Edit tour

Windows Analysis Report
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfe

Overview

General Information

Sample URL:	https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-
Analysis ID:	1541048
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Very long command line found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveContent-Length: 0Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Origin: https://links.us1.defend.egress.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=pZnLT31hIhbPUlIwOblqJ46qC

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 08:57:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/Set-Cookie: AWSALBCORS=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; SecureCache-Control: no-cache, no-store, max-age=0Pragma: no-cacheX-Robots-Tag: noindexX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: same-originX-Content-Type-Options: nosniffContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none'Strict-Transport-Security: max-age=2592000; preloadblazor-enhanced-nav: allow

Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49781 version: TLS 1.2

Source: unknown

Process created: Commandline size = 2058

Source: classification engine

Classification label: clean1.win@16/28@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.186.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
links.us1.defend.egress.com	99.83.228.139	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://links.us1.defend.egress.com/images/egress-logo-dark.svg	false	unknown
https://links.us1.defend.egress.com/_blazor/initializers	false	unknown
https://links.us1.defend.egress.com/_blazor?id=vDQ8W2Jd_iTxgG5lUTuMcw	false	unknown
https://links.us1.defend.egress.com/_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257859	false	unknown
https://links.us1.defend.egress.com/_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257007	false	unknown
https://links.us1.defend.egress.com/~/js/JsInteropFuncions.js	false	unknown
https://links.us1.defend.egress.com/_framework/blazor.server.js	false	unknown
https://links.us1.defend.egress.com/images/egress-icon.png	false	unknown
https://links.us1.defend.egress.com/_blazor/negotiate?negotiateVersion=1	false	unknown
https://links.us1.defend.egress.com/_framework/blazor.polyfill.min.js	false	unknown
https://links.us1.defend.egress.com/css/site.css	false	unknown
https://links.us1.defend.egress.com/_blazor?id=hieRnTZHgQ45O-BAH-H2cw	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
99.83.228.139	links.us1.defend.egress.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.8
192.168.2.5
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541048
Start date and time:	2024-10-24 10:56:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/28@6/6

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.184.206, 74.125.206.84, 34.104.35.123, 216.58.206.74, 142.250.74.195, 88.221.110.91, 192.229.221.95, 52.165.164.15, 172.217.18.3
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaE

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 07:57:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9726375522814013
Encrypted:	false
SSDEEP:	48:8ddfTXTfH0idAKZdA19ehwiZUklqehTy+3:8vvKgy
MD5:	11138008F63670E9974FAFEA56A3EEFF
SHA1:	373ECC5DD761617519B3D1D1BC67092E143083A3
SHA-256:	3306941A0146CD590AE8AE68C7E05D22DC2F6FB001A03642651BB3D18CEEDD2C
SHA-512:	2015834DEA4697EDD483998AC3B6297D41DD555B726C6E15E6439ACCCD9589504998A3F0047EE58FA813E9683CF608C362E9FB8FE660A315F275ADC7E48B5317
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY0G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 07:57:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9844063471157303
Encrypted:	false
SSDEEP:	48:8KdfTXTfH0idAKZdA1weh/iZUkAQkqehQy+2:8CvA9Q5y
MD5:	6E57D464C116957CBB2769314A876823
SHA1:	332D3664C3F5AA0BFEC4878F5BAED5CC58F4FD1D
SHA-256:	5DF9CA3AC5B873F328ADF9F301EF74B86BEFE7E34F7C9ECE11FFA92E09AB9FE9
SHA-512:	A1097720A9B8B011CFF9993E9C81584CB059BB5E72F2C3C45165415570A7191C7211C56BA13B9EA77D7A7D9E265933B7A68B10E64A285070A2626CA8725927AA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....;...%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY0G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.997452069494971
Encrypted:	false
SSDEEP:	48:8x0dfTXTsH0idAKZdA14tseh7sFiZUkmgqeh7suy+BX:8xcvBnsy
MD5:	5A60184B7140473F94F467D51D034C5D
SHA1:	4526D906BC3EEC7D1ADD35706B7F4E4AEAC2DD03
SHA-256:	4E732CA84210765FBE7F666731261574B95B4E522A0D9B03E41C15FE34534CC9
SHA-512:	3FDDF3DA1A926F8ABEDE430D912A57D439104A7DE98AB0F17EFB715D8ABFC5B8C0AEF8E92C9C90F2194C71F07DE8D329B63582B1752C2B1ED9F8289A6FC54ACC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 07:57:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9882003003196314
Encrypted:	false
SSDEEP:	48:8udfTXTfH0idAKZdA1vehDiZUkwqehUy+R:8WvL2y
MD5:	935DCCECA69E33CDF28B065E2777ED5D
SHA1:	EB5C0B8B426D3D3426F00E4A4852AB2BA086909B
SHA-256:	0FF078FAC9E5FBE1677C8A053A7D85BDC92017C997837B215B93E262BA17CF4C
SHA-512:	442645F77F058C907621404550FD25219F13485A97E2FC9098F678A20655CD68AFBAD845D811C6C309AB9A0E25B0DE723071B51B6BC932E9C1F20702E687310D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....]...%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY0G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 07:57:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9755598057540635
Encrypted:	false
SSDEEP:	48:85dfTXTfH0idAKZdA1hehBiZUk1W1qehqy+C:87vL9Ky
MD5:	DA368745263E3F524593ABCD6B02EE6D
SHA1:	0E745F44E222E33DDFF1A1D69D617562D21210D5
SHA-256:	BC76DBF485246E9E88B6CDB8D1ACAC2AE549A04942C8D48D0E62CB9CCF506FAF
SHA-512:	956BDAF5AF52049CB23C66E25DFBEEF47ACF61EBFE972E17B6B3270E5AD86F3773C38FBA6CBC6521275FF08E76A6FAC5528EAE880157E0C9BE079668A63E31D9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY0G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 07:57:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.985695000444165
Encrypted:	false
SSDEEP:	48:8CdfTXTfH0idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbsy+yT+:8avrT/TbxWOvTbsy7T
MD5:	F42E3168CF64D7F835A0E68A95977800
SHA1:	2E5B716A07D03835A42C84F8D27F3D1EA41E6629
SHA-256:	9DDD2A90EDEC3092F02D3484BC7C9698A6B2E7A1F1ABA0DB6F9B610F60202F58
SHA-512:	64FAD6BD3C99267742AE24FAD392FA0D677B9C0D64F299D4F8E5B12A9E9005CC2FC127E7F89FD4D97C189EBD80472BE6C72BFC865DD338D001B42D711BD2627E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY.G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY.G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY.G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY0G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w.@u.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	29277
Entropy (8bit):	3.7985237958721045
Encrypted:	false
SSDEEP:	384:0sIO2wPIZRGV1psAr4WP6hARX5CcfjrF2OFHdjSlU34zkyBF99otuZXLdqDn:LM8GAX6Q5CcfPF2OylU3mo8G
MD5:	D4DF3E6C8CEF1295CE0B42D46112FB9C
SHA1:	D55207E3A0A0C159AE720B1B6DF7A46614C99A3F
SHA-256:	7862B224E2B1AF20DE0354B6FD530A79D57C8C9856BD5E5091A2234D233E8C99
SHA-512:	537E989AD02093B62EEF3D3DC4212F57E64D63E431734FC908641F0955E76135AC17F4ACE72F236F73FFB3F2F839B04CA24BF4A5B82989265937A2AC72B3F07A
Malicious:	false
Reputation:	low
Preview:	<svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/>.<path d="M25.1304 17.2673C24.8113 19.2444 23.8882 21.0756 22.4879 22.507C21.0877 23.9395 19.2777 24.9029 17.3086 25.2663C15.3386 25.6297 13.3051 25.374 11.4851 24.5365C9.66602 23.6979 8.15099 22.3178 7.14734 20.5843C6.14369 18.8508 5.70076 16.8496 5.87995 14.8544C6.05913 12.8591 6.85037 10.9686 8.14696 9.44151C9.44254 7.9144 11.18 6.82518 13.1189 6.32386C15.0587 5.82254 17.1053 5.93328 18.9787 6.64197L21.2286 2.73812C18.4965 1.54522 15.4584 1.24523 12.5461 1.88044C9.63381 2.51564 6.99634 4.05484 5.01019 6.27756C3.02403 8.50028 1.79087 11.2938 1.48585 14.2594C1.18083 17.2251 1.82006 20.2108 3.31194 22.7909C4.80382 25.372 7.07285 27.4155 9.79488 28.6306C12.5169 29.8456 15.553 30.1708 18.4703 29.5587C21.3876 28.9467 24.0372 27.4286 26.0415 25.222C28.0457 23.0154 29.3011 20.232

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2397
Entropy (8bit):	4.394669784185688
Encrypted:	false
SSDEEP:	48:U9Jxw3tMa8zXAld5TODjyrr9lSPsx5k3i9TOr36:emtManJlSP0Ky9036
MD5:	44D6688FE873BE9D6FDC0E36A4ED5F81
SHA1:	0878322986B3782BB6FCEE75D0F7FD2D34271F0A
SHA-256:	8B41F523CC9870BF36BE7927991B7A2694E4C9F24414A16F1AA27F6A8CE1FC35
SHA-512:	C2CFF9BB648EA7486C0A557CD280BC242E284494373A187E13826D303F0C6340529CBA12C46F24B786177E544184F870A723A8E0994955233032D59F651CA887
Malicious:	false
Reputation:	low
Preview:	window._import_ = function (fileName, webRootPath) {.... if (webRootPath === undefined \|\| webRootPath === null) {.. webRootPath = "";.. }.... function pathJoin(path1, path2) {.... if (path1 === null \|\| path1 === undefined) {.. path1 = "";.. }.... if (path2 === null \|\| path2 === undefined) {.. path2 = "";.. }.... var needTrail = true;.. var path1hasTrail = false;.. var path2hasTrail = false;.... if (path1.length - 1 >= 0 && (path1[path1.length - 1] == '/' \|\| path1[path1.length - 1] == '\\')) {.. needTrail = false;.. path1hasTrail = true;.. }.... if (path2.length > 0 && (path2[0] == '/' \|\| path2[0] == '\\')) {.. needTrail = false;.. path2hasTrail = true;.. }.... if (needTrail) {.. return path1 + "/" + path2;.. }.. else {.. if (path1hasTrail && path2hasTrail) {.. return path1

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4436
Entropy (8bit):	7.938245236923043
Encrypted:	false
SSDEEP:	96:Uj7HJEkeQ5WLhvF8emLU+o5NuG6JUykFpXbWWXwq:q7CrT5Fh5vwkFpLWWH
MD5:	BA7B93D7ECE6F1407BC67CC6E57F2016
SHA1:	4B22E6295FF29816BD0C0EA979881185F38F57C8
SHA-256:	D54D44A63E776FD34431F2E24D3D2A16156DD509CB4657FE747B6D1346BE6424
SHA-512:	110313FC8E53C5D62D0056AC4ECB1F833E6AE9DFD297F280BB39A52128A92DC302142E3CA5908E4507E547C19B41EAC04FDEF655C66ADA754C9B0DA97BB82529
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/images/egress-icon.png
Preview:	.PNG........IHDR...t...t.....T..'....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...Tu....{gWp..D.y,.("..D=)..B....vf...:....2;.....3. .R.D-.gd.Y.[.3.+IY........{.+..kv...3.sg~..pv.........J ..%#?......O..9.$.....!!..D.\|..I\.}...4.$..HZ.)1.....-.'..M.(g.H...q..3..^.k.y..?q...........~.L.....{...x3.qq...R...j".!...4.>..q..`....=h..3Q\|.A.x.<]E......3.I....".s..!X.66.AR^.k.R.;......`.....;...H.(.\|...o u..,+ l..4..T.W..TJA.-..n..)n.'R.>.R.....a...Q.S....)z4.RK9\|....m.%3...,.Q.H.a....U:..FP.'k._.u-.Q...YI..y......l.LB..[MW.J..rb.]..t`0.7..s.0.V..@..D1.orhj.......+Rid..D..mW.@._.;.....x....b..#..T..+....2.#.....k(.=..J......dv&.......,..$.b2z.m.\|..\|....G..c..c/.T`q/hC.T...U.8..$sW);..Cy.OX....8..f..o..<1.?.._\|......%.E}8.....q^..)/...MUZV6.E.b[...+^.d....{X5.....Wx..../3.2...~.P...C..)....i\<.3.W...).Ll.._..m..n.D...90....8.(.WX.....6..&K>L.......&.f!...).F...J...*...D..b..)....!T.mV.~...N4..X..gr....2JD.)YKs.4J:.rof$..a].k.(.U..../C...`m

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3664
Entropy (8bit):	4.78089961431119
Encrypted:	false
SSDEEP:	96:NfHur1Au1dyQ18VA94hJL3Qk9JUqh22b3:QryyQVA94rgk9JUqh203
MD5:	68B16274AE2C036DC0204120AF59EB47
SHA1:	965F7B1C9CC792E194E5BA0F3A587065483B636F
SHA-256:	C8E7F8730BF9DF98C746782E0AEA2FC60E4A5DC1041F455BA750E7D47442D974
SHA-512:	D1A6290D81A7EE72A6AC719DC7F9FE7AD4E515C7E9FADFEED3B42F76DBD49554A61318A00D57337330F9BBA20B1B8718CFBF58EF917FDAA6B42A5EB217A0F6B8
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/css/site.css
Preview:	@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: bold;. src: url('/fonts/AvenirLTStd-Book_0.otf') format('truetype');.}..@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: light;. src: url('/fonts/AvenirLTStd-Light_0.otf') format('truetype');.}..@font-face {. font-family: 'Avenir';. font-style: normal;. font-weight: normal;. src: url('/fonts/AvenirLTStd-Medium_0.otf') format('truetype');.}..html, body {. height: 100%;.}..html, body, dialog {. margin: 0;. font-weight: 100;. font-family: 'Rubik', sans-serif;.}..body, dialog {. background-color: white;.}..h2 {. font-family: 'Avenir', sans-serif;. font-weight: bold;. font-size: 1.8em;. margin-top: 0;.}..h1 {. font-size: 2.2em;. font-family: 'Avenir', sans-serif;. font-weight: bold;. margin-top: 0;. margin-bottom: 10px;.}..b {. font-weight: 500;.}...ajax-background {. position: relative;. z-index: 1;. height:

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2397
Entropy (8bit):	4.394669784185688
Encrypted:	false
SSDEEP:	48:U9Jxw3tMa8zXAld5TODjyrr9lSPsx5k3i9TOr36:emtManJlSP0Ky9036
MD5:	44D6688FE873BE9D6FDC0E36A4ED5F81
SHA1:	0878322986B3782BB6FCEE75D0F7FD2D34271F0A
SHA-256:	8B41F523CC9870BF36BE7927991B7A2694E4C9F24414A16F1AA27F6A8CE1FC35
SHA-512:	C2CFF9BB648EA7486C0A557CD280BC242E284494373A187E13826D303F0C6340529CBA12C46F24B786177E544184F870A723A8E0994955233032D59F651CA887
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_framework/blazor.polyfill.min.js
Preview:	window._import_ = function (fileName, webRootPath) {.... if (webRootPath === undefined \|\| webRootPath === null) {.. webRootPath = "";.. }.... function pathJoin(path1, path2) {.... if (path1 === null \|\| path1 === undefined) {.. path1 = "";.. }.... if (path2 === null \|\| path2 === undefined) {.. path2 = "";.. }.... var needTrail = true;.. var path1hasTrail = false;.. var path2hasTrail = false;.... if (path1.length - 1 >= 0 && (path1[path1.length - 1] == '/' \|\| path1[path1.length - 1] == '\\')) {.. needTrail = false;.. path1hasTrail = true;.. }.... if (path2.length > 0 && (path2[0] == '/' \|\| path2[0] == '\\')) {.. needTrail = false;.. path2hasTrail = true;.. }.... if (needTrail) {.. return path1 + "/" + path2;.. }.. else {.. if (path1hasTrail && path2hasTrail) {.. return path1

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17955
Entropy (8bit):	5.419940730561262
Encrypted:	false
SSDEEP:	384:yigCiTiIiCni8izinvdgCvCvsvwnvOvnvDBBzBdBmBheBcBLBD5fUH2QieLOeD4o:RMerX/+vdVoCYUvDBBBdBmB0BcBLBDBo
MD5:	D0E8BE7875CFA295CF700BC847FF71D7
SHA1:	41C4387CFF6D50652E9DE16E93270B4B76674630
SHA-256:	EF4DF1063408E9CD432CBEB44713C154305C5508F9291D917348C904E11C1FCA
SHA-512:	517C50F77C2B32FF2232FF375F185694271B74B89E18A7132B6FD9452A5D434BC4E0EC6ED09EF31A7C97EC23E730284EC7E6D9BF8B3EDD993C36DAD4ABCC3F04
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:regular,bold,italic,thin,light,bolditalic,black,medium&lang=en"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 116, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4436
Entropy (8bit):	7.938245236923043
Encrypted:	false
SSDEEP:	96:Uj7HJEkeQ5WLhvF8emLU+o5NuG6JUykFpXbWWXwq:q7CrT5Fh5vwkFpLWWH
MD5:	BA7B93D7ECE6F1407BC67CC6E57F2016
SHA1:	4B22E6295FF29816BD0C0EA979881185F38F57C8
SHA-256:	D54D44A63E776FD34431F2E24D3D2A16156DD509CB4657FE747B6D1346BE6424
SHA-512:	110313FC8E53C5D62D0056AC4ECB1F833E6AE9DFD297F280BB39A52128A92DC302142E3CA5908E4507E547C19B41EAC04FDEF655C66ADA754C9B0DA97BB82529
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t...t.....T..'....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...Tu....{gWp..D.y,.("..D=)..B....vf...:....2;.....3. .R.D-.gd.Y.[.3.+IY........{.+..kv...3.sg~..pv.........J ..%#?......O..9.$.....!!..D.\|..I\.}...4.$..HZ.)1.....-.'..M.(g.H...q..3..^.k.y..?q...........~.L.....{...x3.qq...R...j".!...4.>..q..`....=h..3Q\|.A.x.<]E......3.I....".s..!X.66.AR^.k.R.;......`.....;...H.(.\|...o u..,+ l..4..T.W..TJA.-..n..)n.'R.>.R.....a...Q.S....)z4.RK9\|....m.%3...,.Q.H.a....U:..FP.'k._.u-.Q...YI..y......l.LB..[MW.J..rb.]..t`0.7..s.0.V..@..D1.orhj.......+Rid..D..mW.@._.;.....x....b..#..T..+....2.#.....k(.=..J......dv&.......,..$.b2z.m.\|..\|....G..c..c/.T`q/hC.T...U.8..$sW);..Cy.OX....8..f..o..<1.?.._\|......%.E}8.....q^..)/...MUZV6.E.b[...+^.d....{X5.....Wx..../3.2...~.P...C..)....i\<.3.W...).Ll.._..m..n.D...90....8.(.WX.....6..&K>L.......&.f!...).F...J...*...D..b..)....!T.mV.~...N4..X..gr....2JD.)YKs.4J:.rof$..a].k.(.U..../C...`m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	151912
Entropy (8bit):	5.1882559662525995
Encrypted:	false
SSDEEP:	1536:n21RuMu7+oiEJGLn9w1oGFHrHZS4J8JGaPQFPFmCtYp1/VXfD7iT4/M/N0pM0n5p:n21YCBj9w1jNSDGaYmvD7i8/M/N0pM0r
MD5:	51DE1D3DC51F8CED520D5B4A31D9ED18
SHA1:	8FFBED955848F2FFEA910B3F334E854A40946083
SHA-256:	DB00716B5D1623CCE10CEE50974794047B1C1B624C47ABEE9B5CB972BFC5D8C9
SHA-512:	87B16B8BFC5FE98FEBEDF7400BD30074EC1124813FB3BDFAC8867194F47467E5870C2396780320D4F09AADA6E282E6B1A64AE33574B709A726344E37076BE14F
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,r;!function(e){const t=[],n="__jsObjectId",r="__dotNetObject",o="__byte[]",s="__dotNetStream",i="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,r=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in r))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=r,r=r[t]})),r instanceof Function)return r=r.bind(n),this._cachedFunctions.set(e,r),r;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	534
Entropy (8bit):	4.6940603465853235
Encrypted:	false
SSDEEP:	12:TA3VVIE43ilINGlTF5TF5TF5TF5TF5TFK:MFH487TPTPTPTPTPTc
MD5:	8D1D051E58C7E7FCB6DA50F32355E121
SHA1:	E84DADFEB1F88DBB5E9856BED73CB7D2DAE68697
SHA-256:	013D6BB198A9ECD19E2B74F7B8994FE802CB49DE27B46F731D827B344D4B9DB9
SHA-512:	7C23E13B1296D001FA13703F3136AA33633E83E45CCDCFAD76098ADA5B4DA2F1FBF6AE93CA69E87F8B8F81D0ED19D75E8A9EA376322BF2CCACF9BF5E947823F9
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>504 Gateway Time-out</title></head>..<body>..<center><h1>504 Gateway Time-out</h1></center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151912
Entropy (8bit):	5.1882559662525995
Encrypted:	false
SSDEEP:	1536:n21RuMu7+oiEJGLn9w1oGFHrHZS4J8JGaPQFPFmCtYp1/VXfD7iT4/M/N0pM0n5p:n21YCBj9w1jNSDGaYmvD7i8/M/N0pM0r
MD5:	51DE1D3DC51F8CED520D5B4A31D9ED18
SHA1:	8FFBED955848F2FFEA910B3F334E854A40946083
SHA-256:	DB00716B5D1623CCE10CEE50974794047B1C1B624C47ABEE9B5CB972BFC5D8C9
SHA-512:	87B16B8BFC5FE98FEBEDF7400BD30074EC1124813FB3BDFAC8867194F47467E5870C2396780320D4F09AADA6E282E6B1A64AE33574B709A726344E37076BE14F
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_framework/blazor.server.js
Preview:	(()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),(()=>{"use strict";var e,t,r;!function(e){const t=[],n="__jsObjectId",r="__dotNetObject",o="__byte[]",s="__dotNetStream",i="__jsStreamReferenceLength";let a,c;class l{constructor(e){this._jsObject=e,this._cachedFunctions=new Map}findFunction(e){const t=this._cachedFunctions.get(e);if(t)return t;let n,r=this._jsObject;if(e.split(".").forEach((t=>{if(!(t in r))throw new Error(`Could not find '${e}' ('${t}' was undefined).`);n=r,r=r[t]})),r instanceof Function)return r=r.bind(n),this._cachedFunctions.set(e,r),r;throw new Error(`The value '${e}' is not a function.`)}getWrappedObject(){return this._jsObject}}const h={0:new l(window

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	29277
Entropy (8bit):	3.7985237958721045
Encrypted:	false
SSDEEP:	384:0sIO2wPIZRGV1psAr4WP6hARX5CcfjrF2OFHdjSlU34zkyBF99otuZXLdqDn:LM8GAX6Q5CcfPF2OylU3mo8G
MD5:	D4DF3E6C8CEF1295CE0B42D46112FB9C
SHA1:	D55207E3A0A0C159AE720B1B6DF7A46614C99A3F
SHA-256:	7862B224E2B1AF20DE0354B6FD530A79D57C8C9856BD5E5091A2234D233E8C99
SHA-512:	537E989AD02093B62EEF3D3DC4212F57E64D63E431734FC908641F0955E76135AC17F4ACE72F236F73FFB3F2F839B04CA24BF4A5B82989265937A2AC72B3F07A
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/images/egress-logo-dark.svg
Preview:	<svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/>.<path d="M25.1304 17.2673C24.8113 19.2444 23.8882 21.0756 22.4879 22.507C21.0877 23.9395 19.2777 24.9029 17.3086 25.2663C15.3386 25.6297 13.3051 25.374 11.4851 24.5365C9.66602 23.6979 8.15099 22.3178 7.14734 20.5843C6.14369 18.8508 5.70076 16.8496 5.87995 14.8544C6.05913 12.8591 6.85037 10.9686 8.14696 9.44151C9.44254 7.9144 11.18 6.82518 13.1189 6.32386C15.0587 5.82254 17.1053 5.93328 18.9787 6.64197L21.2286 2.73812C18.4965 1.54522 15.4584 1.24523 12.5461 1.88044C9.63381 2.51564 6.99634 4.05484 5.01019 6.27756C3.02403 8.50028 1.79087 11.2938 1.48585 14.2594C1.18083 17.2251 1.82006 20.2108 3.31194 22.7909C4.80382 25.372 7.07285 27.4155 9.79488 28.6306C12.5169 29.8456 15.553 30.1708 18.4703 29.5587C21.3876 28.9467 24.0372 27.4286 26.0415 25.222C28.0457 23.0154 29.3011 20.232

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://links.us1.defend.egress.com/_blazor/initializers
Preview:	[]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 10:57:22.107434034 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:22.107443094 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:22.216834068 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:31.451716900 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.451749086 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:31.451833010 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.452204943 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.452219963 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:31.452224016 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.452300072 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:31.452430964 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.452645063 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:31.452656031 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:31.711752892 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:31.742449999 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:31.822789907 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:32.128545046 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.138286114 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.172087908 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.187654018 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.332776070 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.332789898 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.332971096 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.333019972 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.334069967 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.334142923 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.335176945 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.335266113 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.336904049 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.336990118 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.350331068 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.350518942 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.350532055 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.350564003 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.405680895 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.405698061 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.405740023 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.452568054 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.545105934 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.545130014 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.545196056 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.545216084 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.545228958 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.545257092 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.545303106 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.546842098 CEST	49710	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.546863079 CEST	443	49710	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.596225977 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.596345901 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.597964048 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.597995996 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.598061085 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.598371983 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.598381042 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.598799944 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.598839998 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.598902941 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.599224091 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.599261999 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.599322081 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.599714994 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.599729061 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.599791050 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.600306988 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.600326061 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.600459099 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.600471973 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.600831985 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.600852966 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.782722950 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.782758951 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.782810926 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.782830954 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.782861948 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:32.782876015 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.782917023 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.942970991 CEST	49709	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:32.943008900 CEST	443	49709	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.250274897 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.250799894 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.250828981 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.251360893 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.251857996 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.251954079 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.252068043 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.252105951 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.257507086 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.257808924 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.257824898 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.258084059 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.258869886 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.258934021 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.259097099 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.259110928 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.259809971 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.259931087 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.259984970 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.260004044 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.260627031 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.261111975 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.261111975 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.261202097 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.261317015 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.261328936 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.275722980 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.276372910 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.276381969 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.276869059 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.277472973 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.277563095 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.277663946 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.277704000 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.306339025 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.306375027 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.307334900 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.353979111 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.436086893 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.436109066 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.436239958 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.436263084 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.436275959 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.436332941 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.438314915 CEST	49711	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.438333035 CEST	443	49711	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.448275089 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.448306084 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.448378086 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.448446989 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.448446989 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.452151060 CEST	49714	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.452164888 CEST	443	49714	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.482831955 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.482897997 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.483359098 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.483359098 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.483397007 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562758923 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562833071 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562855959 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562895060 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562915087 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562932968 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562936068 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.562959909 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.562999010 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.563047886 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.577908039 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 24, 2024 10:57:33.579560041 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 24, 2024 10:57:33.588198900 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.588228941 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.588249922 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.588301897 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.588310957 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.588375092 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.588387966 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.678333044 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.678347111 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.678391933 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.678430080 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.678430080 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.678478956 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.678503036 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.679510117 CEST	49713	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.679529905 CEST	443	49713	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.699038982 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.699095964 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.699209929 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.699635983 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.699650049 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.707628965 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.707664967 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.707745075 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.707756042 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.707798958 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.707916021 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.828739882 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.828768015 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.828851938 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.828851938 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.828871965 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.828962088 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.946773052 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.946799994 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.947338104 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:33.947349072 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:33.948648930 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.065880060 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.065907955 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.065946102 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.066072941 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.066072941 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.066097021 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.067332029 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.147502899 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.147795916 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.147819042 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.149260044 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.149336100 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.149791956 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.149868965 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.149991035 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.185293913 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.185337067 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.185445070 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.185456991 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.185503006 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.185575962 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.195337057 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.196793079 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.196809053 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.243341923 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.304701090 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.304729939 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.304835081 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.304850101 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.305666924 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.313219070 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:34.313266039 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:34.313332081 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:34.313601971 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:34.313612938 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:34.334171057 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.334233046 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.334376097 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.334449053 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.335540056 CEST	49719	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.335561037 CEST	443	49719	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.365346909 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.366966009 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.366995096 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.368089914 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.368158102 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.371604919 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.371676922 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.371786118 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.371794939 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.413686991 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.423767090 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.423794031 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.423896074 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.423909903 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.423960924 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.542923927 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.542948961 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.543015003 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.543045998 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.543056965 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.543098927 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.543128014 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.543175936 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.544255972 CEST	49712	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.544274092 CEST	443	49712	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.569576979 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.569675922 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.569820881 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.570697069 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.570785999 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.570863008 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.570941925 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.570982933 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.571090937 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.571141005 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.573390961 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.573446035 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.573513031 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.573698044 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.573713064 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677583933 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677648067 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677689075 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677715063 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677736044 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677742958 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.677769899 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.677798033 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.677831888 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.793179035 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.793277979 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.793364048 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.793389082 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.793406963 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.793442011 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:34.793503046 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.822987080 CEST	49720	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:34.823023081 CEST	443	49720	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.179068089 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:35.183984041 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:35.184016943 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:35.185511112 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:35.186131954 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:35.195357084 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:35.195441008 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:35.236845970 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.240264893 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.240289927 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.240820885 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.241461992 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:35.241492987 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:35.243537903 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.244327068 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.244435072 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.250946045 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.250972986 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.251605988 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.251638889 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.253532887 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.255019903 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.255117893 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.255270958 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.255351067 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.255462885 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.255520105 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.255881071 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.264424086 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.264535904 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.264682055 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.264731884 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.288587093 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:35.295348883 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.300903082 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:35.300970078 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:35.301058054 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:35.303375006 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:35.303406000 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:35.440753937 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.441032887 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.441159964 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.447813034 CEST	49724	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.447859049 CEST	443	49724	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.451159954 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.451220036 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.451355934 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.451374054 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.451442957 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.459640980 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.459685087 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.459772110 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.496834040 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.496861935 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.498965979 CEST	49723	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.498996019 CEST	443	49723	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.553409100 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.553467989 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.553509951 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.553576946 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.553605080 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.553637028 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.553670883 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.670571089 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.670624018 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.670731068 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.670753002 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.670792103 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.670816898 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.690929890 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.691035032 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.691143990 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.692126036 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.692167044 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.692652941 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.692687035 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.692748070 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.692985058 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.692995071 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.787734032 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.787817955 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.787842035 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.787889004 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.904710054 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.904762983 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.904803991 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.904829979 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:35.904853106 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:35.904875040 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.022238016 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.022258997 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.022330046 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.022360086 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.022401094 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.022602081 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.022655964 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.139894009 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.139945984 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.140033007 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.140059948 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.140094042 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.140115023 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.161216974 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.161284924 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.167893887 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.167916059 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.168370962 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.174904108 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.175138950 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.175164938 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.175717115 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.176223993 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.176305056 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.176568985 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.176598072 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.211654902 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.242326021 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.257121086 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.257172108 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.257204056 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.257227898 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.257258892 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.257275105 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.287336111 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.354296923 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.354582071 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.354623079 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.355210066 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.355606079 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.355689049 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.355793953 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.363970041 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.364080906 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.364132881 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.367866993 CEST	49728	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.367892027 CEST	443	49728	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.373775005 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.373805046 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.373847008 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.373872042 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.373898983 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.373919964 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.373954058 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.374669075 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.374732971 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.374792099 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.375535965 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.375550985 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.376049042 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.376065016 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.376194954 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.376861095 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.376940966 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.377228975 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.381604910 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.381696939 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.381764889 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.382158041 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.382194996 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.399337053 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.421960115 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.421977043 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.422029972 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.422048092 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.422074080 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.422095060 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.423325062 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.465312958 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.465377092 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.465398073 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.465451002 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.465487003 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.465539932 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.465915918 CEST	49725	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.465930939 CEST	443	49725	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.485578060 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.485752106 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.485768080 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.485836983 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.485862970 CEST	49726	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.485956907 CEST	443	49726	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.541907072 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.542180061 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.542260885 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.545001984 CEST	49730	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.545022011 CEST	443	49730	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.567353964 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.567404032 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.567461967 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.567491055 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.567516088 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.567678928 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.569093943 CEST	49729	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:36.569108963 CEST	443	49729	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:36.572926044 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.572962999 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:36.573096991 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.573393106 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:36.573410988 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.046523094 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.046941996 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.046963930 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.047363997 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.047826052 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.047890902 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.048015118 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.049673080 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.049905062 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.049974918 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.050470114 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.050873995 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.050976038 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.051103115 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.091336012 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.091356039 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.101150990 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.233495951 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.233572006 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.233731985 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.235341072 CEST	49732	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.235361099 CEST	443	49732	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.239379883 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.239550114 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.239603043 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.239679098 CEST	443	49731	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.239715099 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.239751101 CEST	49731	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.246783018 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.246828079 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.246887922 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.247725964 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.247741938 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.425482035 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.425590038 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.505179882 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.505208015 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.506052971 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.554251909 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.577384949 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.619332075 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.825035095 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.825206995 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.825294018 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.825956106 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.825979948 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.825994015 CEST	49734	443	192.168.2.5	184.28.90.27
Oct 24, 2024 10:57:37.825999975 CEST	443	49734	184.28.90.27	192.168.2.5
Oct 24, 2024 10:57:37.914084911 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.914431095 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.914459944 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.915524006 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.915951967 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.916039944 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:37.916177034 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:37.916212082 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.109077930 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.109307051 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.109395027 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.110630989 CEST	49737	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.110650063 CEST	443	49737	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.114824057 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.114866972 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.115075111 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.115319967 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.115330935 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.115715981 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.115742922 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.115828991 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.116122007 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.116133928 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.773741961 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.774437904 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.774452925 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.775485992 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.776035070 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.776133060 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.776350975 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.776379108 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.789283991 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.789669991 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.789691925 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.790420055 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.791405916 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.791506052 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.791795969 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.839332104 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.949455023 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:38.949512005 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:38.949759007 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:38.950376034 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:38.950392962 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:38.959558010 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.959650993 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.959976912 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.960840940 CEST	49738	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.960858107 CEST	443	49738	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.970427036 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.970488071 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.970649004 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.970917940 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.970935106 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.972134113 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.972171068 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.972234011 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.973196983 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.973212004 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.978312969 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.978368998 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.978598118 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.979170084 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.979192972 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.980664968 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.980756998 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:38.981045008 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.982861042 CEST	49739	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:38.982887983 CEST	443	49739	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.646436930 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.651284933 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.655567884 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.668473005 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.668487072 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.669095993 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.669133902 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.669504881 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.669517040 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.669703960 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.669955015 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.670093060 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.671224117 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.671421051 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.672755003 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.672899961 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.673808098 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.673906088 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.674978971 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.675008059 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.675039053 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.675357103 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.675482035 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.675498009 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.723337889 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.725600958 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:39.725810051 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:39.736675024 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:39.736721992 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:39.737653971 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:39.774254084 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:39.815332890 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:39.861042023 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.861126900 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.861187935 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.861839056 CEST	49741	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.861860037 CEST	443	49741	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.863023043 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.863116026 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.863163948 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.863574982 CEST	49742	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.863598108 CEST	443	49742	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.865168095 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.865358114 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:39.865431070 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.866234064 CEST	49743	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:39.866251945 CEST	443	49743	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.029649973 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.029683113 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.029714108 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.029723883 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.029761076 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.029793978 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.029814959 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.029841900 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.148317099 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.148386002 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.148425102 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.148459911 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.148483992 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.148514986 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.266782045 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.266818047 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.266864061 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.266896009 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.266917944 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.266940117 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.325494051 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.325568914 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.325676918 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.326256990 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.326276064 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.385658026 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.385696888 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.385739088 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.385772943 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.385793924 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.385813951 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.504582882 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.504662037 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.504822969 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.504822969 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.504863977 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.504918098 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.622944117 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.623007059 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.623132944 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.623132944 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.623169899 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.623271942 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.741720915 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.741756916 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.741903067 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.741903067 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.741939068 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.744821072 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.843883991 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.843921900 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.844049931 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.844049931 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.844083071 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.844279051 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.959780931 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.959808111 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.959975958 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.960011959 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.960159063 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.979548931 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.979568958 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.979768038 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.979779005 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:40.979890108 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:40.993524075 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.994052887 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.994082928 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.994604111 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.995232105 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.995232105 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:40.995250940 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:40.995348930 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:57:41.038985014 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:57:41.106093884 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.106180906 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.106204033 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.106237888 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.106266022 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.106328964 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.199364901 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.199393034 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.199538946 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.199538946 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.199570894 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.202867985 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.302568913 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.302598000 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.302728891 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.302755117 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.303009033 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.317892075 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.317981958 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.318025112 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.318083048 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.318083048 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.318422079 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.318443060 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.404930115 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.404934883 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.404982090 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.404983997 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.405069113 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.405072927 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406150103 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406176090 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.406517029 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406519890 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406529903 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.406539917 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.406557083 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406727076 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.406738043 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.407807112 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.407852888 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.408200979 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.408252954 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.408283949 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.408462048 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.408462048 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.408494949 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:41.408523083 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:41.408548117 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.151988983 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.152622938 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.152645111 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.153167009 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.153177023 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.165287971 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.165813923 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.165843964 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.166290998 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.166304111 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.170201063 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.170716047 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.170732975 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.170983076 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.171201944 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.171210051 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.171333075 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.171354055 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.171868086 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.171876907 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.179393053 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.179866076 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.179897070 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.180299997 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.180308104 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287511110 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287535906 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287607908 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.287622929 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287636995 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287678957 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.287967920 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.287986040 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.287998915 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.288003922 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.291436911 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.291544914 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.291667938 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.291872978 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.291913986 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.303869009 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.303895950 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.303968906 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.303996086 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.304181099 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.304202080 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.304215908 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.304372072 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.304406881 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.304446936 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.307396889 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.307445049 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.307523966 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.307748079 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.307759047 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309048891 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309087038 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309139013 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309154034 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309173107 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309201002 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309262991 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309562922 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309571981 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309588909 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309593916 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309639931 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309839964 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.309897900 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309942007 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.309957027 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.310046911 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.310054064 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.313769102 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.313817978 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.313889980 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.314469099 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.314483881 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.315449953 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.315485001 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.315589905 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.315716982 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.315726042 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.318732023 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.318850994 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.318911076 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.319087029 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.319128036 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.319163084 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.319179058 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.342505932 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.342565060 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.342636108 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.367537022 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:42.367568970 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:42.663630962 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:42.663680077 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:42.663978100 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:42.670722008 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:42.670741081 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:43.036535978 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.047522068 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.047566891 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.048276901 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.048290014 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.061707020 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.062280893 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.062306881 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.063107014 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.063112974 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.078963041 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.079618931 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.079646111 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.080390930 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.080404043 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.084119081 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.084705114 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.084723949 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.085303068 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.085309029 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.113851070 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.117209911 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.117232084 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.118067980 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.118077993 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.179338932 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.179497957 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.179699898 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.198204994 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.198299885 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.198381901 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.217585087 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.217782021 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.217842102 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.225359917 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.225389004 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.225502968 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.225511074 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.237559080 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.237628937 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.237692118 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.250693083 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.250984907 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.251035929 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.301168919 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.301193953 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.301207066 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.301213980 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.303056002 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.303100109 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.308217049 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.308263063 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.308309078 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.308317900 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.321134090 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.321162939 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.321239948 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.321245909 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.359404087 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.359460115 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.359787941 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.360388994 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.360410929 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.366616011 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.366694927 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.366933107 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.369039059 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.369060040 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.372248888 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.372284889 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.372328043 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.372364998 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.372370958 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.372488976 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.372664928 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.372682095 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.373431921 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.373472929 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.376775980 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.376816034 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.376902103 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.377258062 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:43.377273083 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:43.429775953 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:43.429851055 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:43.433834076 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:43.433840036 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:43.434097052 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:43.476459980 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.117705107 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.118438959 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.118453026 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.118860960 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.118865967 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.121757030 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.122109890 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.122132063 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.122699022 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.122704983 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.129542112 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.129968882 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.129988909 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.129992008 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.130333900 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.130351067 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.130733967 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.130739927 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.130822897 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.130830050 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.139245033 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.139612913 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.139622927 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.140106916 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.140111923 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.257709980 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.257793903 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.257903099 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.258275032 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.258275032 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.258296967 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.258313894 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.260380983 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.260730982 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.260797977 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261054993 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261096954 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.261187077 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261220932 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261220932 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261240959 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.261251926 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.261971951 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.261986971 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.263389111 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.263428926 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.263530016 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.263636112 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.263648033 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.268851995 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.269006968 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.269062042 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.269207001 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.269223928 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.269229889 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.269234896 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.269736052 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.270032883 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.270087004 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.270215988 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.270216942 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.270227909 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.270231962 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.272605896 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.272634029 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.272694111 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.273010969 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.273036003 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.273870945 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.273884058 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.273936987 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.274070978 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.274079084 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.281585932 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.281742096 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.281919003 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.281919003 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.281919003 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.283835888 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.283876896 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.283943892 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.284127951 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.284138918 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.414963961 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.455337048 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.586924076 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:44.586954117 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:44.664757013 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664779902 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664787054 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664822102 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664882898 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.664887905 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664901972 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.664967060 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.664967060 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.664967060 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.665183067 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.665304899 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:44.665319920 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.665620089 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:44.667334080 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:45.017930984 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.019124031 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.019124031 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.019153118 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.019165993 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.033498049 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.034581900 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.034581900 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.034646034 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.034671068 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.037580013 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.037992954 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.038024902 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.038383961 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.038395882 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.045489073 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.045984030 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.046015024 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.046449900 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.046458960 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.053519964 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.053946018 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.053986073 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.054398060 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.054408073 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.155191898 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.155391932 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.155551910 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.155551910 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.155596018 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.155616045 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.158608913 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.158663034 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.158916950 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.158916950 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.158953905 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.161705017 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:45.161776066 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:45.162015915 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:45.173634052 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.173702002 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.173914909 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.173914909 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.173964024 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.173978090 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176436901 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176460981 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176507950 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176599979 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176636934 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176712990 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176775932 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176778078 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176780939 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176794052 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.176795959 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.176804066 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.179162979 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.179209948 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.179428101 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.179562092 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.179578066 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.185792923 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.185954094 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.186045885 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.186045885 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.186109066 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.186120987 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.187978029 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.187988997 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.188147068 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.188272953 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.188283920 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.192079067 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.192222118 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.192338943 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.192339897 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.192384005 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.192399025 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.194570065 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.194600105 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.194725990 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.194817066 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.194828033 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.532071114 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:45.532095909 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:45.532109976 CEST	49755	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:57:45.532115936 CEST	443	49755	172.202.163.200	192.168.2.5
Oct 24, 2024 10:57:45.915973902 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.916790962 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.916809082 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.918716908 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.918723106 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.928549051 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.928966999 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.928981066 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.929418087 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.929429054 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.938769102 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.939275026 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.939291000 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.939376116 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.939702034 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.939718962 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.939917088 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.939924955 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:45.940361023 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:45.940366983 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.052833080 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.053066015 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.053118944 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.053236961 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.053255081 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.053266048 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.053272009 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.055932999 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.055955887 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.056113958 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.056277990 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.056292057 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.064587116 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.064728975 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.064775944 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.064831018 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.064860106 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.064867020 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.064872980 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.067719936 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.067745924 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.067984104 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.068114996 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.068126917 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.075825930 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.075903893 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.075999975 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.076014996 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076148987 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.076289892 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076289892 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076299906 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076306105 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.076316118 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076320887 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.076345921 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.076364040 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.079534054 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.079554081 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.079777002 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.079986095 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.080007076 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.080327988 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.080358982 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.080419064 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.080836058 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.080856085 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.299998999 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.300028086 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.300117970 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.300133944 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.351481915 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.351496935 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.355739117 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.355751991 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.487206936 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.488358021 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.488358021 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.488379955 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.488420010 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.488487959 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.488492966 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.619107008 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.663966894 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.663981915 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.667062998 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.667084932 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.712568045 CEST	49722	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:57:46.712594032 CEST	443	49722	142.250.186.68	192.168.2.5
Oct 24, 2024 10:57:46.799184084 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.802257061 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.802283049 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.819437981 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.820019007 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.820036888 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.822146893 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.822153091 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.826021910 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.829314947 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.829353094 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.829828978 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.829837084 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.842014074 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.842503071 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.842511892 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.843080997 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.843086004 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.861154079 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.861542940 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.861562967 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.862090111 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.862097979 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.933809996 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.936942101 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.936964035 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.955925941 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.956056118 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.956157923 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.956197977 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.956197977 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.956223965 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.956233978 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.958765030 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.958786964 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.966937065 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.967155933 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.967226028 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.967259884 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.967278004 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.967291117 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.967298031 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.969575882 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.969594002 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.980906010 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.981064081 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.981136084 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.981229067 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.981235981 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.981267929 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.981276035 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:46.983270884 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:46.983289957 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.000436068 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.000570059 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.000955105 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.001450062 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.001468897 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.001560926 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.001570940 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.006253004 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.006259918 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.068567991 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.072304010 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.072324038 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.090472937 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.092943907 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.108489990 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.110915899 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.114249945 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.116396904 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.138209105 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.140800953 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.183384895 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.203763962 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.206857920 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.206932068 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.234318018 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.237504005 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.242064953 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.244628906 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.269463062 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.272356033 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.315330029 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.316188097 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.319052935 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.319088936 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.340378046 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.343034983 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.370827913 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.374279976 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.400929928 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.404211998 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.447376966 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.447483063 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.450850964 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.450908899 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.454233885 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.456757069 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.475375891 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.480050087 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.505948067 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.511668921 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.536079884 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.539182901 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.579369068 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.584072113 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.586919069 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.586980104 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.607716084 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.610795975 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.637727976 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.641207933 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.667680979 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.670525074 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.711416960 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.718512058 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.721318007 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.721338987 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.724001884 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.742557049 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.745220900 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.773247957 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.776424885 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.802218914 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.805469036 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.847342968 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.853172064 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.860610962 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.860652924 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.873517036 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.878411055 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.905251026 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.908530951 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.933895111 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.936922073 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.979348898 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.980053902 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.982911110 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:47.982943058 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.991962910 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:47.995101929 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.009650946 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.013660908 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.047753096 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.051091909 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.068356991 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.071405888 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.114181995 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.117851973 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.126651049 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.129395008 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.145478964 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.148873091 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.186691046 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.195045948 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.203093052 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.208534002 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.249403954 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.252695084 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.260817051 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.263940096 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.280042887 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.282902956 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.323339939 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.327202082 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.359862089 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.359884024 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.362530947 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.383972883 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.387037992 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.395621061 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.399051905 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.415007114 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.417906046 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.459336042 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.492188931 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.495595932 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.495640993 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.515467882 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.518372059 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.529807091 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.533184052 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.547341108 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.550704956 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.595338106 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.595854998 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.598800898 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.598838091 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.629020929 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.631968021 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.650216103 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.653129101 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.665107012 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.667804956 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.682816982 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.685437918 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.727329969 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.730743885 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.733707905 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.733747005 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.764003038 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.766984940 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.785145044 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.787883043 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.799617052 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.802319050 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.817177057 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.819858074 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.865690947 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.869153023 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.899185896 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.902909994 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.920176983 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.922929049 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.933846951 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.936662912 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.951544046 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:48.954308033 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:48.995335102 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.001049042 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.004034042 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.004060030 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.034514904 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.037520885 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.054591894 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.057308912 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.068005085 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.070462942 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.086050034 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.088706017 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.131371021 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.136125088 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.139060974 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.139092922 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.169497967 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.173065901 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.189213991 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.191925049 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.201910019 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.204370975 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.231161118 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.234355927 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.271145105 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.274156094 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.305263996 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.308196068 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.323292017 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.325926065 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.339359999 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.341937065 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.367791891 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.370328903 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.405994892 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.408586979 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.439989090 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.442739010 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.458405018 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.461122036 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.473429918 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.475843906 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.501981020 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.504564047 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.541573048 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.544452906 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.575448036 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.580490112 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.593805075 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.596889973 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.610351086 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.613559008 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.635941982 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.639338970 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.678388119 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.682414055 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.712485075 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.715579987 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.728668928 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.731389046 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.745152950 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.748058081 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.770962000 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.774022102 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.814784050 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.818449974 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.848074913 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.851684093 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.863759995 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.866580963 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.880273104 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.883956909 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.905517101 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.909847975 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.950726032 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.953826904 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.983150959 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:49.986244917 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:49.998436928 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.001524925 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.015396118 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.018449068 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.041678905 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.045305014 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.085654020 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.089432955 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.117796898 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.120963097 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.133991957 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.136934042 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.149929047 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.152708054 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.176929951 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.180584908 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.223340988 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.234647989 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.238423109 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.238457918 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.252558947 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.256134987 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.276067972 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.281102896 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.290178061 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.298480988 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.311913967 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.314826012 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.359329939 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.370513916 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.373337030 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.373384953 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.393562078 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.396399021 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.416939974 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.419763088 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.431366920 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.434264898 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.451034069 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.453790903 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.495333910 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.508009911 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.511372089 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.511401892 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.530664921 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.533454895 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.554157972 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.557662964 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.567493916 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.571110010 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.586108923 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.589935064 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.631369114 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.642916918 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.646339893 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.646374941 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.665203094 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.668637037 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.689718008 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.693058014 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.702644110 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.706163883 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.725048065 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.728367090 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.771322966 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.778425932 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.781644106 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.781687021 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.799977064 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.803281069 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.824527025 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.827789068 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.837718964 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.840713978 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.860059977 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.863321066 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.911329031 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.914062977 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.917823076 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.917903900 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.935137033 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.938740015 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.959647894 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.965553045 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.972220898 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.976556063 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:50.995186090 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:50.998825073 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.039336920 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.049999952 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.053240061 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.053307056 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.074173927 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.077534914 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.109333038 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.109433889 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.113377094 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.113593102 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.113641024 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.134072065 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.137209892 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.179336071 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.188864946 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.191940069 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.192002058 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.208985090 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.212299109 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.245218039 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.248847008 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.265871048 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.268986940 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.311842918 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.319000006 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.323838949 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.332650900 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.343941927 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.346991062 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.380556107 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.383904934 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.401460886 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.404371023 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.450781107 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.454298019 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.475507021 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.478771925 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.512485981 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.515790939 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.532784939 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.535883904 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.579770088 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.583290100 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.585917950 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.588718891 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.610939026 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.613843918 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.649750948 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.653620958 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.667359114 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.670389891 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.715336084 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.716556072 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.719582081 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.719645023 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.743207932 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.745953083 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.782200098 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.785238028 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.798544884 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.801497936 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.843334913 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.847568989 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.850368023 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.850431919 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.874420881 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.877317905 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.913765907 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.916941881 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.929847002 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.932643890 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.975331068 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.979144096 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:51.984165907 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:51.984226942 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.006582975 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.014142990 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.046009064 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.050031900 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.061193943 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.064631939 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.110361099 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.113985062 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.137974024 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.141300917 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.177681923 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.181061029 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.192739010 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.196592093 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.239332914 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.242000103 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.244921923 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.244952917 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.270190954 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.274642944 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.309364080 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.313280106 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.325067997 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.328679085 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.371228933 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.375097036 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.378879070 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.382119894 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.417644024 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.423338890 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.445650101 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.448625088 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.462361097 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.465619087 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.507548094 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.510560036 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.555332899 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.837153912 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.837249041 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.838613987 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.838773012 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.839247942 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.844621897 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.844652891 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.845937967 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.845957041 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.849426031 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.849435091 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.853738070 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.853744984 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.855225086 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.855242014 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.979847908 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.984879017 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.984899044 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.989692926 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.994790077 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:52.994879961 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:52.994911909 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.003412008 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.005290985 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.005317926 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.006167889 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.032067060 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.032131910 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.121704102 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.125989914 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.137408972 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.140954971 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.187330961 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.193093061 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.193187952 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.193950891 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.203227997 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.203258038 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.204428911 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.207529068 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.207572937 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.258040905 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.265525103 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.273072958 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.278287888 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.323342085 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.335410118 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.340337038 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.340393066 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.340411901 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.345551968 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.345561981 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.348983049 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.351834059 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.351878881 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.397789955 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.404445887 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.409626961 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.412652969 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.459332943 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.477032900 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.483174086 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.483228922 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.485351086 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.489140034 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.489171028 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.492901087 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.535856962 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.546389103 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.587351084 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.587769032 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.587853909 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.595792055 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.595887899 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.616857052 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.616934061 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.625061035 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.667344093 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.672672987 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.673619986 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.673762083 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.673783064 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.678215981 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.678319931 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.678339005 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.686547041 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.686640978 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.692985058 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.693023920 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.698316097 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.698354959 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.727395058 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.741333961 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.756556034 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.764501095 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.807370901 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.818049908 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.824826956 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.824904919 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.858930111 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.865328074 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.865371943 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.870167971 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.888819933 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.929215908 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.935628891 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:53.976198912 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:53.976218939 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:54.020230055 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:54.020395041 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:57:54.020416975 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 10:57:54.066342115 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 10:58:21.877417088 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:21.877465963 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:21.877530098 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:21.878283978 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:21.878304005 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.646174908 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.646332026 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.656295061 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.656312943 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.656569958 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.674753904 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.715332031 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.929488897 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.929532051 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.929548025 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.929641962 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.929641962 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.929656982 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.929728985 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.931180954 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.931272030 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:22.931334972 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.931358099 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.945460081 CEST	49781	443	192.168.2.5	172.202.163.200
Oct 24, 2024 10:58:22.945483923 CEST	443	49781	172.202.163.200	192.168.2.5
Oct 24, 2024 10:58:26.007649899 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:58:26.007673025 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:58:34.368367910 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:34.368382931 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:34.368532896 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:34.368807077 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:34.368819952 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:35.217540026 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:35.217961073 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:35.217983007 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:35.218463898 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:35.218765974 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:35.218849897 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:35.273053885 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:41.180974007 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:58:41.181178093 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:58:41.181252956 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:58:41.183094025 CEST	49744	443	192.168.2.5	99.83.228.139
Oct 24, 2024 10:58:41.183116913 CEST	443	49744	99.83.228.139	192.168.2.5
Oct 24, 2024 10:58:45.218678951 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:45.218779087 CEST	443	49783	142.250.186.68	192.168.2.5
Oct 24, 2024 10:58:45.218863010 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:46.813709974 CEST	49783	443	192.168.2.5	142.250.186.68
Oct 24, 2024 10:58:46.813736916 CEST	443	49783	142.250.186.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 10:57:30.373682976 CEST	53	50380	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:30.444071054 CEST	53	52716	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:31.419236898 CEST	51720	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:31.419353962 CEST	55070	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:31.437901974 CEST	53	51720	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:31.456012964 CEST	53	55070	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:31.759529114 CEST	53	58211	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:32.604229927 CEST	53	56703	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:33.457276106 CEST	53869	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:33.457505941 CEST	53952	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:33.473973989 CEST	53	53952	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:33.479995966 CEST	53	53869	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:34.304667950 CEST	53385	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:34.304846048 CEST	51809	53	192.168.2.5	1.1.1.1
Oct 24, 2024 10:57:34.312056065 CEST	53	51809	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:34.312513113 CEST	53	53385	1.1.1.1	192.168.2.5
Oct 24, 2024 10:57:48.829513073 CEST	53	55968	1.1.1.1	192.168.2.5
Oct 24, 2024 10:58:07.767281055 CEST	53	58275	1.1.1.1	192.168.2.5
Oct 24, 2024 10:58:30.093390942 CEST	53	53443	1.1.1.1	192.168.2.5
Oct 24, 2024 10:58:30.637518883 CEST	53	52398	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 10:57:31.456109047 CEST	192.168.2.5	1.1.1.1	c244	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 10:57:31.419236898 CEST	192.168.2.5	1.1.1.1	0x1815	Standard query (0)	links.us1.defend.egress.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:31.419353962 CEST	192.168.2.5	1.1.1.1	0xa9de	Standard query (0)	links.us1.defend.egress.com	65	IN (0x0001)	false
Oct 24, 2024 10:57:33.457276106 CEST	192.168.2.5	1.1.1.1	0x44b5	Standard query (0)	links.us1.defend.egress.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:33.457505941 CEST	192.168.2.5	1.1.1.1	0xe155	Standard query (0)	links.us1.defend.egress.com	65	IN (0x0001)	false
Oct 24, 2024 10:57:34.304667950 CEST	192.168.2.5	1.1.1.1	0xe76f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:34.304846048 CEST	192.168.2.5	1.1.1.1	0x949f	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 10:57:31.437901974 CEST	1.1.1.1	192.168.2.5	0x1815	No error (0)	links.us1.defend.egress.com		99.83.228.139	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:31.437901974 CEST	1.1.1.1	192.168.2.5	0x1815	No error (0)	links.us1.defend.egress.com		75.2.120.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:33.479995966 CEST	1.1.1.1	192.168.2.5	0x44b5	No error (0)	links.us1.defend.egress.com		99.83.228.139	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:33.479995966 CEST	1.1.1.1	192.168.2.5	0x44b5	No error (0)	links.us1.defend.egress.com		75.2.120.244	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:34.312056065 CEST	1.1.1.1	192.168.2.5	0x949f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 10:57:34.312513113 CEST	1.1.1.1	192.168.2.5	0xe76f	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:43.838010073 CEST	1.1.1.1	192.168.2.5	0x992a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 10:57:43.838010073 CEST	1.1.1.1	192.168.2.5	0x992a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:57:57.702816010 CEST	1.1.1.1	192.168.2.5	0x699b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 10:57:57.702816010 CEST	1.1.1.1	192.168.2.5	0x699b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:58:22.875907898 CEST	1.1.1.1	192.168.2.5	0x9852	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 10:58:22.875907898 CEST	1.1.1.1	192.168.2.5	0x9852	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 10:58:43.485162020 CEST	1.1.1.1	192.168.2.5	0x861	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 10:58:43.485162020 CEST	1.1.1.1	192.168.2.5	0x861	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

links.us1.defend.egress.com

https:

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 24, 2024 10:57:46.351496935 CEST	13.107.253.72	443	192.168.2.5	49775	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:32 UTC	2634	OUT	GET /Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nl [TRUNCATED] Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 08:57:32 UTC	1325	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; Expires=Thu, 31 Oct 2024 08:57:32 GMT; Path=/ Set-Cookie: AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; Expires=Thu, 31 Oct 2024 08:57:32 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, max-age=0 Pragma: no-cache Set-Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; path=/; samesite=strict; httponly X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload blazor-enhanced-nav: allow
2024-10-24 08:57:32 UTC	2623	IN	Data Raw: 61 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 67 72 65 73 73 20 44 65 66 65 6e 64 20 55 72 6c 20 53 63 61 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 69 74 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 61 73 Data Ascii: a38<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Egress Defend Url Scanner</title> <base href="/"> <link href="css/site.css" rel="stylesheet" as
2024-10-24 08:57:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:32 UTC	3000	OUT	GET /css/site.css HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
2024-10-24 08:57:32 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:32 GMT Content-Type: text/css Content-Length: 3664 Connection: close Set-Cookie: AWSALB=5QWKb31prX4/EK62GBhF01Igk+Z86BfFKUU55FkBHuMK3EMpWEYu8s+P+kRGKCHDJ2jY7OO2XW5Bx+56e/ivwqJDi3j3xS0KIarstQ3ggOyDEnioBFgq0VXkhTbl; Expires=Thu, 31 Oct 2024 08:57:32 GMT; Path=/ Set-Cookie: AWSALBCORS=5QWKb31prX4/EK62GBhF01Igk+Z86BfFKUU55FkBHuMK3EMpWEYu8s+P+kRGKCHDJ2jY7OO2XW5Bx+56e/ivwqJDi3j3xS0KIarstQ3ggOyDEnioBFgq0VXkhTbl; Expires=Thu, 31 Oct 2024 08:57:32 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebaf50" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:32 UTC	3664	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 76 65 6e 69 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 41 76 65 6e 69 72 4c 54 53 74 64 2d 42 6f 6f 6b 5f 30 2e 6f 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 41 76 65 6e 69 72 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 Data Ascii: @font-face { font-family: 'Avenir'; font-style: normal; font-weight: bold; src: url('/fonts/AvenirLTStd-Book_0.otf') format('truetype');}@font-face { font-family: 'Avenir'; font-style: normal; font-weight: light; src: ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:33 UTC	2999	OUT	GET /~/js/JsInteropFuncions.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
2024-10-24 08:57:33 UTC	1092	IN	HTTP/1.1 404 Not Found Date: Thu, 24 Oct 2024 08:57:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/ Set-Cookie: AWSALBCORS=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, max-age=0 Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload blazor-enhanced-nav: allow
2024-10-24 08:57:33 UTC	2580	IN	Data Raw: 61 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 67 72 65 73 73 20 44 65 66 65 6e 64 20 55 72 6c 20 53 63 61 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 69 74 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 61 73 Data Ascii: a0d<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Egress Defend Url Scanner</title> <base href="/"> <link href="css/site.css" rel="stylesheet" as
2024-10-24 08:57:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49713	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:33 UTC	3061	OUT	GET /images/egress-logo-dark.svg HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
2024-10-24 08:57:33 UTC	1070	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:33 GMT Content-Type: image/svg+xml Content-Length: 29277 Connection: close Set-Cookie: AWSALB=cZ+nznZ95M4uEtDPvWguc6p6iC/Ao5gH1XqGUzU+zWSiPxtw2CtVsTbRoBmhEw6I2p0hUULKX7vnHeHOVpqw8F+bNC0bFOaf8wXTagChV7n1J0BNOdUk7Mpy7QDM; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/ Set-Cookie: AWSALBCORS=cZ+nznZ95M4uEtDPvWguc6p6iC/Ao5gH1XqGUzU+zWSiPxtw2CtVsTbRoBmhEw6I2p0hUULKX7vnHeHOVpqw8F+bNC0bFOaf8wXTagChV7n1J0BNOdUk7Mpy7QDM; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebd35d" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:33 UTC	15314	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 31 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 30 34 37 31 20 36 2e 30 36 35 31 39 4c 31 34 2e 33 33 33 39 20 31 33 2e 38 37 31 39 4c 31 36 2e 36 36 38 34 20 31 37 2e 36 37 33 31 4c 32 39 2e 33 38 31 36 20 39 2e 38 36 37 33 37 4c 32 37 2e 30 34 37 31 20 36 2e 30 36 36 31 39 56 36 2e 30 36 35 31 39 5a 22 20 66 69 6c 6c 3d 22 23 46 37 46 37 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 33 30 34 20 31 37 2e 32 36 37 33 43 32 34 2e 38 31 31 33 20 31 39 2e 32 34 34 Data Ascii: <svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/><path d="M25.1304 17.2673C24.8113 19.244
2024-10-24 08:57:33 UTC	13963	IN	Data Raw: 35 2e 36 32 37 32 20 31 32 38 2e 33 32 32 20 34 35 2e 34 30 31 37 20 31 32 38 2e 30 39 31 20 34 35 2e 32 33 32 36 43 31 32 37 2e 38 37 20 34 35 2e 30 35 36 34 20 31 32 37 2e 35 36 20 34 34 2e 39 36 38 38 20 31 32 37 2e 31 36 31 20 34 34 2e 39 36 38 38 43 31 32 36 2e 37 38 37 20 34 34 2e 39 36 38 38 20 31 32 36 2e 34 38 31 20 34 35 2e 30 35 36 34 20 31 32 36 2e 32 34 33 20 34 35 2e 32 33 32 36 43 31 32 36 2e 30 31 35 20 34 35 2e 34 30 38 37 20 31 32 35 2e 38 34 31 20 34 35 2e 36 33 34 32 20 31 32 35 2e 37 32 37 20 34 35 2e 39 31 30 31 43 31 32 35 2e 36 32 20 34 36 2e 31 37 37 38 20 31 32 35 2e 35 35 39 20 34 36 2e 34 35 33 37 20 31 32 35 2e 35 34 33 20 34 36 2e 37 33 36 35 43 31 32 35 2e 35 33 36 20 34 36 2e 38 35 39 33 20 31 32 35 2e 35 33 32 20 34 37 2e Data Ascii: 5.6272 128.322 45.4017 128.091 45.2326C127.87 45.0564 127.56 44.9688 127.161 44.9688C126.787 44.9688 126.481 45.0564 126.243 45.2326C126.015 45.4087 125.841 45.6342 125.727 45.9101C125.62 46.1778 125.559 46.4537 125.543 46.7365C125.536 46.8593 125.532 47.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49714	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:33 UTC	3007	OUT	GET /_framework/blazor.polyfill.min.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
2024-10-24 08:57:33 UTC	1082	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:33 GMT Content-Type: application/javascript Content-Length: 2397 Connection: close Set-Cookie: AWSALB=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/ Set-Cookie: AWSALBCORS=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache ETag: 8b41f523cc9870bf36be7927991b7a2694e4c9f24414a16f1aa27f6a8ce1fc35 X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:33 UTC	2397	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 69 6d 70 6f 72 74 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 69 6c 65 4e 61 6d 65 2c 20 77 65 62 52 6f 6f 74 50 61 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 74 68 4a 6f 69 6e 28 70 61 74 68 31 2c 20 70 61 74 68 32 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 74 68 31 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 70 61 74 68 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: window._import_ = function (fileName, webRootPath) { if (webRootPath === undefined \|\| webRootPath === null) { webRootPath = ""; } function pathJoin(path1, path2) { if (path1 === null \|\| path1 === undefined) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49712	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:33 UTC	3001	OUT	GET /_framework/blazor.server.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
2024-10-24 08:57:33 UTC	1098	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:33 GMT Content-Type: text/javascript Content-Length: 151912 Connection: close Set-Cookie: AWSALB=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/ Set-Cookie: AWSALBCORS=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1dada2bd14359e8" Last-Modified: Fri, 19 Jul 2024 22:34:29 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:33 UTC	15286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 73 2c 73 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 73 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-10-24 08:57:33 UTC	16384	IN	Data Raw: 6b 28 65 29 7b 74 68 69 73 2e 61 66 74 65 72 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 49 6e 66 6f 53 74 6f 72 65 2e 61 64 64 47 6c 6f 62 61 6c 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 29 7d 73 65 74 53 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 74 2c 6e 29 7d 73 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: k(e){this.afterClickCallbacks.push(e),this.eventInfoStore.addGlobalListener("click")}setStopPropagation(e,t,n){this.getEventHandlerInfosForElement(e,!0).stopPropagation(t,n)}setPreventDefault(e,t,n){this.getEventHandlerInfosForElement(e,!0).preventDefault
2024-10-24 08:57:33 UTC	430	IN	Data Raw: 70 6c 61 63 65 28 65 29 7d 65 6c 73 65 20 74 3f 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 65 29 3a 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 7d 28 65 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 29 3b 65 6c 73 65 20 69 66 28 22 63 6c 69 65 6e 74 73 69 64 65 2d 72 6f 75 74 65 72 22 3d 3d 3d 6f 29 42 65 28 72 2c 21 31 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 2c 74 2e 68 69 73 74 6f 72 79 45 6e 74 72 79 53 74 61 74 65 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 22 73 65 72 76 65 72 73 69 64 65 2d 65 6e 68 61 6e 63 65 64 22 21 3d 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 55 6e 73 75 70 70 6f 72 74 65 64 20 70 61 67 65 20 6c 6f 61 64 20 6d 65 63 68 61 6e 69 73 6d 3a 20 24 7b 6f 7d 60 29 3b 43 Data Ascii: place(e)}else t?location.replace(e):location.href=e}(e,t.replaceHistoryEntry);else if("clientside-router"===o)Be(r,!1,t.replaceHistoryEntry,t.historyEntryState,n);else{if("serverside-enhanced"!==o)throw new Error(`Unsupported page load mechanism: ${o}`);C
2024-10-24 08:57:33 UTC	16384	IN	Data Raw: 70 61 74 68 6e 61 6d 65 26 26 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3d 3d 3d 74 2e 73 65 61 72 63 68 7d 28 65 29 29 72 65 74 75 72 6e 20 4c 65 28 65 2c 6e 2c 72 29 2c 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 74 21 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 26 26 53 65 28 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2b 31 29 29 7d 28 65 29 3b 63 6f 6e 73 74 20 73 3d 57 65 28 29 3b 28 6f 7c 7c 21 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 68 61 73 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 69 6e 67 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 29 7c 7c 61 77 61 69 74 20 46 65 28 65 2c 72 2c 74 2c 73 29 29 26 26 28 5f 65 3d 21 30 2c 4c 65 28 65 2c 6e 2c 72 29 2c 61 77 61 69 74 20 48 Data Ascii: pathname&&location.search===t.search}(e))return Le(e,n,r),void function(e){const t=e.indexOf("#");t!==e.length-1&&Se(e.substring(t+1))}(e);const s=We();(o\|\|!(null==s?void 0:s.hasLocationChangingEventListeners)\|\|await Fe(e,r,t,s))&&(_e=!0,Le(e,n,r),await H
2024-10-24 08:57:33 UTC	16384	IN	Data Raw: 69 73 2e 5f 6e 65 78 74 52 65 63 65 69 76 69 6e 67 53 65 71 75 65 6e 63 65 49 64 3d 31 2c 74 68 69 73 2e 5f 6c 61 74 65 73 74 52 65 63 65 69 76 65 64 53 65 71 75 65 6e 63 65 49 64 3d 30 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 65 64 42 79 74 65 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 49 6e 50 72 6f 67 72 65 73 73 3d 21 31 2c 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 3d 65 2c 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 3d 74 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 53 69 7a 65 3d 6e 7d 61 73 79 6e 63 20 5f 73 65 6e 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 70 72 6f 74 6f 63 6f 6c 2e 77 72 69 74 65 4d 65 73 73 61 67 65 28 65 29 3b 6c 65 74 20 6e 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 69 66 28 74 Data Ascii: is._nextReceivingSequenceId=1,this._latestReceivedSequenceId=0,this._bufferedByteCount=0,this._reconnectInProgress=!1,this._protocol=e,this._connection=t,this._bufferSize=n}async _send(e){const t=this._protocol.writeMessage(e);let n=Promise.resolve();if(t
2024-10-24 08:57:34 UTC	16384	IN	Data Raw: 65 63 74 69 6f 6e 20 6d 6f 76 65 64 20 74 6f 20 74 68 65 20 27 24 7b 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 7d 27 20 66 72 6f 6d 20 74 68 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 65 20 64 75 72 69 6e 67 20 72 65 63 6f 6e 6e 65 63 74 20 61 74 74 65 6d 70 74 2e 20 44 6f 6e 65 20 72 65 63 6f 6e 6e 65 63 74 69 6e 67 2e 60 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 71 74 2e 44 69 73 63 6f 6e 6e 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 63 6f 6d 70 6c 65 74 65 43 6c 6f 73 65 28 29 29 3b 72 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 3a 6e 65 77 20 45 72 72 6f 72 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 4e 65 78 74 52 Data Ascii: ection moved to the '${this._connectionState}' from the reconnecting state during reconnect attempt. Done reconnecting.`),void(this._connectionState===qt.Disconnecting&&this._completeClose());r=e instanceof Error?e:new Error(e.toString()),o=this._getNextR
2024-10-24 08:57:34 UTC	2182	IN	Data Raw: 73 2e 5f 77 65 62 53 6f 63 6b 65 74 3d 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 54 72 61 63 65 2c 22 28 57 65 62 53 6f 63 6b 65 74 73 20 74 72 61 6e 73 70 6f 72 74 29 20 73 6f 63 6b 65 74 20 63 6c 6f 73 65 64 2e 22 29 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 26 26 28 21 74 68 69 73 2e 5f 69 73 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 7c 7c 21 31 21 3d 3d 65 2e 77 61 73 43 6c 65 61 6e 26 26 31 65 33 3d 3d 3d 65 2e 63 6f 64 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 65 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 29 3a 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 6e 65 77 20 45 72 72 6f 72 28 60 57 65 62 53 6f 63 6b 65 74 20 63 6c 6f 73 65 64 20 77 69 74 68 20 73 74 Data Ascii: s._webSocket=void 0),this._logger.log(_t.Trace,"(WebSockets transport) socket closed."),this.onclose&&(!this._isCloseEvent(e)\|\|!1!==e.wasClean&&1e3===e.code?e instanceof Error?this.onclose(e):this.onclose():this.onclose(new Error(`WebSocket closed with st
2024-10-24 08:57:34 UTC	16384	IN	Data Raw: 77 20 24 74 28 65 29 29 7d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 65 64 3d 21 30 7d 73 65 6e 64 28 65 29 7b 72 65 74 75 72 6e 22 43 6f 6e 6e 65 63 74 65 64 22 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 6e 64 20 64 61 74 61 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 20 74 68 65 20 27 43 6f 6e 6e 65 63 74 65 64 27 20 53 74 61 74 65 2e 22 29 29 3a 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 7c 7c 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 3d 6e 65 77 20 66 6e 28 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 29 29 2c 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 Data Ascii: w $t(e))}this._connectionStarted=!0}send(e){return"Connected"!==this._connectionState?Promise.reject(new Error("Cannot send data if the connection is not in the 'Connected' State.")):(this._sendQueue\|\|(this._sendQueue=new fn(this.transport)),this._sendQue
2024-10-24 08:57:34 UTC	16384	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 3d 28 53 6e 3d 6e 75 6c 6c 3d 3d 3d 70 72 6f 63 65 73 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 72 6f 63 65 73 73 3f 76 6f 69 64 20 30 3a 70 72 6f 63 65 73 73 2e 65 6e 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 53 6e 3f 76 6f 69 64 20 30 3a 53 6e 2e 54 45 58 54 5f 44 45 43 4f 44 45 52 29 3f 32 30 30 3a 30 3a 45 6e 2c 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 74 79 70 65 3d 65 2c 74 68 69 73 2e 64 61 74 61 3d 74 7d 2c 42 6e 3d 28 50 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e Data Ascii: (null===(Sn=null===process\|\|void 0===process?void 0:process.env)\|\|void 0===Sn?void 0:Sn.TEXT_DECODER)?200:0:En,Mn=function(e,t){this.type=e,this.data=t},Bn=(Pn=function(e,t){return Pn=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.
2024-10-24 08:57:34 UTC	16384	IN	Data Raw: 28 65 29 7b 75 28 61 5b 30 5d 5b 33 5d 2c 65 29 7d 76 61 72 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 6c 28 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 6c 28 22 74 68 72 6f 77 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 65 28 74 29 2c 61 2e 73 68 69 66 74 28 29 2c 61 2e 6c 65 6e 67 74 68 26 26 6c 28 61 5b 30 5d 5b 30 5d 2c 61 5b 30 5d 5b 31 5d 29 7d 7d 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 6f 44 65 63 6f 64 65 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3a 66 6f 72 28 3b 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 61 64 48 65 61 64 42 79 74 65 28 29 2c 74 3d 76 6f 69 64 20 30 3b 69 66 28 65 3e 3d 32 32 34 29 74 3d 65 2d 32 35 36 3b 65 Data Ascii: (e){u(a[0][3],e)}var n}function h(e){l("next",e)}function d(e){l("throw",e)}function u(e,t){e(t),a.shift(),a.length&&l(a[0][0],a[0][1])}}(this,arguments)},e.prototype.doDecodeSync=function(){e:for(;;){var e=this.readHeadByte(),t=void 0;if(e>=224)t=e-256;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:34 UTC	855	OUT	GET /_framework/blazor.polyfill.min.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H; AWSALBCORS=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H
2024-10-24 08:57:34 UTC	1082	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:34 GMT Content-Type: application/javascript Content-Length: 2397 Connection: close Set-Cookie: AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; Expires=Thu, 31 Oct 2024 08:57:34 GMT; Path=/ Set-Cookie: AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; Expires=Thu, 31 Oct 2024 08:57:34 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache ETag: 8b41f523cc9870bf36be7927991b7a2694e4c9f24414a16f1aa27f6a8ce1fc35 X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:34 UTC	2397	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 69 6d 70 6f 72 74 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 66 69 6c 65 4e 61 6d 65 2c 20 77 65 62 52 6f 6f 74 50 61 74 68 29 20 7b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 65 62 52 6f 6f 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 74 68 4a 6f 69 6e 28 70 61 74 68 31 2c 20 70 61 74 68 32 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 61 74 68 31 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 70 61 74 68 31 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: window._import_ = function (fileName, webRootPath) { if (webRootPath === undefined \|\| webRootPath === null) { webRootPath = ""; } function pathJoin(path1, path2) { if (path1 === null \|\| path1 === undefined) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:34 UTC	849	OUT	GET /images/egress-logo-dark.svg HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS; AWSALBCORS=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS
2024-10-24 08:57:34 UTC	1070	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:34 GMT Content-Type: image/svg+xml Content-Length: 29277 Connection: close Set-Cookie: AWSALB=Ik5wCdoR9zHVBcGrT8BxFuEC4SCGmRWphU0sEgt1qq3R+uTGBXOxulgQzxg/rOGn02ooR0Ff3aQs/iWjaFPHlbCTKQ7lwtBcLqRELZWW2xHc9Yxyhe9FVu/Yh9pa; Expires=Thu, 31 Oct 2024 08:57:34 GMT; Path=/ Set-Cookie: AWSALBCORS=Ik5wCdoR9zHVBcGrT8BxFuEC4SCGmRWphU0sEgt1qq3R+uTGBXOxulgQzxg/rOGn02ooR0Ff3aQs/iWjaFPHlbCTKQ7lwtBcLqRELZWW2xHc9Yxyhe9FVu/Yh9pa; Expires=Thu, 31 Oct 2024 08:57:34 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebd35d" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:34 UTC	15314	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 31 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 30 34 37 31 20 36 2e 30 36 35 31 39 4c 31 34 2e 33 33 33 39 20 31 33 2e 38 37 31 39 4c 31 36 2e 36 36 38 34 20 31 37 2e 36 37 33 31 4c 32 39 2e 33 38 31 36 20 39 2e 38 36 37 33 37 4c 32 37 2e 30 34 37 31 20 36 2e 30 36 36 31 39 56 36 2e 30 36 35 31 39 5a 22 20 66 69 6c 6c 3d 22 23 46 37 46 37 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 31 33 30 34 20 31 37 2e 32 36 37 33 43 32 34 2e 38 31 31 33 20 31 39 2e 32 34 34 Data Ascii: <svg width="151" height="54" viewBox="0 0 151 54" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M27.0471 6.06519L14.3339 13.8719L16.6684 17.6731L29.3816 9.86737L27.0471 6.06619V6.06519Z" fill="#F7F741"/><path d="M25.1304 17.2673C24.8113 19.244
2024-10-24 08:57:34 UTC	13963	IN	Data Raw: 35 2e 36 32 37 32 20 31 32 38 2e 33 32 32 20 34 35 2e 34 30 31 37 20 31 32 38 2e 30 39 31 20 34 35 2e 32 33 32 36 43 31 32 37 2e 38 37 20 34 35 2e 30 35 36 34 20 31 32 37 2e 35 36 20 34 34 2e 39 36 38 38 20 31 32 37 2e 31 36 31 20 34 34 2e 39 36 38 38 43 31 32 36 2e 37 38 37 20 34 34 2e 39 36 38 38 20 31 32 36 2e 34 38 31 20 34 35 2e 30 35 36 34 20 31 32 36 2e 32 34 33 20 34 35 2e 32 33 32 36 43 31 32 36 2e 30 31 35 20 34 35 2e 34 30 38 37 20 31 32 35 2e 38 34 31 20 34 35 2e 36 33 34 32 20 31 32 35 2e 37 32 37 20 34 35 2e 39 31 30 31 43 31 32 35 2e 36 32 20 34 36 2e 31 37 37 38 20 31 32 35 2e 35 35 39 20 34 36 2e 34 35 33 37 20 31 32 35 2e 35 34 33 20 34 36 2e 37 33 36 35 43 31 32 35 2e 35 33 36 20 34 36 2e 38 35 39 33 20 31 32 35 2e 35 33 32 20 34 37 2e Data Ascii: 5.6272 128.322 45.4017 128.091 45.2326C127.87 45.0564 127.56 44.9688 127.161 44.9688C126.787 44.9688 126.481 45.0564 126.243 45.2326C126.015 45.4087 125.841 45.6342 125.727 45.9101C125.62 46.1778 125.559 46.4537 125.543 46.7365C125.536 46.8593 125.532 47.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49725	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:35 UTC	849	OUT	GET /_framework/blazor.server.js HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG
2024-10-24 08:57:35 UTC	1098	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:35 GMT Content-Type: text/javascript Content-Length: 151912 Connection: close Set-Cookie: AWSALB=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/ Set-Cookie: AWSALBCORS=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes Cache-Control: no-cache ETag: "1dada2bd14359e8" Last-Modified: Fri, 19 Jul 2024 22:34:29 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:35 UTC	15286	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 37 38 3a 28 29 3d 3e 7b 7d 2c 37 37 3a 28 29 3d 3e 7b 7d 2c 32 30 33 3a 28 29 3d 3e 7b 7d 2c 32 30 30 3a 28 29 3d 3e 7b 7d 2c 36 32 38 3a 28 29 3d 3e 7b 7d 2c 33 32 31 3a 28 29 3d 3e 7b 7d 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 73 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 28 73 2c 73 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 73 2e 65 78 70 6f 72 74 73 7d 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 Data Ascii: (()=>{var e={778:()=>{},77:()=>{},203:()=>{},200:()=>{},628:()=>{},321:()=>{}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var s=t[r]={exports:{}};return e[r](s,s.exports,n),s.exports}n.g=function(){if("object"==typeof globalThis)return g
2024-10-24 08:57:35 UTC	16384	IN	Data Raw: 6b 28 65 29 7b 74 68 69 73 2e 61 66 74 65 72 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 49 6e 66 6f 53 74 6f 72 65 2e 61 64 64 47 6c 6f 62 61 6c 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 29 7d 73 65 74 53 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 74 2c 6e 29 7d 73 65 74 50 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 67 65 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 49 6e 66 6f 73 46 6f 72 45 6c 65 6d 65 6e 74 28 65 2c 21 30 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: k(e){this.afterClickCallbacks.push(e),this.eventInfoStore.addGlobalListener("click")}setStopPropagation(e,t,n){this.getEventHandlerInfosForElement(e,!0).stopPropagation(t,n)}setPreventDefault(e,t,n){this.getEventHandlerInfosForElement(e,!0).preventDefault
2024-10-24 08:57:35 UTC	430	IN	Data Raw: 70 6c 61 63 65 28 65 29 7d 65 6c 73 65 20 74 3f 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 65 29 3a 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 7d 28 65 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 29 3b 65 6c 73 65 20 69 66 28 22 63 6c 69 65 6e 74 73 69 64 65 2d 72 6f 75 74 65 72 22 3d 3d 3d 6f 29 42 65 28 72 2c 21 31 2c 74 2e 72 65 70 6c 61 63 65 48 69 73 74 6f 72 79 45 6e 74 72 79 2c 74 2e 68 69 73 74 6f 72 79 45 6e 74 72 79 53 74 61 74 65 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 22 73 65 72 76 65 72 73 69 64 65 2d 65 6e 68 61 6e 63 65 64 22 21 3d 3d 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 55 6e 73 75 70 70 6f 72 74 65 64 20 70 61 67 65 20 6c 6f 61 64 20 6d 65 63 68 61 6e 69 73 6d 3a 20 24 7b 6f 7d 60 29 3b 43 Data Ascii: place(e)}else t?location.replace(e):location.href=e}(e,t.replaceHistoryEntry);else if("clientside-router"===o)Be(r,!1,t.replaceHistoryEntry,t.historyEntryState,n);else{if("serverside-enhanced"!==o)throw new Error(`Unsupported page load mechanism: ${o}`);C
2024-10-24 08:57:35 UTC	11977	IN	Data Raw: 70 61 74 68 6e 61 6d 65 26 26 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3d 3d 3d 74 2e 73 65 61 72 63 68 7d 28 65 29 29 72 65 74 75 72 6e 20 4c 65 28 65 2c 6e 2c 72 29 2c 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 74 21 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 26 26 53 65 28 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2b 31 29 29 7d 28 65 29 3b 63 6f 6e 73 74 20 73 3d 57 65 28 29 3b 28 6f 7c 7c 21 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 68 61 73 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 69 6e 67 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 29 7c 7c 61 77 61 69 74 20 46 65 28 65 2c 72 2c 74 2c 73 29 29 26 26 28 5f 65 3d 21 30 2c 4c 65 28 65 2c 6e 2c 72 29 2c 61 77 61 69 74 20 48 Data Ascii: pathname&&location.search===t.search}(e))return Le(e,n,r),void function(e){const t=e.indexOf("#");t!==e.length-1&&Se(e.substring(t+1))}(e);const s=We();(o\|\|!(null==s?void 0:s.hasLocationChangingEventListeners)\|\|await Fe(e,r,t,s))&&(_e=!0,Le(e,n,r),await H
2024-10-24 08:57:35 UTC	16384	IN	Data Raw: 69 6e 74 38 41 72 72 61 79 28 65 29 3b 6c 65 74 20 6e 3d 22 22 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 6e 2b 3d 60 30 78 24 7b 65 3c 31 36 3f 22 30 22 3a 22 22 7d 24 7b 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 20 60 7d 29 29 2c 6e 2e 73 75 62 73 74 72 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 7d 28 65 29 7d 27 60 29 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 6e 3d 60 53 74 72 69 6e 67 20 64 61 74 61 20 6f 66 20 6c 65 6e 67 74 68 20 24 7b 65 2e 6c 65 6e 67 74 68 7d 60 2c 74 26 26 28 6e 2b 3d 60 2e 20 43 6f 6e 74 65 6e 74 3a 20 27 24 7b 65 7d 27 60 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 Data Ascii: int8Array(e);let n="";return t.forEach((e=>{n+=`0x${e<16?"0":""}${e.toString(16)} `})),n.substr(0,n.length-1)}(e)}'`)):"string"==typeof e&&(n=`String data of length ${e.length}`,t&&(n+=`. Content: '${e}'`)),n}function kt(e){return e&&"undefined"!=typeof A
2024-10-24 08:57:36 UTC	16384	IN	Data Raw: 72 65 63 65 69 76 69 6e 67 20 61 20 6d 65 73 73 61 67 65 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 65 72 2e 22 29 29 7d 61 73 79 6e 63 20 5f 69 6e 76 6f 6b 65 43 6c 69 65 6e 74 4d 65 74 68 6f 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 74 61 72 67 65 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 74 68 69 73 2e 5f 6d 65 74 68 6f 64 73 5b 74 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 57 61 72 6e 69 6e 67 2c 60 4e 6f 20 63 6c 69 65 6e 74 20 6d 65 74 68 6f 64 20 77 69 74 68 20 74 68 65 20 6e 61 6d 65 20 27 24 7b 74 7d 27 20 66 6f 75 6e 64 2e 60 29 2c 76 6f 69 64 28 65 2e 69 6e 76 6f 63 61 74 69 6f 6e 49 64 26 26 28 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 57 61 72 6e 69 Data Ascii: receiving a message from the server."))}async _invokeClientMethod(e){const t=e.target.toLowerCase(),n=this._methods[t];if(!n)return this._logger.log(_t.Warning,`No client method with the name '${t}' found.`),void(e.invocationId&&(this._logger.log(_t.Warni
2024-10-24 08:57:36 UTC	6589	IN	Data Raw: 63 6c 6f 73 65 29 7b 6c 65 74 20 65 3d 22 28 4c 6f 6e 67 50 6f 6c 6c 69 6e 67 20 74 72 61 6e 73 70 6f 72 74 29 20 46 69 72 69 6e 67 20 6f 6e 63 6c 6f 73 65 20 65 76 65 6e 74 2e 22 3b 74 68 69 73 2e 5f 63 6c 6f 73 65 45 72 72 6f 72 26 26 28 65 2b 3d 22 20 45 72 72 6f 72 3a 20 22 2b 74 68 69 73 2e 5f 63 6c 6f 73 65 45 72 72 6f 72 29 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 6c 6f 67 28 5f 74 2e 54 72 61 63 65 2c 65 29 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 28 74 68 69 73 2e 5f 63 6c 6f 73 65 45 72 72 6f 72 29 7d 7d 7d 63 6c 61 73 73 20 64 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 2c 72 29 7b 74 68 69 73 2e 5f 68 74 74 70 43 6c 69 65 6e 74 3d 65 2c 74 68 69 73 2e 5f 61 63 63 65 73 73 54 6f 6b 65 6e 3d 74 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 72 Data Ascii: close){let e="(LongPolling transport) Firing onclose event.";this._closeError&&(e+=" Error: "+this._closeError),this._logger.log(_t.Trace,e),this.onclose(this._closeError)}}}class dn{constructor(e,t,n,r){this._httpClient=e,this._accessToken=t,this._logger
2024-10-24 08:57:36 UTC	16384	IN	Data Raw: 77 20 24 74 28 65 29 29 7d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 65 64 3d 21 30 7d 73 65 6e 64 28 65 29 7b 72 65 74 75 72 6e 22 43 6f 6e 6e 65 63 74 65 64 22 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 6e 64 20 64 61 74 61 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 20 74 68 65 20 27 43 6f 6e 6e 65 63 74 65 64 27 20 53 74 61 74 65 2e 22 29 29 3a 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 7c 7c 28 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 75 65 3d 6e 65 77 20 66 6e 28 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 29 29 2c 74 68 69 73 2e 5f 73 65 6e 64 51 75 65 Data Ascii: w $t(e))}this._connectionStarted=!0}send(e){return"Connected"!==this._connectionState?Promise.reject(new Error("Cannot send data if the connection is not in the 'Connected' State.")):(this._sendQueue\|\|(this._sendQueue=new fn(this.transport)),this._sendQue
2024-10-24 08:57:36 UTC	16384	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 3d 28 53 6e 3d 6e 75 6c 6c 3d 3d 3d 70 72 6f 63 65 73 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 72 6f 63 65 73 73 3f 76 6f 69 64 20 30 3a 70 72 6f 63 65 73 73 2e 65 6e 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 53 6e 3f 76 6f 69 64 20 30 3a 53 6e 2e 54 45 58 54 5f 44 45 43 4f 44 45 52 29 3f 32 30 30 3a 30 3a 45 6e 2c 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 74 79 70 65 3d 65 2c 74 68 69 73 2e 64 61 74 61 3d 74 7d 2c 42 6e 3d 28 50 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e Data Ascii: (null===(Sn=null===process\|\|void 0===process?void 0:process.env)\|\|void 0===Sn?void 0:Sn.TEXT_DECODER)?200:0:En,Mn=function(e,t){this.type=e,this.data=t},Bn=(Pn=function(e,t){return Pn=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.
2024-10-24 08:57:36 UTC	16384	IN	Data Raw: 28 65 29 7b 75 28 61 5b 30 5d 5b 33 5d 2c 65 29 7d 76 61 72 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 6c 28 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 6c 28 22 74 68 72 6f 77 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 65 28 74 29 2c 61 2e 73 68 69 66 74 28 29 2c 61 2e 6c 65 6e 67 74 68 26 26 6c 28 61 5b 30 5d 5b 30 5d 2c 61 5b 30 5d 5b 31 5d 29 7d 7d 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 6f 44 65 63 6f 64 65 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3a 66 6f 72 28 3b 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 72 65 61 64 48 65 61 64 42 79 74 65 28 29 2c 74 3d 76 6f 69 64 20 30 3b 69 66 28 65 3e 3d 32 32 34 29 74 3d 65 2d 32 35 36 3b 65 Data Ascii: (e){u(a[0][3],e)}var n}function h(e){l("next",e)}function d(e){l("throw",e)}function u(e,t){e(t),a.shift(),a.length&&l(a[0][0],a[0][1])}}(this,arguments)},e.prototype.doDecodeSync=function(){e:for(;;){var e=this.readHeadByte(),t=void 0;if(e>=224)t=e-256;e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:35 UTC	3016	OUT	GET /_blazor/initializers HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG
2024-10-24 08:57:35 UTC	1000	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:35 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=Yf/TX24uIayrjyCou1cARPow0g4M5xy/gZyCsgk5pF7cOyb3AvVSfElBGJONO/453KelVW+MnK40nTVV8KZAkJvxz1kUZRf6AX3tlU4geWN2bNSkBU6snUSLHuPB; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/ Set-Cookie: AWSALBCORS=Yf/TX24uIayrjyCou1cARPow0g4M5xy/gZyCsgk5pF7cOyb3AvVSfElBGJONO/453KelVW+MnK40nTVV8KZAkJvxz1kUZRf6AX3tlU4geWN2bNSkBU6snUSLHuPB; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:35 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-24 08:57:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:35 UTC	3056	OUT	GET /images/egress-icon.png HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG
2024-10-24 08:57:35 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:35 GMT Content-Type: image/png Content-Length: 4436 Connection: close Set-Cookie: AWSALB=pZnLT31hIhbPUlIwOblqJ46qCw95cTGCMdeNkaf9jMuysOYCVAbU9XOgw2Qvc3AYFqzBKWJCmDov91EJOaIVnTcV6JOOqFuZCA/3OTNzGP+bFLVM20T3HOEGhwVz; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/ Set-Cookie: AWSALBCORS=pZnLT31hIhbPUlIwOblqJ46qCw95cTGCMdeNkaf9jMuysOYCVAbU9XOgw2Qvc3AYFqzBKWJCmDov91EJOaIVnTcV6JOOqFuZCA/3OTNzGP+bFLVM20T3HOEGhwVz; Expires=Thu, 31 Oct 2024 08:57:35 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebb054" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:35 UTC	4436	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 74 08 06 00 00 00 54 9a 16 27 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 10 e9 49 44 41 54 78 5e ed 9d 0b 94 54 75 1d c7 7f ff 7b 67 57 70 85 d4 44 8c 79 2c a8 28 22 a0 e2 a3 44 3d 29 a6 9e 42 cd ac c0 e3 11 76 66 d1 88 d2 d4 3a 9a 95 16 be 32 3b 9e f2 11 15 0a 33 bb 20 a6 52 f9 44 2d cb 67 64 a4 59 e6 5b e4 b1 33 b3 2b 49 59 0a 8b fb 98 b9 ff be bf 7b ff 2b bb ec 6b 76 ee ff ce bd 33 ec 87 73 67 7e ff df 70 76 1e df fb 7f ff fe ff bf a0 4a 20 d9 1c 25 23 3f 81 a4 88 e0 1a 0b 4f 98 0c 39 96 24 ed e6 fc 07 aa 21 21 ab 89 44 1b 7c 1f 10 49 5c e2 7d f8 b6 90 34 d2 24 f2 1b 48 5a Data Ascii: PNGIHDRttT'sRGBgAMAapHYsodIDATx^Tu{gWpDy,("D=)Bvf:2;3 RD-gdY[3+IY{+kv3sg~pvJ %#?O9$!!D\|I\}4$HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49728	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:36 UTC	3240	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=pZnLT31hIhbPUlIwOblqJ46qCw95cTGCMdeNkaf9jMuysOYCVAbU9XOgw2Qvc3AYFqzBKWJCmDov91EJOaIVnTcV6JOOqFuZCA/3OTNzGP+bFLVM20T3HOEGhwVz; AWSALBCORS=pZnLT31hIhbPUlIwOblqJ46qCw95cTGCMdeNkaf9jMuysOYCVAbU9XOgw2Qvc3AYFqzBKWJCmDov91EJOaIVnTcV6JOOqFuZCA/3OTNzGP+bFLVM20T3HOEGhwVz
2024-10-24 08:57:36 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:36 GMT Content-Type: application/json Content-Length: 316 Connection: close Set-Cookie: AWSALB=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/ Set-Cookie: AWSALBCORS=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:36 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 49 41 62 52 43 32 4c 79 46 36 68 45 76 4d 6d 4f 32 30 57 6d 48 77 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 76 44 51 38 57 32 4a 64 5f 69 54 78 67 47 35 6c 55 54 75 4d 63 77 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"IAbRC2LyF6hEvMmO20WmHw","connectionToken":"vDQ8W2Jd_iTxgG5lUTuMcw","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 08:57:36 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=28050 Date: Thu, 24 Oct 2024 08:57:36 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49730	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:36 UTC	842	OUT	GET /_blazor/initializers HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; AWSALBCORS=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC
2024-10-24 08:57:36 UTC	1000	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=hzmTnYyqP7u0PVwbqfLGLvP0Sl/15FxRONZC8wZPmERJDxHOlOpDYX+n8D5Bo7tNArcP43pGDAg8Uwi/WJqYjyy2go8mGiRG/J6m596DoNNp9ZOi2I8hRs9L2ZWX; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/ Set-Cookie: AWSALBCORS=hzmTnYyqP7u0PVwbqfLGLvP0Sl/15FxRONZC8wZPmERJDxHOlOpDYX+n8D5Bo7tNArcP43pGDAg8Uwi/WJqYjyy2go8mGiRG/J6m596DoNNp9ZOi2I8hRs9L2ZWX; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:36 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-24 08:57:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49729	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:36 UTC	844	OUT	GET /images/egress-icon.png HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; AWSALBCORS=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC
2024-10-24 08:57:36 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:36 GMT Content-Type: image/png Content-Length: 4436 Connection: close Set-Cookie: AWSALB=CMxy1rqj2bRKeiWD5X6L1K5Qu0KUgiqhblyQnNrv8EnBWGKJIWabHItPuwuovTq51X4tWo5hGw7yfp16Fr8Om5ZffZO7jjGKNX1jtA3fUC5htY5CbedjLVF4vETv; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/ Set-Cookie: AWSALBCORS=CMxy1rqj2bRKeiWD5X6L1K5Qu0KUgiqhblyQnNrv8EnBWGKJIWabHItPuwuovTq51X4tWo5hGw7yfp16Fr8Om5ZffZO7jjGKNX1jtA3fUC5htY5CbedjLVF4vETv; Expires=Thu, 31 Oct 2024 08:57:36 GMT; Path=/; SameSite=None; Secure Accept-Ranges: bytes ETag: "1db1988f8ebb054" Last-Modified: Tue, 08 Oct 2024 13:50:02 GMT X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:36 UTC	4436	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 74 08 06 00 00 00 54 9a 16 27 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 10 e9 49 44 41 54 78 5e ed 9d 0b 94 54 75 1d c7 7f ff 7b 67 57 70 85 d4 44 8c 79 2c a8 28 22 a0 e2 a3 44 3d 29 a6 9e 42 cd ac c0 e3 11 76 66 d1 88 d2 d4 3a 9a 95 16 be 32 3b 9e f2 11 15 0a 33 bb 20 a6 52 f9 44 2d cb 67 64 a4 59 e6 5b e4 b1 33 b3 2b 49 59 0a 8b fb 98 b9 ff be bf 7b ff 2b bb ec 6b 76 ee ff ce bd 33 ec 87 73 67 7e ff df 70 76 1e df fb 7f ff fe ff bf a0 4a 20 d9 1c 25 23 3f 81 a4 88 e0 1a 0b 4f 98 0c 39 96 24 ed e6 fc 07 aa 21 21 ab 89 44 1b 7c 1f 10 49 5c e2 7d f8 b6 90 34 d2 24 f2 1b 48 5a Data Ascii: PNGIHDRttT'sRGBgAMAapHYsodIDATx^Tu{gWpDy,("D=)Bvf:2;3 RD-gdY[3+IY{+kv3sg~pvJ %#?O9$!!D\|I\}4$HZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49732	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:37 UTC	858	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; AWSALBCORS=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD
2024-10-24 08:57:37 UTC	986	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 24 Oct 2024 08:57:37 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=xTbgEcsBd8k/ORDByyRjzJWcwHEQ0RxKQp6opbM6IYhEPy7u2Mu3JsWEH9rK9gaKi2gV/lTCGlpRvS1AWtQJwMY2d/SmhNyTOAD3HRjWlSyfLOqngf0CMtEIAxpq; Expires=Thu, 31 Oct 2024 08:57:37 GMT; Path=/ Set-Cookie: AWSALBCORS=xTbgEcsBd8k/ORDByyRjzJWcwHEQ0RxKQp6opbM6IYhEPy7u2Mu3JsWEH9rK9gaKi2gV/lTCGlpRvS1AWtQJwMY2d/SmhNyTOAD3HRjWlSyfLOqngf0CMtEIAxpq; Expires=Thu, 31 Oct 2024 08:57:37 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:37 UTC	1022	OUT	GET /_blazor?id=vDQ8W2Jd_iTxgG5lUTuMcw HTTP/1.1 Host: links.us1.defend.egress.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://links.us1.defend.egress.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; AWSALBCORS=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD Sec-WebSocket-Key: 74yFbjxAtNWPTp9ic8rjFw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-10-24 08:57:37 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:37 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Set-Cookie: AWSALB=EA1tXS2jbraPwDuBu+sU6q9dggRBjjP/56gvwIYfMsiPGEaW/gMyozDwAovbB7eHuNE23IDUbAqb7i+/N9XeLwdGCDkipg6ToeR9lqkbRXixlYmhEvdIMvkrRvSK; Expires=Thu, 31 Oct 2024 08:57:37 GMT; Path=/ Set-Cookie: AWSALBCORS=EA1tXS2jbraPwDuBu+sU6q9dggRBjjP/56gvwIYfMsiPGEaW/gMyozDwAovbB7eHuNE23IDUbAqb7i+/N9XeLwdGCDkipg6ToeR9lqkbRXixlYmhEvdIMvkrRvSK; Expires=Thu, 31 Oct 2024 08:57:37 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 08:57:37 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=28129 Date: Thu, 24 Oct 2024 08:57:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 08:57:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49737	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:37 UTC	3240	OUT	POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xTbgEcsBd8k/ORDByyRjzJWcwHEQ0RxKQp6opbM6IYhEPy7u2Mu3JsWEH9rK9gaKi2gV/lTCGlpRvS1AWtQJwMY2d/SmhNyTOAD3HRjWlSyfLOqngf0CMtEIAxpq; AWSALBCORS=xTbgEcsBd8k/ORDByyRjzJWcwHEQ0RxKQp6opbM6IYhEPy7u2Mu3JsWEH9rK9gaKi2gV/lTCGlpRvS1AWtQJwMY2d/SmhNyTOAD3HRjWlSyfLOqngf0CMtEIAxpq
2024-10-24 08:57:38 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:38 GMT Content-Type: application/json Content-Length: 316 Connection: close Set-Cookie: AWSALB=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/ Set-Cookie: AWSALBCORS=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:38 UTC	316	IN	Data Raw: 7b 22 6e 65 67 6f 74 69 61 74 65 56 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 49 64 22 3a 22 56 37 45 78 35 63 31 74 33 34 6d 4a 4c 52 30 73 32 71 63 4e 32 41 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 68 69 65 52 6e 54 5a 48 67 51 34 35 4f 2d 42 41 48 2d 48 32 63 77 22 2c 22 61 76 61 69 6c 61 62 6c 65 54 72 61 6e 73 70 6f 72 74 73 22 3a 5b 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 57 65 62 53 6f 63 6b 65 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 2c 22 42 69 6e 61 72 79 22 5d 7d 2c 7b 22 74 72 61 6e 73 70 6f 72 74 22 3a 22 53 65 72 76 65 72 53 65 6e 74 45 76 65 6e 74 73 22 2c 22 74 72 61 6e 73 66 65 72 46 6f 72 6d 61 74 73 22 3a 5b 22 54 65 78 74 22 5d 7d 2c 7b 22 74 72 Data Ascii: {"negotiateVersion":1,"connectionId":"V7Ex5c1t34mJLR0s2qcN2A","connectionToken":"hieRnTZHgQ45O-BAH-H2cw","availableTransports":[{"transport":"WebSockets","transferFormats":["Text","Binary"]},{"transport":"ServerSentEvents","transferFormats":["Text"]},{"tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:38 UTC	3188	OUT	GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257007 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/; AWSALBCORS=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/
2024-10-24 08:57:38 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:38 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Set-Cookie: AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/ Set-Cookie: AWSALBCORS=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49739	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:38 UTC	858	OUT	GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/; AWSALBCORS=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/
2024-10-24 08:57:38 UTC	986	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 24 Oct 2024 08:57:38 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=7PNZHS45iC/2pRF5hUJ9WLn1CxY5G/ksgQE6KrSq3VAnV32XC9ygN23o+G+JZgO6LQQntaR+qAGOgAZf6arpo72SOj/5DTX81/cJKBAX2+vYbQSchSuligVrBd6W; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/ Set-Cookie: AWSALBCORS=7PNZHS45iC/2pRF5hUJ9WLn1CxY5G/ksgQE6KrSq3VAnV32XC9ygN23o+G+JZgO6LQQntaR+qAGOgAZf6arpo72SOj/5DTX81/cJKBAX2+vYbQSchSuligVrBd6W; Expires=Thu, 31 Oct 2024 08:57:38 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:39 UTC	3278	OUT	POST /_blazor?id=hieRnTZHgQ45O-BAH-H2cw HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Content-Length: 38 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Origin: https://links.us1.defend.egress.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; AWSALBCORS=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt
2024-10-24 08:57:39 UTC	38	OUT	Data Raw: 7b 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 62 6c 61 7a 6f 72 70 61 63 6b 22 2c 22 76 65 72 73 69 6f 6e 22 3a 31 7d 1e Data Ascii: {"protocol":"blazorpack","version":1}
2024-10-24 08:57:39 UTC	970	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:39 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=Mb2hYrS6aVAoMrezEBQMP5XKoXW2a7ivV5cQMDE8W/h7TmpyxWLN3GuJjPbBspf3IAEiMj0d6QQJEqClQWmqfA2G8VTk9SaKhx+yi+j9mrK3QA5BGJCygzrNbf8p; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/ Set-Cookie: AWSALBCORS=Mb2hYrS6aVAoMrezEBQMP5XKoXW2a7ivV5cQMDE8W/h7TmpyxWLN3GuJjPbBspf3IAEiMj0d6QQJEqClQWmqfA2G8VTk9SaKhx+yi+j9mrK3QA5BGJCygzrNbf8p; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/; SameSite=None; Secure X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49741	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:39 UTC	3188	OUT	GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257859 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version) sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; AWSALBCORS=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt
2024-10-24 08:57:39 UTC	1052	IN	HTTP/1.1 204 No Content Date: Thu, 24 Oct 2024 08:57:39 GMT Content-Type: text/plain Connection: close Set-Cookie: AWSALB=MPkWaMtgfRRltfOGGCrZujPwJ3my3pBzIcqnIiOxR3ZHj+vmz/fkQR95rC7SfEhd9MAoeehYUyg9AaTOSQbjLnmLQOGZNuSeTVeey9/5bq422AMoz/BVDlGNrc07; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/ Set-Cookie: AWSALBCORS=MPkWaMtgfRRltfOGGCrZujPwJ3my3pBzIcqnIiOxR3ZHj+vmz/fkQR95rC7SfEhd9MAoeehYUyg9AaTOSQbjLnmLQOGZNuSeTVeey9/5bq422AMoz/BVDlGNrc07; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49743	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:39 UTC	871	OUT	GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257007 HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; AWSALBCORS=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt
2024-10-24 08:57:39 UTC	1077	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:39 GMT Content-Type: application/octet-stream Content-Length: 3 Connection: close Set-Cookie: AWSALB=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/ Set-Cookie: AWSALBCORS=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf; Expires=Thu, 31 Oct 2024 08:57:39 GMT; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Robots-Tag: noindex X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Referrer-Policy: same-origin X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none' Strict-Transport-Security: max-age=2592000; preload
2024-10-24 08:57:39 UTC	3	IN	Data Raw: 7b 7d 1e Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49740	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:39 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:40 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:39 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085739Z-17fbfdc98bbwfg2nvhsr4h37pn000000070g00000000523c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:40 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 08:57:40 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49744	99.83.228.139	443	3184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:40 UTC	855	OUT	GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw HTTP/1.1 Host: links.us1.defend.egress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf; AWSALBCORS=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf
2024-10-24 08:58:41 UTC	566	IN	HTTP/1.1 504 Gateway Time-out Server: awselb/2.0 Date: Thu, 24 Oct 2024 08:58:41 GMT Content-Type: text/html Content-Length: 534 Connection: close Set-Cookie: AWSALB=qJxOhGqrBOKZCz9LLlARTE7g6/DoMEaYRxB09Qziy3oV0Xz22IRSgLlsnEJo3/AAwLSxUhI1rnKE1GNFue8RyQUWYR7WpyT1QxrgSozfiDk/TeMswGImKQmYmiMv; Expires=Thu, 31 Oct 2024 08:57:41 GMT; Path=/ Set-Cookie: AWSALBCORS=qJxOhGqrBOKZCz9LLlARTE7g6/DoMEaYRxB09Qziy3oV0Xz22IRSgLlsnEJo3/AAwLSxUhI1rnKE1GNFue8RyQUWYR7WpyT1QxrgSozfiDk/TeMswGImKQmYmiMv; Expires=Thu, 31 Oct 2024 08:57:41 GMT; Path=/; SameSite=None; Secure
2024-10-24 08:58:41 UTC	534	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 Data Ascii: <html><head><title>504 Gateway Time-out</title></head><body><center><h1>504 Gateway Time-out</h1></center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49747	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:42 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:42 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085742Z-r1755647c669hnl7dkxy835cqc0000000770000000005neu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:42 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49749	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:42 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:42 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085742Z-r1755647c66ldfgxa3qp9d53us00000009gg0000000046yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:42 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49745	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:42 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:42 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085742Z-r1755647c66dj7986akr8tvaw400000008qg0000000051eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:42 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49746	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:42 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:42 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085742Z-r1755647c66s2pfjx11r8ys39000000000x0000000000p7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:42 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49748	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:42 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085742Z-r1755647c66nxct5p0gnwngmx000000008rg00000000466e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49750	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:43 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085743Z-17fbfdc98bbvf2fnx6t6w0g25n000000074g000000002rty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49752	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:43 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085743Z-r1755647c66x46wg1q56tyyk6800000008sg000000003xhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49753	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:43 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:43 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085743Z-r1755647c66ldfgxa3qp9d53us00000009h000000000453r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:43 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49751	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:43 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085743Z-r1755647c66zs9x4962sbyaz1w00000007pg000000003xrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:43 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:43 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085743Z-17fbfdc98bb96dqv0e332dtg600000000720000000001ekk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:43 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085744Z-17fbfdc98bbnhb2b0umpa641c800000006w0000000006ags x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085744Z-r1755647c66zs9x4962sbyaz1w00000007sg000000001xn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085744Z-17fbfdc98bblptj7fr9s141cpc0000000730000000002m7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 48cb304a-401e-0064-7764-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085744Z-17fbfdc98bbgqz661ufkm7k13c0000000700000000002wmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085744Z-17fbfdc98bbvwcxrk0yzwg4d580000000770000000000t6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49755	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:44 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RTSD3HBpmUBBtC+&MD=5BEvRMR5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 08:57:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 17c24a22-4b42-4230-9518-93223ff7de07 MS-RequestId: 61e9eacb-5d0d-4c29-ad0d-1df0e7ecab8c MS-CV: +K/zYbThBEm9Zp72.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 08:57:43 GMT Connection: close Content-Length: 24490
2024-10-24 08:57:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 08:57:44 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c66j878m0wkraqty3800000008100000000037tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-17fbfdc98bbndwgn5b4pg7s8bs00000006z0000000003e9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-17fbfdc98bbqc8zsbguzmabx6800000006v0000000006qhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c669hnl7dkxy835cqc0000000780000000004yy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:45 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c66nfj7t97c2qyh6zg000000069g000000006a75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c66fnxpdavnqahfp1w00000007r0000000004e46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c66nfj7t97c2qyh6zg000000069g000000006a7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-r1755647c66tmf6g4720xfpwpn0000000abg000000001pmg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:45 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085745Z-17fbfdc98bbrx2rj4asdpg8sbs000000031g00000000245q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085746Z-r1755647c66wjht63r8k9qqnrs00000007x0000000006cmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085746Z-r1755647c66x46wg1q56tyyk6800000008v0000000001e6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085746Z-17fbfdc98bbl89flqtm21qm6rn000000076g0000000027h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:57:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 08:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 08:57:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T085746Z-17fbfdc98bb6j78ntkx6e2fx4c0000000720000000000vx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 08:57:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49781	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 08:58:22 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RTSD3HBpmUBBtC+&MD=5BEvRMR5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 08:58:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 8c21467f-3904-461e-b491-a36da032845e MS-RequestId: 7bbf2edd-497e-443b-9cc4-f99e8992b0f8 MS-CV: gSCM0kP8cUSEVADb.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 08:58:22 GMT Connection: close Content-Length: 30005
2024-10-24 08:58:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 08:58:22 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	04:57:23
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:57:28
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:57:30
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72

Source: global traffic	DNS traffic detected: DNS query: links.us1.defend.egress.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets