89 ed d6 57 ca 86 b6 fb 7d 43 05 d7 f8 f8 e5 7a 3f 79 bc fb 22 95 8f be 7d a9 46 d9 e7 42 7b 28 79 64 35 e1 f5 5f 6d c2 48 ef 92 b9 4d c0 4a e4 c8 01 87 7a 63 33 ff 75 20 65 96 34 c4 ac 22 5f db 9c Data Ascii: sjSoeZUGR=U'%MoY`Q%yz$k~VUpo(r2\|_cOJ=Y'*n_qQrRr%2V\b^'w;Q+,x=(eeP`pir{RMb$W}Cz?y"}FB{(yd5_mHMJzc3u e4"_
2024-08-28 07:28:18 UTC	1024	IN	Data Raw: 4a 4c b8 f6 30 e8 1f 85 3d 58 8b 1d c4 0d e4 ed 4f d1 53 4c 04 7f 52 0d 02 56 31 8c 9f 81 d2 45 06 3e b8 12 fe 6e 67 66 46 e6 1f e1 ef 6b cd f8 99 2f b9 76 a9 bc fd ad 0e 8a 4f 65 aa 0f 17 95 16 cf 8b 5f 84 22 91 cc 72 c5 16 c2 7d 56 3b 96 02 46 86 40 2f 21 b0 39 0a 1e e0 54 2e 65 68 67 d2 f0 86 ad d5 44 e3 90 d0 ac 1b 0f 3c b3 57 73 d8 4c 00 fd f9 12 8a 28 70 24 0f 97 48 5f f9 54 e0 22 db cb 3e ab af 12 ce 29 83 ff 48 62 dc 33 ae 56 04 ed 09 34 73 da 59 21 ae 6d ed 59 99 83 66 d8 d9 24 9a c1 3e 24 f3 61 f7 79 bb 84 ef 2d 19 35 6b d1 fb a2 f6 48 a6 6a 1f 2d 14 15 b6 51 a1 f2 7d f7 b2 c2 36 c3 2e 7e 98 b9 91 89 45 c6 10 39 08 55 b7 ab d7 29 5c 35 97 67 56 f7 84 b5 22 ee be b4 e2 01 1a 8f 5c 63 44 dc cb d0 15 c1 1f 32 90 e5 9b 43 48 3c 73 61 a6 ed f1 ae 00 Data Ascii: JL0=XOSLRV1E>ngfFk/vOe_"r}V;F@/!9T.ehgD<WsL(p$H_T">)Hb3V4sY!mYf$>$ay-5kHj-Q}6.~E9U)\5gV"\cD2CH<sa
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: e1 52 b5 ff 67 7e b5 8a 4d 53 cf 1d c7 71 20 66 fc 05 5e 03 80 b0 96 ee de a1 54 04 41 e7 59 1c 99 e7 7e 58 f6 84 ae 8f 92 df 40 d7 bc 6d 3e 1c 7e 23 c5 2f 3e e2 7e 23 6e 14 cd fb 21 0a 13 86 a6 83 ed dd e1 94 b8 df 42 70 6e 39 d9 be cf 24 3c db 56 a6 7b ef 25 3c db 0e fc d0 0a 26 bc 35 6a aa 0b 4a c3 15 ba a5 5f 49 b7 14 7f bd 94 05 64 2c ef e8 fa da 79 d3 54 98 29 15 ce 9b 3e 3f e3 7a 8a a6 de b7 11 08 a5 51 3f 94 6e 68 5e aa 1b b2 1d a0 a2 9a 6c 8c 54 5b ee 87 72 6d d4 cc c8 6c 41 5c b4 0a 64 90 73 e6 10 79 56 15 37 2c 29 be ce e8 9e 37 ea bf ab fb cf da 90 c4 dd bf 5e e5 52 7b 6e e0 e4 e5 ac 5f 59 59 68 c7 04 5c b0 72 e6 1c 5c 95 0a 3c 42 8f ac d6 34 55 8b 4a d9 9d a9 23 82 08 b8 a1 4d 25 0f 0c 07 33 23 b0 b2 37 94 e6 bd ac 46 93 a4 80 2c c7 d7 13 68 Data Ascii: Rg~MSq f^TAY~X@m>~#/>~#n!Bpn9$<V{%<&5jJ_Id,yT)>?zQ?nh^lT[rmlA\dsyV7,)7^R{n_YYh\r\<B4UJ#M%3#7F,h
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: cd fb 8e d3 c8 ee 34 b7 b8 4f 81 be 0f a6 ea 6a aa 79 a3 29 53 fd 0a a7 68 0a 45 da 49 60 19 17 ca 2e 95 1a e4 f3 69 a8 d6 c0 2e 9e d2 7e d2 8e f6 d4 3d 9e 69 67 7b e9 b4 8c f2 1b 5b bb 1a ec b9 2f 62 73 e4 d4 fa 91 77 8d c8 df ae 4b 54 1e 16 8e ae a8 ec 70 4c 8b c7 14 9d 86 e3 92 63 52 72 88 3c 2a 5c a8 55 06 70 e4 d6 4e e5 e4 18 5f e1 38 0c 03 cf a9 54 52 eb 08 0d 11 47 86 21 e2 67 79 47 be c8 09 3d e4 b2 f1 b1 77 d3 c1 17 a9 6b ff ac d0 ea 12 13 71 16 0d 32 79 9d 37 aa 40 98 35 81 8a 8e f2 07 ae 87 43 41 61 d4 62 49 28 60 bb 7d d4 35 87 d4 84 04 1c 0e d0 02 94 90 e4 50 e8 83 d9 0e 36 0c 8b 21 0f 6b ce a6 e3 dd 35 55 ed 54 32 d4 e7 a8 b6 08 fa 3e 3b 3e b8 0e 85 6a a7 34 94 bb 69 6b 04 a7 36 db 82 0c fd 43 97 b1 9f 77 f9 7d dd 5b ae 6d 4b 02 98 87 f2 d4 Data Ascii: 4Ojy)ShEI`.i.~=ig{[/bswKTpLcRr<*\UpN_8TRG!gyG=wkq2y7@5CAabI(`}5P6!k5UT2>;>j4ik6Cw}[mK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	54926	3.75.62.37	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:17 UTC	846	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=56916935156195165264526806106049391917&gdpr=0&gdpr_consent=&uid=56916935156195165264526806106049391917&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBJHRzmYCEK-ZxQ55hAIOdc2zPBjT7wkFEgEBAQEj0GbYZtxA0iMA_eMAAA&S=AQAAAjrd_CivSliVaIADqiZyGcQ
2024-08-28 07:28:18 UTC	720	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cu~2kdj;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Thu, 28-Aug-2025 07:28:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-TlJ6vXZE2pHRMWdLtNk2Rv.lrdyKacsILCo-~A Age: 0 Connection: close Server: ATS/9.1.10.134 Set-Cookie: A3=d=AQABBJHRzmYCEK-ZxQ55hAIOdc2zPBjT7wkFEgEBAQEj0GbYZtxA0iMA_eMAAA&S=AQAAAjrd_CivSliVaIADqiZyGcQ; Expires=Thu, 28 Aug 2025 13:28:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	54931	13.107.246.60	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:18 UTC	379	OUT	GET /scripts/c/ms.analytics-web-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:18 UTC	969	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:18 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 140778 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:57 GMT ETag: 0x8DC99EFA7D93FA1 x-ms-request-id: 45038a1b-801e-00f1-26af-ef346c000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-3.2.18.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T072818Z-15c77d89844kcg9tenmhtd29e40000000fmg0000000040na x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 07:28:18 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 2a 56 69 5e 65 29 2b 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 69 28 65 29 7b 76 61 72 20 74 3d 30 2c 6e 3d 72 65 28 7a 6e 29 7c 7c 72 65 28 47 6e 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 6e 26 26 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 26 46 69 3a 74 29 26 26 64 69 28 29 26 26 28 42 69 7c 7c 71 69 28 29 2c 74 3d 47 69 28 29 26 46 69 29 2c 30 3d 3d 3d 74 26 26 28 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 56 69 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 29 2c 65 7c 7c 28 74 3e 3e 3e 3d 30 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 69 28 65 29 7b 76 61 72 20 74 3d 28 28 4b 69 3d 33 36 Data Ascii: Vi^e)+e)}catch(t){}}function zi(e){var t=0,n=re(zn)\|\|re(Gn);return 0===(t=n&&n.getRandomValues?n.getRandomValues(new Uint32Array(1))[0]&Fi:t)&&di()&&(Bi\|\|qi(),t=Gi()&Fi),0===t&&(t=Math.floor(ViMath.random()\|0)),e\|\|(t>>>=0),t}function Gi(e){var t=((Ki=36
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 69 61 6c 69 7a 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 22 29 2c 54 3d 65 7c 7c 7b 7d 2c 76 5b 71 5d 3d 54 2c 51 28 65 5b 7a 5d 29 26 26 6a 28 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 20 6b 65 79 22 29 2c 72 3d 69 2c 76 5b 4c 61 5d 3d 69 3b 65 3d 24 74 28 54 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 44 26 26 28 72 5b 68 65 5d 28 44 29 2c 44 3d 6e 75 6c 6c 29 2c 72 26 26 21 44 26 26 21 30 21 3d 3d 65 26 26 28 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 69 29 7b 6d 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 79 69 5b 52 5d 3b 74 2b 2b 29 6d 69 5b 79 69 5b 74 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: ialized more than once"),T=e\|\|{},v[q]=T,Q(e[z])&&j("Please provide instrumentation key"),r=i,v[La]=i;e=$t(T.disableDbgExt),!0===e&&D&&(r[he](D),D=null),r&&!D&&!0!==e&&(D=function(e){if(!mi){mi={};for(var t=0;t<yi[R];t++)mi[yi[t]]=function(t,n){return func
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 30 2c 6c 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 65 5b 73 5d 3b 69 66 28 66 29 7b 69 66 28 68 3c 3d 6e 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 76 61 72 20 64 3d 6d 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 28 66 29 3b 69 66 28 64 26 26 64 2e 6c 65 6e 67 74 68 3c 3d 75 29 7b 76 61 72 20 70 3d 64 2e 6c 65 6e 67 74 68 3b 69 66 28 63 3c 74 2e 6c 65 6e 67 74 68 2b 70 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 74 26 26 28 74 2b 3d 22 5c 6e 22 29 2c 74 2b 3d 64 2c 32 30 3c 2b 2b 6c 26 26 28 74 2e 73 75 62 73 74 72 28 30 2c 31 29 2c 6c 3d 30 29 2c 69 3d 21 30 2c 6e 2b 2b 7d 65 6c 73 65 28 64 3f 72 3a 61 29 2e 70 75 73 68 28 66 29 2c 65 2e 73 70 Data Ascii: 0,l=0;s<e.length;){var f=e[s];if(f){if(h<=n){g.overflow=v.split(s);break}var d=m.getEventBlob(f);if(d&&d.length<=u){var p=d.length;if(c<t.length+p){g.overflow=v.split(s);break}t&&(t+="\n"),t+=d,20<++l&&(t.substr(0,1),l=0),i=!0,n++}else(d?r:a).push(f),e.sp
2024-08-28 07:28:18 UTC	16384	IN	Data Raw: 69 64 65 6e 74 69 66 69 65 72 29 2c 6b 3d 77 63 28 77 2e 73 65 74 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 2c 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 29 2c 4a 3d 21 77 2e 64 69 73 61 62 6c 65 4f 70 74 69 6d 69 7a 65 4f 62 6a 26 26 21 21 72 65 28 22 63 68 72 6f 6d 65 22 29 2c 74 3d 65 2e 67 65 74 57 50 61 72 61 6d 2c 65 2e 67 65 74 57 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 77 2e 69 67 6e 6f 72 65 4d 63 31 4d 73 30 43 6f 6f 6b 69 65 50 72 6f 63 65 73 73 69 6e 67 26 26 28 65 7c 3d 32 29 2c 65 7c 74 28 29 7d 2c 30 3c 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 26 26 28 48 3d 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 29 2c 30 3c 77 2e 69 6d 6d 65 64 69 Data Ascii: identifier),k=wc(w.setTimeoutOverride,w.clearTimeoutOverride),J=!w.disableOptimizeObj&&!!re("chrome"),t=e.getWParam,e.getWParam=function(){var e=0;return w.ignoreMc1Ms0CookieProcessing&&(e\|=2),e\|t()},0<w.eventsLimitInMem&&(H=w.eventsLimitInMem),0<w.immedi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	54934	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:18 UTC	387	OUT	GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:19 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 9077 Connection: close Date: Wed, 28 Aug 2024 07:28:20 GMT Last-Modified: Thu, 13 Jun 2024 09:22:21 GMT ETag: "d2ba765f9d6c67ba7509d5da2286bbb7" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: .7nUC3X5TW_ivyGxSQ.GDKNPomyOddlI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e1f996a9009532eeea33edfd32ef3240.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: YT5NniABPQLDAbAFmlJ98hEU0r0gUDlReq6vhHjhh5QeghBkcJ2C4w== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Vary: Origin
2024-08-28 07:28:19 UTC	9077	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 6b 5b db ba d2 e8 67 fa 3c eb 3f 18 ef 77 93 a4 38 4e 02 2d 5d 0d cb ed cb a5 5d 84 03 94 4d 28 dd 9b cb ee 63 6c 25 71 71 ec 2c db 09 64 95 fc f7 33 a3 8b 2d db 72 a0 eb 72 3e 9c f4 29 c4 d2 68 34 1a cd 8c 66 46 b2 68 b5 b4 bd 70 32 8f bc e1 28 d1 36 da ed ad e6 46 7b e3 95 b6 e7 7b ce dd b9 ed 13 ed 28 71 4d 43 fb dc d7 4e ed 84 04 89 76 4a 02 d7 0b 86 3f bd f8 e9 c5 bd 17 b8 e1 bd 99 c2 fe ea 87 b7 b6 af 59 5a 45 c5 e3 a3 f6 7d b1 5d 6e d7 27 49 02 28 63 45 cb b4 4a b4 fd e9 45 01 ab e9 05 5e 02 2d 95 c5 a2 55 b1 32 76 22 6f 92 c4 8a 66 a2 e6 89 96 e6 8c 44 b1 17 06 88 e2 bb 7e 1f e9 5d 4d bf 8d 3c 77 48 9a 5f ce 3a 9d b6 f9 2d d6 0d 4d 9f 38 0e d6 b4 5f bb 9b 1b 9b 5b 9b 4d f7 f5 e6 ab e6 2b f7 ed 66 f3 ed ed d6 eb Data Ascii: }k[g<?w8N-]]M(cl%qq,d3-rr>)h4fFhp2(6F{{(qMCNvJ?YZE}]n'I(cEJE^-U2v"ofD~]M<wH_:-M8_[M+f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	54937	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:18 UTC	1036	OUT	GET /ibs:dpid=53196&dpuuid=Q7781164971607730135 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
2024-08-28 07:28:19 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: yJagpWRUSak= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-00f8aa9d1.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	54938	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:18 UTC	1056	OUT	GET /ibs:dpid=30646?dpuuid=y-TlJ6vXZE2pHRMWdLtNk2Rv.lrdyKacsILCo-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
2024-08-28 07:28:19 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: UFWQMuWFSQo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0b320fe1c.edge-irl1.demdex.com 4 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	54939	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	644	OUT	GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:19 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 7118 Connection: close Date: Wed, 28 Aug 2024 07:28:20 GMT Last-Modified: Thu, 13 Jun 2024 09:22:20 GMT ETag: "23a130fd6a6a4d521f68f6c77c1406d1" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: 4jKhtkHaMTvoqhRUnY2NuCnBTwc1lBBz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fb5610ec56d3f427bcbcfdd851770614.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: rSfwxfD1RT3x2oOnFr-mVYd3Ge-NrYaXYEiZ49mKpGiBNHDc6-m-CQ== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Access-Control-Allow-Origin: *
2024-08-28 07:28:19 UTC	7118	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 3c 6b 77 da c8 92 9f c7 e7 cc 7f 10 9a bb 58 0a 42 60 3b 99 d9 8b a2 cb 38 60 27 4e fc 8a 4d 92 99 60 26 a7 25 35 a0 41 48 44 12 d8 04 b4 bf 7d ab ba f5 04 61 67 e6 ee 5d e7 04 5a fd a8 ae ae ae 77 b7 68 34 84 8e 37 5b fa f6 68 1c 0a 87 cd e6 cf f5 c3 e6 e1 73 a1 e3 d8 e6 a4 47 1c 2a 9c 87 96 aa 08 1f 6e 85 6b 12 52 37 14 ae a9 6b d9 ee e8 c7 bd 1f f7 ee 6d d7 f2 ee d5 b4 ef 6b c7 33 88 23 e8 c2 8e 86 f5 5a 58 45 da f6 b8 5b 1a 86 00 32 28 19 99 36 25 63 7f dc db 80 aa da ae 1d c2 c8 d2 ea 64 d4 66 63 60 fa f6 2c 0c 4a 86 25 2d bb e7 8b 7b a8 43 db 09 a9 bf 1b 44 d2 01 20 49 c3 b9 6b 86 b6 e7 0a 92 2c ac 7e dc fb 61 41 7c c1 a7 a6 e7 23 29 7b 63 9f 06 63 cf b1 00 d6 05 09 c7 aa 4f 80 08 53 e8 fa 4c 38 68 36 19 12 3f f8 34 Data Ascii: <kwXB`;8`'NM`&%5AHD}ag]Zwh47[hsG*nkR7kmk3#ZXE[2(6%cdfc`,J%-{CD Ik,~aA\|#){ccOSL8h6?4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	54943	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	1048	OUT	GET /ibs:dpid=57282&dpuuid=98D0B2CF29A060328D4DE3B9EC6BCBC4 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698
2024-08-28 07:28:19 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: sLKA7MiyT/4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-034528526.edge-irl1.demdex.com 5 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	54946	192.132.33.67	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	632	OUT	GET /dmp/adobe/user?dd_uuid=56916935156195165264526806106049391917 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:19 UTC	558	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: //dpm.demdex.net/ibs:dpid=49276&dpuuid=b114c5b2-6292-4cce-864d-2bb2656ad5f2 Set-Cookie: GLOBALID=2uKlc8-sIBd987FnXwXCGpn4eAwEJ1V5dHI45XTIJbsKOkZtCPC4rfzK5WSo4YspImr2YKx9BpQC4TM1; domain=.bttrack.com; expires=Tue, 26-Nov-2024 07:28:12 GMT; path=/; secure; SameSite=None X-ServerName: Track002-iad Date: Wed, 28 Aug 2024 07:28:12 GMT Connection: close Content-Length: 206 Strict-Transport-Security: max-age=31536000;
2024-08-28 07:28:19 UTC	206	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 25 32 66 25 32 66 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 25 32 66 69 62 73 25 33 61 64 70 69 64 25 33 64 34 39 32 37 36 25 32 36 64 70 75 75 69 64 25 33 64 62 31 31 34 63 35 62 32 2d 36 32 39 32 2d 34 63 63 65 2d 38 36 34 64 2d 32 62 62 32 36 35 36 61 64 35 66 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="%2f%2fdpm.demdex.net%2fibs%3adpid%3d49276%26dpuuid%3db114c5b2-6292-4cce-864d-2bb2656ad5f2">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	54944	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	572	OUT	GET /www/bridge-WR110.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:20 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 6089 Connection: close Last-Modified: Mon, 20 May 2024 10:53:04 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: RV1_qv1iW41b5v52vW3grEK.N5_cJGdu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 28 Aug 2024 07:28:21 GMT Cache-Control: max-age=86400 ETag: "59fa60456db5679d15a03d811a40fe1f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 dc85053069397a282d87170bb1bcab4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 0ilmLsBgUowFZFRwSkAsvBO44LAES6xWGa--IlUL3qt6jjzjplU0Xw== age: 0 Access-Control-Allow-Origin: *
2024-08-28 07:28:20 UTC	6089	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 76 2c 61 2c 7a 3b 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 61 3d 66 61 6c 73 65 3b 7a 3d 43 6c 69 63 6b 54 61 6c 65 47 6c 6f 62 61 6c 2e 61 70 69 7c 7c 7b 7d 3b 74 3d 41 28 22 43 6c 69 63 6b 54 61 6c 65 53 65 74 74 69 6e 67 73 2e 49 6e 74 65 67 72 61 74 69 6f 6e 2e 50 72 6f 6a 65 63 74 54 79 70 65 22 2c 30 29 3b 76 3d 7b 63 6c 69 63 6b 74 61 6c 65 4f 6e 6c 79 3a 30 2c 6d 31 3a 31 2c 6d 32 3a 32 2c 6d 32 50 72 69 6d 65 3a 33 7d 3b 6e 28 29 3b 68 28 29 3b 77 28 29 3b 6c 28 29 3b 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 29 7b 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 3d 74 72 75 Data Ascii: (function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	54948	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	822	OUT	GET /ibs:dpid=53196&dpuuid=Q7781164971607730135 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
2024-08-28 07:28:19 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: z8I+hFbyTaQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09b2dfa67.edge-irl1.demdex.com 14 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	54949	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:19 UTC	842	OUT	GET /ibs:dpid=30646?dpuuid=y-TlJ6vXZE2pHRMWdLtNk2Rv.lrdyKacsILCo-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
2024-08-28 07:28:19 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: MotdUVpUSi4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0deeefb9f.edge-irl1.demdex.com 7 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	54950	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:20 UTC	1074	OUT	GET /ibs:dpid=49276&dpuuid=b114c5b2-6292-4cce-864d-2bb2656ad5f2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
2024-08-28 07:28:20 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: GFslDU+XSDM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0b3327ba6.edge-irl1.demdex.com 4 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	54952	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:20 UTC	834	OUT	GET /ibs:dpid=57282&dpuuid=98D0B2CF29A060328D4DE3B9EC6BCBC4 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695
2024-08-28 07:28:20 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BJFCIasuRlM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-097ef2758.edge-irl1.demdex.com 17 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	54955	13.248.245.213	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:20 UTC	697	OUT	GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:20 UTC	735	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:20 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4289392735944159371995; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 26 Nov 2024 07:28:20 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4289392735944159371995; Max-Age=7776000; Expires=Tue, 26 Nov 2024 07:28:20 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	54951	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:20 UTC	435	OUT	GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 7118 Connection: close Date: Wed, 28 Aug 2024 07:28:22 GMT Last-Modified: Thu, 13 Jun 2024 09:22:20 GMT ETag: "23a130fd6a6a4d521f68f6c77c1406d1" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: 4jKhtkHaMTvoqhRUnY2NuCnBTwc1lBBz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 149b1af6ad8d2c0fedea82bfb1c29c66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 0fH6AzaygAZmWqymuaDxhZ1olEznIh4bji6_oiG-Wp0pvUPnCAfYWA== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Vary: Origin
2024-08-28 07:28:21 UTC	6396	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 3c 6b 77 da c8 92 9f c7 e7 cc 7f 10 9a bb 58 0a 42 60 3b 99 d9 8b a2 cb 38 60 27 4e fc 8a 4d 92 99 60 26 a7 25 35 a0 41 48 44 12 d8 04 b4 bf 7d ab ba f5 04 61 67 e6 ee 5d e7 04 5a fd a8 ae ae ae 77 b7 68 34 84 8e 37 5b fa f6 68 1c 0a 87 cd e6 cf f5 c3 e6 e1 73 a1 e3 d8 e6 a4 47 1c 2a 9c 87 96 aa 08 1f 6e 85 6b 12 52 37 14 ae a9 6b d9 ee e8 c7 bd 1f f7 ee 6d d7 f2 ee d5 b4 ef 6b c7 33 88 23 e8 c2 8e 86 f5 5a 58 45 da f6 b8 5b 1a 86 00 32 28 19 99 36 25 63 7f dc db 80 aa da ae 1d c2 c8 d2 ea 64 d4 66 63 60 fa f6 2c 0c 4a 86 25 2d bb e7 8b 7b a8 43 db 09 a9 bf 1b 44 d2 01 20 49 c3 b9 6b 86 b6 e7 0a 92 2c ac 7e dc fb 61 41 7c c1 a7 a6 e7 23 29 7b 63 9f 06 63 cf b1 00 d6 05 09 c7 aa 4f 80 08 53 e8 fa 4c 38 68 36 19 12 3f f8 34 Data Ascii: <kwXB`;8`'NM`&%5AHD}ag]Zwh47[hsG*nkR7kmk3#ZXE[2(6%cdfc`,J%-{CD Ik,~aA\|#){ccOSL8h6?4
2024-08-28 07:28:21 UTC	722	IN	Data Raw: 74 ed 32 0b eb fe 06 31 7b b6 43 91 8e a3 84 7a 11 13 90 c7 f4 36 18 71 8c ca 5a 5c 94 9e 36 e5 1c 37 88 5f 19 33 c0 dc d7 dd 6b 28 c3 fc e8 8a e7 70 c1 bb bd b1 73 1c da 21 66 48 2a b1 18 88 0c 4a 23 18 7b 33 c1 f5 ee 93 0d bc 24 d2 50 66 cc 7c cc bd 2e 80 05 a2 3f f2 fc a5 80 e1 38 cb 38 b4 f2 f0 6f 63 08 0c 74 eb 91 14 84 d1 48 b5 4c 3d 98 a2 13 64 cc 03 70 28 02 96 de e2 a2 b9 65 be b6 ad 17 a6 4a 99 83 39 54 f6 4c 9d bd dd d8 05 0c 65 7c 83 0e b5 87 24 37 30 fd f2 88 2e d9 39 48 43 24 0c 80 7e f4 12 18 15 fd db a9 3e 2c 70 04 2a 1e 25 33 9b 18 5c e3 c5 bb e4 9c 7e 28 47 60 64 2c 76 b6 8d a7 14 51 94 4d 5e fa 5a ce 34 be 17 fa 5d af db 64 af d1 3c 75 b7 83 dd 1d 61 6f 49 94 5d f0 48 5b f9 29 80 91 bc f5 f3 9f 7c 2d c7 dc f9 5a 8e 9c df 1f f4 f1 f1 ed Data Ascii: t21{Cz6qZ\67_3k(ps!fHJ#{3$Pf\|.?88octHL=dp(eJ9TLe\|$70.9HC$~>,p%3\~(G`d,vQM^Z4]d<uaoI]H[)\|-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	54956	34.200.199.99	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:20 UTC	457	OUT	POST /quota?ct=0 HTTP/1.1 Host: q-aus1.clicktale.net Connection: keep-alive Content-Length: 207 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:20 UTC	207	OUT	Data Raw: 7b 22 72 65 63 6f 72 64 69 6e 67 54 79 70 65 73 22 3a 5b 35 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 62 75 79 2f 63 6f 6d 70 61 72 65 2d 61 6c 6c 2d 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2d 70 72 6f 64 75 63 74 73 3f 6f 63 69 64 3d 63 6d 6d 69 62 62 77 73 34 64 33 22 2c 22 70 72 6f 6a 65 63 74 49 64 22 3a 32 34 32 32 2c 22 75 75 22 3a 22 37 65 38 66 62 31 34 31 2d 66 64 63 35 2d 61 62 35 36 2d 64 38 36 66 2d 36 65 34 65 65 65 61 32 38 61 33 63 22 2c 22 73 6e 22 3a 31 2c 22 70 6e 22 3a 31 7d Data Ascii: {"recordingTypes":[5],"url":"https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3","projectId":2422,"uu":"7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c","sn":1,"pn":1}
2024-08-28 07:28:21 UTC	324	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Type: application/json Content-Length: 29 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression
2024-08-28 07:28:21 UTC	29	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 52 65 63 6f 72 64 69 6e 67 54 79 70 65 73 22 3a 5b 35 5d 7d Data Ascii: {"allowedRecordingTypes":[5]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	54960	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	875	OUT	GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products%3Focid%3Dcmmibbws4d3&dr=&dw=1263&dh=6283&ww=1280&wh=907&sw=1280&sh=1024&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&sn=1&hd=1724830099&v=13.89.2&pid=2422&pn=1&r=090415 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:21 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	54959	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	806	OUT	GET /pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&r=750718 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:21 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	54957	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	770	OUT	GET /pageEvent?value=H4sIAAAAAAAAA3POz0vLTLdSCErNSU0sTo03MjAyMTAzNAYAgJLsFxgAAAA%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&r=418523 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:21 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	54958	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	765	OUT	GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA6tWCghxjncvzUxRslIyME0xNjI2M9ZNMTU20TVJsTTWtUwyM9VNTkk1MzcxNzdNNTdUqgUAotlAIzMAAAA%3D&ct=2&r=041858 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:21 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	54962	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	860	OUT	GET /ibs:dpid=49276&dpuuid=b114c5b2-6292-4cce-864d-2bb2656ad5f2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693
2024-08-28 07:28:21 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: jvbk8ISeRME= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-00d281cc2.edge-irl1.demdex.com 8 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	54961	108.138.7.18	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	363	OUT	GET /www/bridge-WR110.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	645	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 6089 Connection: close Last-Modified: Mon, 20 May 2024 10:53:04 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: RV1_qv1iW41b5v52vW3grEK.N5_cJGdu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 28 Aug 2024 07:28:22 GMT Cache-Control: max-age=86400 ETag: "59fa60456db5679d15a03d811a40fe1f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cfbb6e543d97587a32117dbabb25fc86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: dwH11VZkCIcsx3aYZ0j8gq2dgyuStPOsZa55pDmZkyEyJk95uyzMzg== age: 0 Vary: Origin
2024-08-28 07:28:21 UTC	6089	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 76 2c 61 2c 7a 3b 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 61 3d 66 61 6c 73 65 3b 7a 3d 43 6c 69 63 6b 54 61 6c 65 47 6c 6f 62 61 6c 2e 61 70 69 7c 7c 7b 7d 3b 74 3d 41 28 22 43 6c 69 63 6b 54 61 6c 65 53 65 74 74 69 6e 67 73 2e 49 6e 74 65 67 72 61 74 69 6f 6e 2e 50 72 6f 6a 65 63 74 54 79 70 65 22 2c 30 29 3b 76 3d 7b 63 6c 69 63 6b 74 61 6c 65 4f 6e 6c 79 3a 30 2c 6d 31 3a 31 2c 6d 32 3a 32 2c 6d 32 50 72 69 6d 65 3a 33 7d 3b 6e 28 29 3b 68 28 29 3b 77 28 29 3b 6c 28 29 3b 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 29 7b 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 3d 74 72 75 Data Ascii: (function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	54964	13.248.245.213	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	779	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=4289392735944159371995; tluid=4289392735944159371995
2024-08-28 07:28:21 UTC	689	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4289392735944159371995; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 26 Nov 2024 07:28:21 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4289392735944159371995; Max-Age=7776000; Expires=Tue, 26 Nov 2024 07:28:21 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	54965	54.90.52.195	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	693	OUT	POST /exist?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c HTTP/1.1 Host: srm.bf.contentsquare.net Connection: keep-alive Content-Length: 1328 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	1328	OUT	Data Raw: 7b 22 70 72 6f 6a 65 63 74 49 64 22 3a 22 32 34 32 32 22 2c 22 66 69 6c 74 65 72 22 3a 32 2c 22 68 61 73 68 65 73 22 3a 5b 22 65 65 32 62 38 34 31 35 32 39 65 35 64 30 36 61 65 61 65 37 66 36 35 62 34 31 33 62 34 30 62 62 66 65 66 35 31 36 31 63 39 66 61 64 39 61 38 61 31 37 35 35 64 61 63 30 33 38 30 36 32 39 31 62 22 2c 22 64 36 33 31 66 30 66 34 37 39 39 64 33 33 64 65 33 64 61 35 63 61 30 37 32 63 65 32 61 31 64 35 62 61 33 31 39 63 63 61 35 33 35 33 61 66 64 35 37 33 63 37 32 39 32 38 61 65 66 31 63 65 63 65 22 2c 22 33 35 65 66 34 37 34 30 31 32 35 63 31 37 66 37 33 66 30 31 33 36 37 31 32 39 66 38 32 62 38 32 62 37 32 34 65 33 35 63 33 34 36 30 32 31 35 37 36 37 61 30 63 34 39 64 64 64 65 65 39 30 31 30 22 2c 22 65 34 30 65 64 31 39 32 61 37 66 37 Data Ascii: {"projectId":"2422","filter":2,"hashes":["ee2b841529e5d06aeae7f65b413b40bbfef5161c9fad9a8a1755dac03806291b","d631f0f4799d33de3da5ca072ce2a1d5ba319cca5353afd573c72928aef1cece","35ef4740125c17f73f01367129f82b82b724e35c3460215767a0c49dddee9010","e40ed192a7f7
2024-08-28 07:28:21 UTC	158	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: *
2024-08-28 07:28:21 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	54966	18.209.2.95	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	587	OUT	GET /dv/sync?tid=6 HTTP/1.1 Host: ag.innovid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	388	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=80742&dpuuid=3f2a63db-5b48-4539-9091-71c7392e8f57 Set-Cookie: uuid=3f2a63db-5b48-4539-9091-71c7392e8f57-20240828 03:28:21; Max-Age=7776000; Expires=Tue, 26 Nov 2024 07:28:21 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	54975	34.195.65.55	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:21 UTC	354	OUT	GET /quota?ct=0 HTTP/1.1 Host: q-aus1.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:21 UTC	143	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 07:28:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 42 Connection: close
2024-08-28 07:28:21 UTC	42	IN	Data Raw: 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 2e Data Ascii: The requested resource could not be found.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	54978	54.208.196.179	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	542	OUT	POST /v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=1&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive Content-Length: 108486 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 0b 93 a3 48 92 2e fa 57 b8 b5 77 c7 76 f7 34 99 bc 1f 55 56 d6 56 9d 55 dd 53 76 fb 65 9d d5 33 67 ed f4 b1 32 04 21 89 4e 04 1a 40 f9 98 dd fd ef 37 40 52 26 42 a0 f0 08 b9 a4 20 a5 39 67 ab f3 41 02 8a 70 ff dc c3 1f 9f ff 9f ff 7a 53 3e cd c9 9b b7 86 fb cd 9b 28 28 e9 57 ba 6b 58 9e a9 69 be af b9 e6 37 6f 82 7c 52 bc 79 fb 7f fe eb 0d b9 27 69 f9 73 30 a3 97 bc f9 f5 cb 8d f2 c3 ef 9f 3f 2a ff ad 68 76 64 1a a6 63 aa 91 6d 5a aa 15 f9 a6 ea 8f 1c 5b 0d 23 e2 b8 96 eb da c4 d5 df fc cf ff fd 9f 6f 76 3f c9 eb 79 d2 4d 96 8e e3 c9 5b e5 37 92 90 a0 20 5f 0d cd b0 34 47 37 57 b7 7c fe 9b b0 f8 1c d1 3b 7e f3 66 9c e5 b3 a0 7c f3 56 fb e6 cd 88 fe c1 ef bf 7d a6 77 99 96 e5 bc 78 7b 7d fd f0 f0 70 35 8b c3 3c 2b b2 71 Data Ascii: H.Wwv4UVVUSve3g2!N@7@R&B 9gApzS>((WkXi7o\|Ry'is0?*hvdcmZ[#ov?yM[7 _4G7W\|;~f\|V}wx{}p5<+q
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: 87 f4 9d a1 d4 0d e6 0e 1c 32 07 83 43 58 4e 28 7b 2c 06 67 80 c5 da 23 99 ab 6b f2 93 f3 54 05 a0 8d e0 ca a4 ba ef 2a c4 52 fd 4a ad 7e 40 8d 73 51 a8 8b 95 5c 5e 87 e3 7f b8 65 19 6a 77 d3 42 6b 4c 03 4b 92 2e 29 3e 60 4c 06 a0 42 9d ad 06 20 bf b5 eb 3a 99 14 06 29 2c c3 1e b0 62 9b b8 f4 6e f4 99 27 48 f7 02 e6 82 70 1a 17 99 d3 bd 9b 9a f1 eb cd d7 4a 31 be 56 9a 01 6f 38 e8 d5 12 eb ec 8c 0a 7b 84 06 a7 51 b1 f7 c8 f3 ea 9a fc 84 40 3b 8c ca 3c 7c 31 29 2f 96 64 f2 0f 6f c3 92 fc 7a b3 86 f2 a3 d9 8f 0d 2d e9 ec 45 00 d9 8d ae eb 64 d2 09 24 bb c1 9e b7 62 9b d8 71 6e fb 04 29 5f c0 94 10 3e bb 01 1a 13 22 87 dd 58 7b 54 1c 9d 08 bd 2a 62 9f 9f d1 c0 4e f5 da 7b a4 7a 75 cd 94 de 68 b0 da d4 6a 2b f2 62 25 6a c9 7c 16 d1 a3 1f 33 7a 5a 10 40 36 a2 Data Ascii: 2CXN({,g#kTRJ~@sQ\^ejwBkLK.)>`LB :),bn'HpJ1Vo8{Q@;<\|1)/doz-Ed$bqn)_>"X{TbN{zuhj+b%j\|3zZ@6
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: 20 86 a3 36 7b 38 10 c3 d1 b2 7a 13 88 61 fe b0 10 6f ca fc a3 b8 8f b0 27 bc 62 20 53 d7 23 34 e1 a8 af 62 6a 68 42 ad 6b 41 0e 4d 34 0b 5f 1c 71 bf 38 5a 05 9e bd 43 13 8e fa 9e 45 5e 2a 5a f7 ec 50 a0 09 47 2d b7 84 84 26 78 cb 25 3b 32 68 82 ab ef 6d 72 d3 a0 e6 a6 63 a1 89 36 6e 7a 37 d0 84 9a 56 ce c9 03 68 0e a0 be 51 e3 04 6a 76 35 39 34 c1 49 ca d3 71 43 aa d1 10 ea cb 4a cd 2f 26 87 26 d4 f4 62 ce 88 75 e7 98 9a 5e ec 91 0f a9 34 2f 36 44 10 00 37 26 31 bd 98 75 4d 2f ee 4d 8e 6d d8 f4 62 46 4e 2f 66 13 bd f8 ac e8 c5 0c 40 2f c6 11 14 19 88 5e dc 4a 0e f5 23 ae d9 50 1c 4a 0e 45 8c d0 21 39 94 01 88 b9 b8 b9 07 11 73 c7 44 0e 65 6a fe 2c 92 1c ca b4 08 b4 c3 aa b8 64 6a ca 2c 32 59 a1 c7 98 ed 3f 59 01 60 c9 e2 82 65 2d 96 6c ff c9 0a 00 49 16 Data Ascii: 6{8zao'b S#4bjhBkAM4_q8ZCE^*ZPG-&x%;2hmrc6nz7VhQjv594IqCJ/&&bu^4/6D7&1uM/MmbFN/f@/^J#PJE!9sDej,dj,2Y?Y`e-lI
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: a8 73 5c 6a 3d 59 f2 ec a1 0f b8 9b a8 73 5c 6a 11 56 64 fe 01 a4 c1 fa c4 f5 49 92 a2 4c 2b 73 f1 70 80 fb 8a 6a 53 bb 0a 69 d3 34 64 22 b2 9c c0 17 51 e8 b2 24 88 33 91 b8 5c d8 7d 63 13 be 1a c1 87 34 6a a9 2f 18 04 c1 2f f7 98 40 db fb 6e 75 2d 04 3e 2e 3b e0 e7 e0 02 b3 fb 5d b2 0d cb 1e be 68 09 ca ec d0 96 c1 58 e0 f8 4e ec 45 b6 2b e2 34 73 ac 4c 88 24 76 9d 58 84 f1 cb 64 85 8f ca 9a 22 55 f8 73 9e 88 8a 2c 3e 9c 2c 34 f3 d5 c9 65 54 7b 5b f9 44 48 0a 61 3f 34 7b 38 ea 55 35 50 18 6b 6a b8 3d 1b 98 1d fd f8 43 db 54 c9 24 6c b5 3c ee 94 e8 e4 16 9b af ee e3 b2 79 6c 36 14 b4 28 46 38 a0 e7 1d 21 14 32 af 08 d8 fb 8e e7 2c 5a ae 76 08 a1 1c 46 03 72 78 24 b9 d6 9e fb 9b 87 69 0d e2 d4 0d 63 27 35 1d ee 79 66 55 97 61 86 3c 61 66 14 5b 16 cf 32 57 Data Ascii: s\j=Ys\jVdIL+spjSi4d"Q$3\}c4j//@nu->.;]hXNE+4sL$vXd"Us,>,4eT{[DHa?4{8U5Pkj=CT$l<yl6(F8!2,ZvFrx$ic'5yfUa<af[2W
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: 8d c9 6f 59 9a e6 f4 98 a0 45 3f 81 da 3b bd b5 15 5b b2 8e a3 6a a8 40 57 64 df 91 4e aa af 98 8c 5b 63 72 b6 5d 0c bc fe 58 d2 65 d5 50 40 1f 1c a8 74 b7 fa fe 73 fe 0a 57 b1 5b 14 f8 7a f5 d1 8a b6 6d f1 7a fd 8b 6a 5b 6d 69 e5 ae 83 d6 f6 71 63 7d 85 c7 ef 6d b6 b4 d2 6b 56 6d 37 00 10 14 b9 c2 8c 70 9b 2d ad 74 3d 55 db 3e 9e 65 ac 98 a1 6f b1 a5 46 a5 6b aa da f6 11 28 63 85 44 2a 9e d1 47 66 b4 ef 98 20 85 25 6d d0 17 0d 7d 30 90 06 5f 6f a0 2b 9b f8 84 dc 04 79 e5 86 ee c8 f5 dc 08 52 e8 4d 2e 6b ce 8d ad 6d 74 1a 75 76 41 8a 7b b0 2f e9 7d 51 55 64 43 aa 3d 7f ed dc 2f 93 af e9 f1 f9 bf d2 a2 14 2b 03 d0 3f dd 11 28 70 44 0f 30 2d 54 eb 7a e2 e3 c8 1d aa 22 fc 28 ea c6 5b 0c 3c b2 31 75 ed a1 6d ca aa 29 29 62 67 3c b2 07 1d 55 51 ec 8e 01 cf 1d Data Ascii: oYE?;[j@WdN[cr]XeP@tsW[zmzj[miqc}mkVm7p-t=U>eoFk(cD*Gf %m}0_o+yRM.kmtuvA{/}QUdC=/+?(pD0-Tz"([<1um))bg<UQ
2024-08-28 07:28:22 UTC	16384	OUT	Data Raw: 28 0c dd 0f fa fe 0f b2 3c f6 d0 a8 84 f3 0d 9e 29 56 f6 88 63 4d 49 39 a9 d2 12 97 20 b3 12 76 10 93 eb 78 b6 5c 89 05 a4 7e 92 3b c9 a6 d4 c8 06 cb 9a 87 d9 5c 6a 8d 5c ea 72 61 5a 8d 6c da 52 61 fd 1a b9 fa 71 ae 1f f4 c3 84 0b 46 ce c4 bc 72 7d ca 21 22 3f 24 3f 62 ac 63 9e 34 81 87 d9 ed 0d 4b 6c fc 23 55 f2 9e 90 0b 14 29 13 e1 a1 54 fa ce 0d 9f 87 69 12 5f 02 39 74 56 9b 80 e8 11 b5 22 ea 81 22 5e e0 a1 6b fb 78 46 b0 91 58 a7 f4 cd d8 33 c3 c9 31 de 7e e8 c5 35 4b df 3a 9f a3 0e 08 90 8e 33 bb 8a 6b 71 f8 e4 6d dc 28 7c 9b 9a e7 3b 9e 3b 7a 9b 4a 12 b5 0b 92 4e ca d5 23 97 83 ae cf 33 ed 4b 74 d6 82 56 e4 72 53 3d 99 cf cc 6b d2 d5 f9 f1 5c 31 8c 57 88 b7 6d a4 cd ce 0b 7e 77 7a 09 6c c7 26 4c e2 0d b5 4b 93 d8 ce 42 62 5d f8 30 a3 fe 83 e8 b6 d5 Data Ascii: (<)VcMI9 vx\~;\j\raZlRaqFr}!"?$?bc4Kl#U)Ti_9tV""^kxFX31~5K:3kqm(\|;;zJN#3KtVrS=k\1Wm~wzl&LKBb]0
2024-08-28 07:28:22 UTC	10182	OUT	Data Raw: 59 c1 9d 43 ee 7e 5c 5c 37 fb 36 ac 5c b7 ac b5 bd 77 9b 30 55 b3 07 fc ff 32 da de 18 67 db 4b 2f 8d b4 69 ef 71 f5 48 df ae 64 a5 9b 28 eb 31 78 3c 6f 4f 20 e2 f4 aa 67 e2 20 e1 0b 3e f4 b6 a0 53 39 53 f2 3c c5 01 57 e2 98 65 3c 3f e6 33 7e 3e 74 a9 14 a3 74 62 94 5d bb be 93 02 32 76 99 55 8f 62 a9 15 59 3b 8e 4a 7e bb 37 d8 33 4d 79 ef 68 ef e5 f4 bd 60 3e 25 82 ef 67 07 d7 2f f7 bc 78 02 f6 40 c6 5e ee 3d 7e fc d8 07 8a e3 b9 5f a3 04 90 ba 3a c9 dc 8c fd e5 5f be dc 23 8f 01 f7 3a 75 25 fb 30 65 d9 37 e1 84 81 ae dd cf 06 ca c1 51 91 c6 f5 fd 4f ce 19 af 2b 9b b2 64 ff e5 de c7 5f 7e fe 94 1f 7a f1 3c 86 ca fb 2f f7 06 d9 c1 db fd 02 b1 83 eb 2c b9 ba 3e 77 13 29 7b 7c 3d 75 27 ec e8 e5 de 27 27 bf 91 54 5b 97 1d 48 1c fa 10 a0 5a 8e 6d c3 07 24 0b Data Ascii: YC~\\76\w0U2gK/iqHd(1x<oO g >S9S<We<?3~>ttb]2vUbY;J~73Myh`>%g/x@^=~_:_#:u%0e7QO+d_~z</,>w){\|=u'''T[HZm$
2024-08-28 07:28:22 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:22 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	54971	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	951	OUT	GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&dv=H4sIAAAAAAAAA1XMzQrCMBAE4FdZclK02PoD6m2tQQvWSo0XRSSkUUNLIjGoRXx3g4jgaVhm9nsSnByQHYxQBXDh1E25mowJfVykVVILCUja3xFdz6A77IcjP%2Fhk%2FKtSzBmN57BhySLZIkuyJeR0leUsWc4ggNho53nAa5ly66Q4w9FYmErHVeU5ZrkolT5Bpqs6iH5u1BuEof%2FH6s7ra2A0YAfBx27tjJW%2BWVlTQAv%2BzgbStLn3LGLwEVhEXm%2BxscmY6wAAAA%3D%3D&ct=2&r=918548 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:22 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:22 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	54972	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	758	OUT	POST /v2/events?uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&sn=1&hd=1724830099&v=13.89.2&pid=2422&pn=1&str=309&di=9519&dc=21473&fl=21524&sr=14&mdh=6283&ct=0 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive Content-Length: 357 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:22 UTC	357	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 37 2c 22 78 22 3a 31 32 38 30 2c 22 79 22 3a 39 30 37 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 76 61 6c 22 3a 36 39 36 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 22 74 73 22 3a 33 33 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 46 49 44 22 2c 22 76 61 6c 22 3a 31 2e 39 30 30 30 30 30 30 30 30 30 32 33 32 38 33 2c 22 74 73 22 3a 33 33 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 76 61 6c 22 3a 37 39 35 33 2c 22 74 73 22 3a 33 33 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 49 4e 50 22 2c 22 76 61 6c 22 3a 31 36 2c 22 74 73 22 3a 33 33 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: [{"type":0,"ts":7,"x":1280,"y":907},{"type":19,"name":"FCP","val":6961.799999999988,"ts":33},{"type":19,"name":"FID","val":1.900000000023283,"ts":33},{"type":19,"name":"LCP","val":7953,"ts":33},{"type":19,"name":"INP","val":16,"ts":33},{"type":19,"name":"
2024-08-28 07:28:22 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:22 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	54981	54.90.52.195	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	422	OUT	GET /exist?v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c HTTP/1.1 Host: srm.bf.contentsquare.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:22 UTC	165	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 28 Aug 2024 07:28:22 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 48 Connection: close Allow: POST
2024-08-28 07:28:22 UTC	48	IN	HTTP method not allowed, supported methods: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	54979	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	1125	OUT	GET /ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698
2024-08-28 07:28:22 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6Y01jSN3TMo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0045007f2.edge-irl1.demdex.com 7 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:22 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:22 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	54980	63.33.187.142	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:22 UTC	1118	OUT	GET /ibs:dpid=80742&dpuuid=3f2a63db-5b48-4539-9091-71c7392e8f57 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698
2024-08-28 07:28:22 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Y6k49yjYSsw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0e262bb02.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:22 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:22 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	54990	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	911	OUT	GET /ibs:dpid=72352&dpuuid=4289392735944159371995&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693
2024-08-28 07:28:23 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6aeeY3X2SyA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-019845f57.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:23 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:23 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	54993	108.129.9.96	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	904	OUT	GET /ibs:dpid=80742&dpuuid=3f2a63db-5b48-4539-9091-71c7392e8f57 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=56916935156195165264526806106049391917; dpm=56916935156195165264526806106049391917; dextp=358-1-1724830090412\|477-1-1724830090516\|771-1-1724830090630\|782-1-1724830090742\|992-1-1724830090849\|1123-1-1724830090970\|903-1-1724830091086\|1175-1-1724830091197\|1957-1-1724830091307\|3047-1-1724830091697\|22054-1-1724830092709\|30646-1-1724830093695\|53196-1-1724830095107\|38117-1-1724830095773\|57282-1-1724830096698\|49276-1-1724830097695\|72352-1-1724830098693\|80742-1-1724830099698\|81309-1-1724830100693
2024-08-28 07:28:23 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: kwKxozufQzQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09b2dfa67.edge-irl1.demdex.com 2 ms set-cookie: dpm=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:23 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=56916935156195165264526806106049391917; Max-Age=15552000; Expires=Mon, 24 Feb 2025 07:28:23 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 07:28:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	54985	34.238.211.197	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	476	OUT	GET /v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=1&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:23 UTC	207	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Allow: OPTIONS, POST X-Content-Type-Options: nosniff
2024-08-28 07:28:23 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	54991	23.23.91.66	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	591	OUT	GET /CookieSyncAdobe HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:23 UTC	128	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	54998	54.208.196.179	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	750	OUT	POST /v2/recording?rt=5&rst=1724830099082&let=1724830099973&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=2&ct=0 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive Content-Length: 1050 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:23 UTC	1050	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 39 2c 22 64 61 74 65 22 3a 31 37 32 34 38 33 30 31 30 30 36 39 38 2c 22 61 72 67 73 22 3a 5b 7b 22 76 69 73 69 62 6c 65 47 6c 6f 62 61 6c 6c 79 22 3a 5b 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 36 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 37 37 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 32 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 33 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 34 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 35 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 37 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 38 38 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 39 30 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 39 31 22 2c 22 63 73 74 65 78 74 72 65 66 3a 2f 2f 34 39 Data Ascii: [{"type":29,"date":1724830100698,"args":[{"visibleGlobally":["cstextref://46","cstextref://477","cstextref://482","cstextref://483","cstextref://484","cstextref://485","cstextref://487","cstextref://488","cstextref://490","cstextref://491","cstextref://49
2024-08-28 07:28:23 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	54999	54.208.196.179	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	748	OUT	POST /v2/recording?rt=5&rst=1724830099082&let=1724830102054&v=13.89.2&pid=2422&pn=1&sn=1&uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&ri=3&ct=0 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive Content-Length: 52 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:23 UTC	52	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 31 37 2c 22 61 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 64 61 74 65 22 3a 31 37 32 34 38 33 30 31 30 32 30 35 39 7d 5d Data Ascii: [{"type":17,"args":["hidden"],"date":1724830102059}]
2024-08-28 07:28:23 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 07:28:23 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	54997	52.30.188.204	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:23 UTC	758	OUT	POST /v2/events?uu=7e8fb141-fdc5-ab56-d86f-6e4eeea28a3c&sn=1&hd=1724830099&v=13.89.2&pid=2422&pn=1&str=309&di=9519&dc=21473&fl=21524&sr=14&mdh=6283&ct=0 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive Content-Length: 129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:23 UTC	129	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 32 39 38 36 2c 22 78 22 3a 36 34 30 2c 22 79 22 3a 34 33 35 2c 22 78 52 65 6c 22 3a 33 33 32 30 39 2c 22 79 52 65 6c 22 3a 31 37 37 2c 22 74 67 74 48 4d 22 3a 22 6d 61 69 6e 23 6d 61 69 6e 43 6f 6e 74 65 6e 74 3e 64 69 76 3a 65 71 28 30 29 3e 64 69 76 3a 65 71 28 34 29 3e 64 69 76 3a 65 71 28 30 29 3e 64 69 76 3a 65 71 28 30 29 22 7d 5d Data Ascii: [{"type":2,"ts":2986,"x":640,"y":435,"xRel":33209,"yRel":177,"tgtHM":"main#mainContent>div:eq(0)>div:eq(4)>div:eq(0)>div:eq(0)"}]
2024-08-28 07:28:24 UTC	469	IN	HTTP/1.1 204 No Content Date: Wed, 28 Aug 2024 07:28:24 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	55002	18.66.112.103	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:24 UTC	576	OUT	GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1 Host: static-assets.fs.liveperson.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://publisher.liveperson.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:24 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 337204 Connection: close Last-Modified: Mon, 05 Aug 2024 17:29:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 28 Aug 2024 07:28:25 GMT ETag: "283b5d1dbf0b9fb647d9468b36c3fb4f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0341da327f4c4c49034aa07ebeeab1f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: drhT0IbNcBBMYQCumZ4Hja3ia6QTHhzqn6McKbx1l55l6_OvnL_maA==
2024-08-28 07:28:24 UTC	16384	IN	Data Raw: 76 61 72 20 65 6e 67 61 67 65 6d 65 6e 74 46 69 78 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 65 6e 67 45 6c 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 6f 63 75 73 28 65 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 4a 61 69 6d 65 20 4d 52 20 74 65 73 74 20 63 68 61 6e 67 65 20 73 65 74 74 69 6e 67 20 75 70 73 74 72 65 61 6d 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 75 6e 20 69 66 20 61 20 62 75 74 74 6f 6e 20 77 61 73 20 64 65 74 65 63 74 65 64 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6e 67 2e 65 6e 67 61 67 65 6d 65 6e 74 54 79 70 65 20 3d 3d 3d 20 35 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4c 6f 6f 6b 20 69 6e 20 64 6f 6d 20 66 6f 72 20 61 20 72 6f 6c 65 20 6f 66 20 62 75 74 74 6f 6e 2e 20 20 Data Ascii: var engagementFix = (function () { var engEl; function focus(eng) { //Jaime MR test change setting upstream // Run if a button was detected if (eng.engagementType === 5) { // Look in dom for a role of button.
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 33 25 45 30 25 42 38 25 38 38 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 41 31 25 45 30 25 42 39 25 38 38 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 39 34 25 45 30 25 42 39 25 38 39 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 41 31 25 45 30 25 42 39 25 38 38 25 45 30 25 42 38 25 39 45 25 45 30 25 42 38 25 41 44 25 45 30 25 42 39 25 38 33 25 45 30 25 42 38 25 38 38 25 45 30 25 42 38 25 41 42 25 45 30 25 42 38 25 41 33 25 45 30 25 42 38 25 42 37 25 45 30 25 42 38 25 41 44 25 45 30 25 42 38 25 39 45 25 45 30 25 42 38 25 41 44 25 45 30 25 42 39 25 38 33 25 45 30 25 42 38 25 38 38 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 45 30 25 42 38 25 38 34 25 45 30 25 42 39 25 38 38 25 45 30 25 42 38 25 41 Data Ascii: 3%E0%B8%88'), decodeURI('%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9E%E0%B8%AD%E0%B9%83%E0%B8%88%E0%B8%AB%E0%B8%A3%E0%B8%B7%E0%B8%AD%E0%B8%9E%E0%B8%AD%E0%B9%83%E0%B8%88'), decodeURI('%E0%B8%84%E0%B9%88%E0%B8%A
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 20 27 52 61 63 7a 65 6a 20 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 2c 20 27 42 61 72 64 7a 6f 20 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 41 54 45 5f 4e 50 53 2e 61 6c 74 5f 74 65 78 74 2e 70 75 73 68 28 64 65 63 6f 64 65 55 52 49 28 27 4a 65 64 6e 61 25 32 30 6e 61 25 32 30 70 69 25 43 34 25 39 39 25 43 34 25 38 37 25 32 30 67 77 69 61 7a 64 65 6b 25 33 42 25 32 30 62 61 72 64 7a 6f 25 32 30 6e 69 65 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 44 77 69 65 25 32 30 6e 61 25 32 30 70 69 25 43 34 25 39 39 25 43 34 25 38 37 25 32 30 67 77 69 61 7a 64 65 6b 25 33 42 25 32 30 72 61 63 7a 65 6a 25 32 30 6e 69 65 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 2c Data Ascii: 'Raczej prawdopodobne', 'Bardzo prawdopodobne'); RATE_NPS.alt_text.push(decodeURI('Jedna%20na%20pi%C4%99%C4%87%20gwiazdek%3B%20bardzo%20nieprawdopodobne'), decodeURI('Dwie%20na%20pi%C4%99%C4%87%20gwiazdek%3B%20raczej%20nieprawdopodobne'),
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 25 41 39 25 44 37 25 41 30 25 44 37 25 39 39 25 32 30 25 44 37 25 39 42 25 44 37 25 39 35 25 44 37 25 39 42 25 44 37 25 39 31 25 44 37 25 39 39 25 44 37 25 39 44 25 32 30 25 44 37 25 39 45 25 44 37 25 41 41 25 44 37 25 39 35 25 44 37 25 39 41 25 32 30 25 44 37 25 39 37 25 44 37 25 39 45 25 44 37 25 39 39 25 44 37 25 41 39 25 44 37 25 39 34 25 33 42 25 32 30 25 44 37 25 39 43 25 44 37 25 39 30 25 32 30 25 44 37 25 41 31 25 44 37 25 39 31 25 44 37 25 39 39 25 44 37 25 41 38 25 32 30 25 44 37 25 39 35 25 44 37 25 39 43 25 44 37 25 39 30 25 32 30 25 44 37 25 39 31 25 44 37 25 39 43 25 44 37 25 41 41 25 44 37 25 39 39 25 32 30 25 44 37 25 41 31 25 44 37 25 39 31 25 44 37 25 39 39 25 44 37 25 41 38 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 44 37 25 39 30 Data Ascii: %A9%D7%A0%D7%99%20%D7%9B%D7%95%D7%9B%D7%91%D7%99%D7%9D%20%D7%9E%D7%AA%D7%95%D7%9A%20%D7%97%D7%9E%D7%99%D7%A9%D7%94%3B%20%D7%9C%D7%90%20%D7%A1%D7%91%D7%99%D7%A8%20%D7%95%D7%9C%D7%90%20%D7%91%D7%9C%D7%AA%D7%99%20%D7%A1%D7%91%D7%99%D7%A8'), decodeURI('%D7%90
2024-08-28 07:28:25 UTC	7945	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 64 65 6c 65 74 65 50 6f 70 75 70 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 20 3d 20 27 32 65 6d 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 20 3d 20 27 30 70 78 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 20 3d 20 27 35 70 78 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 63 6f 6c 6f 72 22 2c 20 22 62 6c 61 63 6b 22 2c 20 22 69 6d 70 6f 72 74 61 6e 74 22 29 3b Data Ascii: deletePopup(); }; button.style.fontSize = '2em'; button.style.border = '0px'; button.style.padding = '5px'; button.style.setProperty("color", "black", "important");
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 6c 65 73 2d 65 73 2d 6d 78 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 45 53 2d 55 53 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 65 73 2d 75 73 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 45 53 2d 57 57 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 65 73 2d 77 77 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 73 74 6f 72 65 2d 6d 33 36 35 2d 65 73 2d 61 72 27 3a 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: les-es-mx': case 'webpurchase-sales-ES-US': case 'webpurchase-sales-es-us': case 'webpurchase-sales-ES-WW': case 'webpurchase-sales-es-ww': case 'store-m365-es-ar':
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 6c 70 54 61 67 2e 73 65 63 74 69 6f 6e 20 3d 3d 20 22 73 74 6f 72 65 2d 73 61 6c 65 73 2d 65 6e 2d 75 73 22 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 65 6c 63 6f 6d 65 5f 6d 65 73 73 61 67 65 20 3d 20 22 74 72 75 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 6c 70 76 69 65 77 5f 66 6f 72 6d 5f 74 65 78 74 61 72 65 61 20 6c 70 63 5f 63 6f 6d 70 6f 73 65 72 5f 5f 74 65 78 74 2d 61 72 65 61 27 29 5b 30 5d 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 6c 70 76 69 65 77 5f 66 6f 72 6d 5f 74 65 78 74 61 Data Ascii: lpTag.section == "store-sales-en-us"){ welcome_message = "true"; if(document.getElementsByClassName('lpview_form_textarea lpc_composer__text-area')[0]){ document.getElementsByClassName('lpview_form_texta
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 69 63 65 33 36 35 2d 6c 65 61 64 67 65 6e 2d 65 6e 2d 7a 61 27 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 50 61 72 74 6e 65 72 20 4e 65 74 77 6f 72 6b 27 2c 20 27 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 7a 61 2f 73 75 70 70 6f 72 74 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 54 65 63 68 6e 69 63 61 6c 20 53 75 70 70 6f 72 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 65 6e 2d 7a 61 2f 61 72 74 69 63 6c 65 2f 67 65 74 2d 73 75 70 70 6f 72 74 2d 6f 72 2d 61 64 76 69 63 65 2d 31 38 39 34 38 61 34 63 2d 33 65 62 31 2d 34 62 33 30 2d 62 Data Ascii: ice365-leadgen-en-za': [ ['Partner Network', 'https://partner.microsoft.com/en-za/support'], ['Technical Support', 'https://support.office.com/en-za/article/get-support-or-advice-18948a4c-3eb1-4b30-b
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 68 75 2d 68 75 2f 73 75 70 70 6f 72 74 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 54 65 63 68 6e 69 6b 61 69 25 32 30 74 25 43 33 25 41 31 6d 6f 67 61 74 25 43 33 25 41 31 73 27 2c 20 27 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 68 75 2d 68 75 2f 61 72 74 69 63 6c 65 2f 67 65 74 2d 73 75 70 70 6f 72 74 2d 6f 72 2d 61 64 76 69 63 65 2d 31 38 39 34 38 61 34 63 2d 33 65 62 31 2d 34 62 33 30 2d 62 31 62 63 2d 61 34 63 63 32 39 65 62 37 36 35 35 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 53 7a 25 43 33 25 41 31 6d 6c 25 43 33 Data Ascii: ps://partner.microsoft.com/hu-hu/support'], ['Technikai%20t%C3%A1mogat%C3%A1s', 'https://support.office.com/hu-hu/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655'], ['Sz%C3%A1ml%C3
2024-08-28 07:28:25 UTC	16384	IN	Data Raw: 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 72 65 65 2f 73 74 75 64 65 6e 74 73 2f 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 53 69 67 6e 2d 75 70 20 6f 72 20 73 69 67 6e 2d 69 6e 27 2c 20 27 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 61 75 2f 73 75 70 70 6f 72 74 72 65 71 75 65 73 74 66 6f 72 6d 2f 38 34 66 61 65 63 35 30 2d 32 63 62 63 2d 39 62 38 61 2d 36 64 63 31 2d 39 64 63 34 30 62 66 36 39 31 37 38 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 4d 79 20 41 7a 75 72 65 20 61 63 63 6f 75 6e 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 61 7a 75 72 65 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d Data Ascii: icrosoft.com/free/students/'], ['Sign-up or sign-in', 'https://support.microsoft.com/en-au/supportrequestform/84faec50-2cbc-9b8a-6dc1-9dc40bf69178'], ['My Azure account', 'https://azure.microsoft.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	54995	52.211.24.199	443	3408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 07:28:24 UTC	737	OUT	GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 07:28:24 UTC	537	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 07:28:24 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.27.130 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=56916935156195165264526806106049391917?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} Server: Jetty(9.4.38.v20210224)

Target ID:	0
Start time:	03:27:05
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	03:27:12
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,18081194610392995174,6121383709671565716,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:27:14
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 239

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification