Edit tour

Windows Analysis Report
https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==

Overview

General Information

Sample URL:	https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2
Analysis ID:	694164
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

Found iframes

No HTML title found

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6624 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1812,i,2189406768786567700,6939733223413603732,131072 /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 7164 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ== MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e

HTTP Parser: Number of links: 0

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&aadredir=1&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx?id=292841&mkt=EN-US
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=db89552787394da7b7dd45e72f2ba48e&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&aadredir=1&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	HTTP Parser: HTML title missing
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: HTML title missing

Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&aadredir=1&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: No <meta name="author".. found

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&aadredir=1&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.5:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.175:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.175:443 -> 192.168.2.5:49960 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: global traffic	HTTP traffic detected: GET /c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ== HTTP/1.1Host: e.targito.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c3ZjQHN0b25lcmdyb3VwLmNvbQ== HTTP/1.1Host: dutarayamakmur.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=svc@stonergroup.com HTTP/1.1Host: lmo.universaliogic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://dutarayamakmur.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://dutarayamakmur.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: www.outlook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://dutarayamakmur.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://dutarayamakmur.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.live.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://outlook.live.com/owa/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; logonLatency=LGN01=637975539356482914
Source: global traffic	HTTP traffic detected: GET /krs?id=tQtJq38l HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?id=tQtJq38l HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /css/styles.css HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://krs.microsoft.com/redirect?id=tQtJq38lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=tQtJq38lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=tQtJq38lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /krs?id=UPmn92S3 HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?id=UPmn92S3 HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /owa/?nlp=1 HTTP/1.1Host: outlook.live.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; logonLatency=LGN01=637975539356482914; MSFPC=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; OWAPF=p:11111111&v:15.20.5566.21&l:mouse&
Source: global traffic	HTTP traffic detected: GET /16.000/Converged_v21033_-__Cqeow2darz41wUymj4A2.css HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/ConvergedLoginPaginatedStrings.en_8IAH-rV-SAmuJXx1_pfJfw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_GASermMBtJQPCgSX-pw2WQ2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_8363475333f6d315e7ae.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx?id=292841&mkt=EN-US HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.29527.5/images/favicon.ico HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.29527.5/images/favicon.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: logincdn.msauth.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: logincdn.msauth.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: logincdn.msauth.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: logincdn.msauth.net
Source: global traffic	HTTP traffic detected: GET /owa/?nlp=1&signup=1 HTTP/1.1Host: outlook.live.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; MSFPC=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; OWAPF=p:11111111&v:15.20.5566.21&l:mouse&; logonLatency=LGN01=637975539837445397; exchangecookie=534d8faa8e714f788c0ecd2363c9b10d; RpsCsrfState.ngjoP4g0Pxw3ld7th5oHWVgyEjVTUBS6CGCV5dKU1nc=70b1504b-a812-7672-c757-76dae1b0d8b4; X-OWA-RedirectHistory=AhR7n8MBFSVmk1-L2gg
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_u77h9aLlpCTRkWpDDpAa0Q2.css?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_89wF0Xwfu7FmoF_uu5VFtA2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: acctcdn.msftauth.net
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: acctcdn.msftauth.net
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: acctcdn.msftauth.net
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: acctcdn.msftauth.net
Source: global traffic	HTTP traffic detected: GET /1.gif HTTP/1.1Host: via.placeholder.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
Source: global traffic	HTTP traffic detected: GET /meversion?partner=mshomepage&market=de-ch&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.22108.2/de-DE/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.22108.2/de-DE/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.5:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.221.185:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.175:443 -> 192.168.2.5:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.175:443 -> 192.168.2.5:49960 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@45/0@27/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1812,i,2189406768786567700,6939733223413603732,131072 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1812,i,2189406768786567700,6939733223413603732,131072 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	1 Scripting	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Scripting	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://acctcdn.msftauth.net/converged_ux_v2_u77h9aLlpCTRkWpDDpAa0Q2.css?v=1	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/images/favicon.ico?v=2	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/lightweightsignuppackage_89wF0Xwfu7FmoF_uu5VFtA2.js?v=1	0%	Avira URL Cloud	safe
https://dutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.22108.2/de-DE/meCore.min.js	0%	Avira URL Cloud	safe
https://lmo.universaliogic.com/?username=svc@stonergroup.com	0%	Avira URL Cloud	safe
https://mem.gfx.ms/meversion?partner=mshomepage&market=de-ch&uhf=1	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.22108.2/de-DE/meBoot.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	142.250.203.109	true	false	high
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
lmo.universaliogic.com	190.123.44.208	true	false	unknown
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
dutarayamakmur.net	31.22.4.109	true	false	unknown
aka.ms	23.63.126.201	true	false	high
HHN-efz.ms-acdc.office.com	52.98.175.2	true	false	high
part-0032.t-0009.fbs1-t-msedge.net	13.107.219.60	true	false	unknown
outlook.com	52.96.223.2	true	false	high
www.google.com	142.250.203.100	true	false	high
cs1227.wpc.alphacdn.net	192.229.221.185	true	false	unknown
clients.l.google.com	216.58.215.238	true	false	high
e.targito.com	3.65.100.84	true	false	unknown
FRA-efz.ms-acdc.office.com	52.98.213.162	true	false	high
via.placeholder.com	172.67.31.203	true	false	high
signup.live.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	unknown
r4.res.office365.com	unknown	unknown	false	high
outlook.live.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.outlook.com	unknown	unknown	false	high
ow2.res.office365.com	unknown	unknown	false	high
e.clarity.ms	unknown	unknown	false	unknown
fpt.live.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://outlook.live.com/owa/	false		high
https://acctcdn.msftauth.net/converged_ux_v2_u77h9aLlpCTRkWpDDpAa0Q2.css?v=1	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/favicon.ico?v=2	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://www.outlook.com/owa/	false		high
https://outlook.live.com/owa/prefetch.aspx	false		high
https://acctcdn.msftauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1	false	Avira URL Cloud: safe	unknown
https://aka.ms/krs?id=UPmn92S3	false		high
https://fpt.live.com/?session_id=db89552787394da7b7dd45e72f2ba48e&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	false		high
https://outlook.live.com/owa/?nlp=1	false		high
https://acctcdn.msftauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/lightweightsignuppackage_89wF0Xwfu7FmoF_uu5VFtA2.js?v=1	false	Avira URL Cloud: safe	unknown
https://dutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==	false	Avira URL Cloud: safe	unknown
https://outlook.com/	false		high
https://acctcdn.msftauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	false	Avira URL Cloud: safe	unknown
https://outlook.office365.com/owa/prefetch.aspx?id=292841&mkt=EN-US	false		high
https://mem.gfx.ms/scripts/me/MeControl/10.22108.2/de-DE/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://lmo.universaliogic.com/?username=svc@stonergroup.com	false	Avira URL Cloud: safe	unknown
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://mem.gfx.ms/meversion?partner=mshomepage&market=de-ch&uhf=1	false	Avira URL Cloud: safe	unknown
https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015&lic=1&uaid=db89552787394da7b7dd45e72f2ba48e	false		high
https://acctcdn.msftauth.net/lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.22108.2/de-DE/meBoot.min.js	false	Avira URL Cloud: safe	unknown
https://via.placeholder.com/1.gif	false		high
https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==	false		unknown
https://aka.ms/krs?id=tQtJq38l	false		high
https://outlook.live.com/owa/?nlp=1&signup=1	false		high
https://outlook.live.com/owa/	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.215.238	clients.l.google.com	United States	15169	GOOGLEUS	false
172.67.31.203	via.placeholder.com	United States	13335	CLOUDFLARENETUS	false
23.63.126.201	aka.ms	United States	16625	AKAMAI-ASUS	false
13.107.246.60	part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.96.223.2	outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.98.213.162	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
3.65.100.84	e.targito.com	United States	16509	AMAZON-02US	false
31.22.4.109	dutarayamakmur.net	United Kingdom	34119	WILDCARD-ASWildcardUKLimitedGB	false
190.123.44.208	lmo.universaliogic.com	Panama	265540	ALTANREDESSAPIdeCVMX	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.185	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
52.98.213.194	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
52.98.175.2	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	694164
Start date and time:	2022-08-31 16:44:09 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@45/0@27/18
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://go.microsoft.com/fwlink/?linkid=2087918 Browse: https://go.microsoft.com/fwlink/?linkid=2087917 Browse: https://outlook.live.com/owa/?nlp=1 Browse: https://outlook.live.com/owa/?nlp=1&signup=1 Browse: https://www.microsoft.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, RuntimeBroker.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115, 142.250.203.99, 34.104.35.123, 152.199.19.160, 23.35.236.113, 23.96.225.71, 104.212.67.245, 20.62.48.180, 142.250.203.106, 2.19.74.22, 23.211.5.92, 20.150.87.100, 20.150.87.68, 20.150.78.4, 23.35.237.160, 20.190.159.1, 40.126.31.72, 40.126.31.68, 20.190.159.74, 20.190.159.72, 40.126.31.70, 20.190.159.22, 20.190.159.70, 13.107.42.22, 172.217.168.42, 52.167.30.171, 20.189.173.4, 104.43.200.36, 80.67.82.51, 80.67.82.19, 80.67.82.211, 80.67.82.235, 80.67.82.240, 80.67.82.234, 20.234.34.18, 51.132.193.104
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, krsprod.blob.core.windows.net, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, eudb.ris.api.iris.microsoft.com, onedscolprduks02.uksouth.cloudapp.azure.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, global-geo-afdthirdparty-unicast.trafficmanager.net, browser.events.data.trafficmanager.net, www.tm.a.prd.aadg.trafficmanager.net, e11290.dspg.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, star-azurefd-prod.trafficmanager.net, login.live.com, update.googleapis.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, global-entry-afdthirdparty-fallback.trafficmanager.net, ris-prod-eudb.trafficmanager.net, san-ion.secure4.scene7.com.edgekey.net, fpt2.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, a1835.g2.akamai.net, krs.microsoft.com, lgincdnvzeuno.ec.azureedge.net, web.vortex.data.trafficmanager.net, c-s.cms.ms.akadns.net, extended-web-vorte
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 16:45:30.519020081 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:30.519048929 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:30.519119024 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:30.519437075 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.519480944 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.519561052 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.519857883 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:30.519869089 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:30.520092964 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.520123005 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.575701952 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.576400042 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.576431990 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.576781034 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.576869011 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.577583075 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:30.577651024 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:30.585093975 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:30.595086098 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:30.595103979 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:30.596365929 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:30.596450090 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:30.826257944 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.826297045 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.826384068 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.826802969 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.826817989 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.827300072 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.827326059 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.827409983 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.827640057 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.827650070 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.901774883 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.909607887 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.913755894 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.913789034 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.913943052 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.913966894 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.915098906 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.915194035 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:30.915687084 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:30.915740967 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.000272036 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:31.000473022 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.000577927 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:31.000595093 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.000758886 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.001027107 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.001102924 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:31.001271963 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.001472950 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.001734972 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.002028942 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.002069950 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.002468109 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:31.002507925 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.036933899 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.037024021 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.037373066 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.037456036 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:31.037475109 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.037570000 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.037633896 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:31.040011883 CEST	49722	443	192.168.2.5	216.58.215.238
Aug 31, 2022 16:45:31.040039062 CEST	443	49722	216.58.215.238	192.168.2.5
Aug 31, 2022 16:45:31.063539028 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.063554049 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.076754093 CEST	49725	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.076798916 CEST	443	49725	3.65.100.84	192.168.2.5
Aug 31, 2022 16:45:31.077105045 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.077183008 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:31.077208996 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.077234030 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.077325106 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:31.083739996 CEST	49721	443	192.168.2.5	142.250.203.109
Aug 31, 2022 16:45:31.083772898 CEST	443	49721	142.250.203.109	192.168.2.5
Aug 31, 2022 16:45:31.166188955 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:45:31.198928118 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.198996067 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.199079990 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.199328899 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.199347019 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.308836937 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.311028004 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.311073065 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.312207937 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.312318087 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.315712929 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.315838099 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.316406965 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.316431999 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.388232946 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.498051882 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.498236895 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:31.498375893 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.844850063 CEST	49726	443	192.168.2.5	31.22.4.109
Aug 31, 2022 16:45:31.844899893 CEST	443	49726	31.22.4.109	192.168.2.5
Aug 31, 2022 16:45:33.445002079 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.445043087 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.445125103 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.445547104 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.445561886 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.446033955 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.446074009 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.446167946 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.446438074 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.446460009 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.522927999 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.522999048 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.523472071 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.523524046 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.523539066 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.578228951 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.584770918 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.584831953 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.585961103 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.586683989 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.589302063 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.589521885 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.663430929 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.663474083 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:33.763437033 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:33.817305088 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.817703009 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.817732096 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.818802118 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.818969011 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.821863890 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.821886063 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.821896076 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.821964025 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.825140953 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.830568075 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.830580950 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.831799030 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.831887007 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.834881067 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.834986925 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.888362885 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.888401031 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.888437986 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.888452053 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:33.988401890 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:33.988404989 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:34.722800016 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:34.722987890 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:34.723051071 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:34.726969957 CEST	49731	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:45:34.727003098 CEST	443	49731	190.123.44.208	192.168.2.5
Aug 31, 2022 16:45:34.752816916 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:34.752880096 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:34.752979040 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:34.753290892 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:34.753319025 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.142545938 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.146697044 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.146728039 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.148353100 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.148479939 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.148494005 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.148552895 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.154098034 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.154222965 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.154479027 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.154493093 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.277188063 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.277350903 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.287122011 CEST	49735	443	192.168.2.5	52.96.223.2
Aug 31, 2022 16:45:35.287173986 CEST	443	49735	52.96.223.2	192.168.2.5
Aug 31, 2022 16:45:35.312719107 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.312788010 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.312895060 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.313165903 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.313195944 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.409786940 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.410379887 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.410439014 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.413301945 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.413429022 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.413458109 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.413525105 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.415376902 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.415621996 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.415626049 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.445507050 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.445648909 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.446577072 CEST	49736	443	192.168.2.5	52.98.213.162
Aug 31, 2022 16:45:35.446597099 CEST	443	49736	52.98.213.162	192.168.2.5
Aug 31, 2022 16:45:35.520641088 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.520704031 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.520884991 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.521589994 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.521641970 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.618766069 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.619216919 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.619277954 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.621495008 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.621658087 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.621680021 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.621830940 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.623792887 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.623908043 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.624134064 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.667404890 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.688672066 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.688714981 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720225096 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720273018 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720288992 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720320940 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720334053 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720535994 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.720587015 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720642090 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.720685005 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.720699072 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747077942 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747103930 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747133970 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747163057 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747181892 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747200966 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747309923 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747358084 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747402906 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747453928 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747462988 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747484922 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747595072 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747613907 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747627974 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747649908 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:35.747701883 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.747713089 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.830354929 CEST	49737	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:35.830389977 CEST	443	49737	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.568584919 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.568651915 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.568764925 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.569011927 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.569030046 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.669425964 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.669780016 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.669814110 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.670640945 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.671096087 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.671329975 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.671475887 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.715399027 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.749789953 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.749835968 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.749919891 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.749946117 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.749968052 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:36.750003099 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.750034094 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.756488085 CEST	49764	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:45:36.756526947 CEST	443	49764	52.98.213.194	192.168.2.5
Aug 31, 2022 16:45:43.590116024 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:43.590276957 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:45:43.590368032 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:44.658961058 CEST	49733	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:45:44.659018993 CEST	443	49733	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:07.155594110 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.155644894 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.155738115 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.156495094 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.156507969 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.234492064 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.238528013 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.238548994 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.239681005 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.239774942 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.250083923 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.250179052 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.250478029 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.250498056 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.291918039 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.323635101 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.323724985 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.323925018 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.325834036 CEST	49849	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:07.325859070 CEST	443	49849	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:07.373922110 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.373964071 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.374052048 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.374340057 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.374360085 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.464833975 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.479228973 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.479259968 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.480468035 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.480559111 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.487653971 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.487756014 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.494450092 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:07.494483948 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:07.569022894 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.251440048 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.251466990 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.251578093 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.251656055 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.251754999 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.325308084 CEST	49851	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.325347900 CEST	443	49851	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.356908083 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.356955051 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.357074022 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.357409954 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.357430935 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.463511944 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.464447021 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.464514017 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.464843035 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.465569973 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.465681076 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.466212988 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.507373095 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.517513037 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.517560959 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.517693043 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.518110037 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.518124104 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.518996954 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.519053936 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.519169092 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.519475937 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.519499063 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.603300095 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.605602026 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.605637074 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.606020927 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.606612921 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.606710911 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.607016087 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.633740902 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.637531042 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.637558937 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.638081074 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.638546944 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.638641119 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.639004946 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:08.651376963 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:08.679384947 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036019087 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036048889 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036142111 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036180973 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.036190033 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036235094 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.036264896 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.036401033 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.045555115 CEST	49857	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.045598030 CEST	443	49857	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.119911909 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.119941950 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.120007038 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.120115042 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.120126009 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.120143890 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.120177984 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.120209932 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.207628012 CEST	49858	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.207664967 CEST	443	49858	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.214001894 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.214127064 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:09.214210987 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.240773916 CEST	49855	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:09.240820885 CEST	443	49855	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.081554890 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:46:16.081573963 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:46:16.547708035 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.547746897 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.547844887 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.548166037 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.548173904 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.632042885 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.651416063 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.651447058 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.651990891 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.653453112 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.653621912 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.654762030 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.699387074 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.729942083 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.730036020 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.730119944 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.738486052 CEST	49872	443	192.168.2.5	23.63.126.201
Aug 31, 2022 16:46:16.738524914 CEST	443	49872	23.63.126.201	192.168.2.5
Aug 31, 2022 16:46:16.747801065 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.747842073 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.747910976 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.748415947 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.748435020 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.835139990 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.848701954 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.848726988 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.849251032 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.874907970 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.875125885 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:16.876202106 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:16.919389009 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:17.333435059 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:17.333467007 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:17.333570957 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:17.333650112 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:17.333709955 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:17.420954943 CEST	49875	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:46:17.420996904 CEST	443	49875	13.107.246.60	192.168.2.5
Aug 31, 2022 16:46:18.892285109 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:46:18.892317057 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:46:23.539123058 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.539192915 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.539360046 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.545605898 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.545631886 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.550741911 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.550789118 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.550888062 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.551845074 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.551861048 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.646271944 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.646919012 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.693167925 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.729454994 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.729486942 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.729760885 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.729854107 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.730377913 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.730845928 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.732454062 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.732728958 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.733855963 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.734102011 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.734425068 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.774595976 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.774641037 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.774732113 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.774743080 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.774756908 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.774818897 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.827915907 CEST	49890	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:23.827950954 CEST	443	49890	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.947402954 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:23.947514057 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:26.022583008 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.022639036 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.022756100 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.023524046 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.023565054 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.023653984 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.024055958 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.024075031 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.024739027 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.024749041 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.026031971 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.026056051 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.026129961 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.040129900 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.040158033 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.041224003 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.041279078 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.041373014 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.041686058 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.041702986 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.088901043 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.094906092 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.097024918 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.104528904 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.107564926 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.107593060 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.107806921 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.107836008 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.108484030 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.108494043 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.108724117 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.108751059 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.109908104 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.109925032 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.110050917 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.111937046 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.112546921 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.112592936 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.112629890 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.112680912 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.128900051 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.131031990 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.131311893 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.131480932 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.131485939 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.131752014 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.131907940 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.133865118 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.136401892 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.136437893 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.156793118 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.156810999 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157030106 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.157049894 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157063007 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157093048 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157115936 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157144070 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157211065 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.157218933 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.157264948 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174302101 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174334049 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174443960 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174470901 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174508095 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174525023 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174581051 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174607992 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174619913 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174627066 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174647093 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174679041 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174684048 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.174710035 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.174737930 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.192047119 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192095995 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192189932 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192229033 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192279100 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.192300081 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192349911 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.192404032 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.192442894 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.193325996 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.193347931 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:26.207176924 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.277765989 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.277806997 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.277885914 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.277914047 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:26.293385983 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:26.474400997 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:26.478017092 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:28.929757118 CEST	49893	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.929790974 CEST	443	49893	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.970324039 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.990926027 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991086006 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991106033 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991144896 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991175890 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991185904 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991203070 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991235018 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991255045 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991275072 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991288900 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991313934 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991517067 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991538048 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991569042 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991589069 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991600037 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991620064 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991636038 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991647959 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991663933 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991677046 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991687059 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991714001 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991777897 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991841078 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991856098 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991908073 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:28.991925001 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:28.991986990 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.015836954 CEST	49895	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.015868902 CEST	443	49895	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.035378933 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.035438061 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.035569906 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.038671017 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.038693905 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.099834919 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.100336075 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.100387096 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.100693941 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.101396084 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.101489067 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.102004051 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.138895988 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.138998032 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139018059 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139081955 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.139113903 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139193058 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.139202118 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.139282942 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139307022 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139414072 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.139429092 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.139441013 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.158647060 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.158674955 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.158854008 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.158875942 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.158900976 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.158957005 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.158991098 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159014940 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159188032 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159210920 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159282923 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159298897 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159317017 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159322023 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159344912 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159383059 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159403086 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.159416914 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159461975 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.159538984 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.178637028 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.178678036 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.178787947 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.178822041 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.178841114 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.178879976 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.178904057 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.178911924 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179105997 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179135084 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179204941 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179223061 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179241896 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179406881 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179440975 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179492950 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179507017 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179524899 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179697990 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179723978 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179814100 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.179828882 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.179847002 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180048943 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180074930 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180136919 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180151939 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180170059 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180373907 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180404902 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180474997 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180490017 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180519104 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180640936 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180670023 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180764914 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.180778980 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.180805922 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.185667038 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.199887991 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.199917078 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200002909 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200031042 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200047970 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200210094 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200232983 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200314045 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200329065 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200345993 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200491905 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200515985 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200575113 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200593948 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200607061 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200818062 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200840950 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200895071 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.200908899 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.200923920 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201119900 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201145887 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201204062 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201215982 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201230049 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201447964 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201474905 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201546907 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201564074 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201579094 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201761007 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201783895 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201847076 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.201877117 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.201889992 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.202090025 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202115059 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202248096 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.202264071 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202466011 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202490091 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202550888 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.202564001 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202578068 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.202584982 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202661037 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.202672958 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202688932 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.202754974 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.215509892 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.232120991 CEST	49898	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.232177973 CEST	443	49898	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.654850960 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.654902935 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.655008078 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.655528069 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.655543089 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.657318115 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.657362938 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.657453060 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.657702923 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.657721043 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.713663101 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.714556932 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.770359993 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.770390987 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.771583080 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.771606922 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.771627903 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.771640062 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.771725893 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.772607088 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.779481888 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.779772997 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.780112028 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.798513889 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798619986 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798629045 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798669100 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798710108 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798742056 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.798774958 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.798794031 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.798835993 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.799015045 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.799042940 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.799078941 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.799083948 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.799108028 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.799134016 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.816339016 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.816376925 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.816488028 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.816521883 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.816634893 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.816922903 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.816950083 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:29.817488909 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.893625021 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.893666029 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.966881990 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:29.967472076 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.967688084 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.967983961 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.967999935 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.993716002 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.993750095 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.993880987 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:29.993902922 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.997917891 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:29.998008013 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:30.112864971 CEST	49903	443	192.168.2.5	52.98.175.2
Aug 31, 2022 16:46:30.112900972 CEST	443	49903	52.98.175.2	192.168.2.5
Aug 31, 2022 16:46:30.177877903 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.177923918 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.178014040 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.179939032 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.179968119 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.182796001 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.182836056 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.182979107 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.183269978 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.183286905 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.184760094 CEST	49904	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.184788942 CEST	443	49904	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.236169100 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.245069027 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.245111942 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.245470047 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.245656013 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.246596098 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.246623993 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.247140884 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.247260094 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.247456074 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.247801065 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.247925997 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.248363018 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.248908043 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.270497084 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.270548105 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.270610094 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.270631075 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.270663023 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.283927917 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.283982038 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.284056902 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.284101963 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.284128904 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.462981939 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.463031054 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.463120937 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.464117050 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.464137077 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.524657965 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.535260916 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.535301924 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.535870075 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.536395073 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.536535025 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.536576986 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.563338995 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.563457012 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.563508987 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.563553095 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.585938931 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.585983038 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.586086988 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.586309910 CEST	49905	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.586344004 CEST	443	49905	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.587290049 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.587315083 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.654634953 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.674299002 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.674321890 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.674809933 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.676019907 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.676120043 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.676223040 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.679927111 CEST	49906	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.679953098 CEST	443	49906	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.680628061 CEST	49907	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.680639029 CEST	443	49907	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.699595928 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.699659109 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.699748993 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.699877024 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.758492947 CEST	49909	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:30.758550882 CEST	443	49909	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:30.862207890 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:46:30.862375975 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:46:30.862514973 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:46:31.198177099 CEST	49724	443	192.168.2.5	3.65.100.84
Aug 31, 2022 16:46:31.198211908 CEST	443	49724	3.65.100.84	192.168.2.5
Aug 31, 2022 16:46:31.200953007 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.201009989 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.201102018 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.201489925 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.201518059 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.256180048 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.259100914 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.259159088 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.259524107 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.261101961 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.261207104 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.261244059 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.290963888 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.290992975 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.291213036 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.291271925 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.291306973 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.291413069 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.291428089 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.356698036 CEST	49913	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.356745005 CEST	443	49913	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.558979034 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559011936 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.559087992 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559092999 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559119940 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.559179068 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559787035 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559811115 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.559823036 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.559839010 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.617602110 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.617758989 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.620142937 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.620276928 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.642530918 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.642575979 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.643024921 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.643134117 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.644335032 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.644435883 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.644753933 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.644829988 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.644890070 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.645364046 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663268089 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663369894 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663397074 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663479090 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663531065 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663542986 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663613081 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663785934 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663866043 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663904905 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.663965940 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.663975954 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.664011002 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.664020061 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.664057016 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.686975002 CEST	49917	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.687011957 CEST	443	49917	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.768630028 CEST	49916	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.768666983 CEST	443	49916	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.774904013 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.774957895 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.775036097 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.792716026 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.792756081 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.847901106 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.848242044 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.874706984 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.874737024 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.876509905 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.876522064 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.894840956 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.894906998 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.894937038 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.894958973 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.894968987 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.894975901 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.895010948 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.895035028 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.909993887 CEST	49918	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.910032988 CEST	443	49918	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.924925089 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.924984932 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.925086975 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.925282001 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:31.925311089 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.988706112 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:31.988893986 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.036035061 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.036060095 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:32.057763100 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.057787895 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:32.078779936 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:32.078834057 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:32.078901052 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:32.078905106 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.078953028 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.078967094 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.106893063 CEST	49919	443	192.168.2.5	192.229.221.185
Aug 31, 2022 16:46:32.106934071 CEST	443	49919	192.229.221.185	192.168.2.5
Aug 31, 2022 16:46:33.479903936 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.479974031 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.480454922 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.480488062 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.480501890 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.531785011 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.595483065 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.597167969 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.597196102 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.597805977 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.605278969 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.605734110 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:33.694566011 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:33.700681925 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.700720072 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.700941086 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.704710960 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.704737902 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.710603952 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.751406908 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.766042948 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.766093016 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.766216040 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.766275883 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.766318083 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.802172899 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.831067085 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.831089020 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.831636906 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.832212925 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:33.832355022 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:33.834451914 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:46:33.834525108 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:46:33.834583044 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:46:33.893959999 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:34.020525932 CEST	49889	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:46:34.020567894 CEST	443	49889	52.98.213.194	192.168.2.5
Aug 31, 2022 16:46:34.026562929 CEST	49732	443	192.168.2.5	190.123.44.208
Aug 31, 2022 16:46:34.026597977 CEST	443	49732	190.123.44.208	192.168.2.5
Aug 31, 2022 16:46:37.897725105 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.898617983 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.898659945 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.898761988 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.898981094 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.899003029 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.899671078 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.899693966 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.899753094 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.899920940 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.899931908 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.900794983 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.900849104 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.900921106 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.901082993 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.901098013 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.901901007 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.901932001 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.901993036 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.902131081 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.902148008 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916354895 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916481972 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916503906 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916528940 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916547060 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916560888 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916570902 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916619062 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916627884 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916650057 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916656971 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916670084 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916742086 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916754007 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916779041 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916789055 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916800976 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916811943 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916824102 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916831970 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916848898 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.916856050 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.916876078 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934201002 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934252024 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934353113 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934372902 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934382915 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934417009 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934421062 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934431076 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934448004 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934463024 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934474945 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934504032 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934513092 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934524059 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934539080 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934555054 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934587955 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934602976 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934632063 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934678078 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934689045 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934722900 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934739113 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934741020 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934786081 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934794903 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.934806108 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.934843063 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.952128887 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.952261925 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.952305079 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.952389956 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.952439070 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:37.954133987 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.955635071 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.956384897 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:37.960021973 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.070338011 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.082384109 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.082427025 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.082624912 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.082659006 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.082906961 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.082963943 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.083053112 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.083149910 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.083179951 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.083677053 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.083865881 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.083884001 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.084027052 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.084114075 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.084131002 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.084247112 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.084814072 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.085006952 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.085017920 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.085067034 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.085674047 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.085764885 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.086268902 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.086390018 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.086805105 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.086954117 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.087014914 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.087038040 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.087088108 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.087111950 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.087167978 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105560064 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105576038 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105588913 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105601072 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105665922 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105679989 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105690002 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105710983 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105741024 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105756998 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105767012 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105782986 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105786085 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105803013 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105807066 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105814934 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105829000 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105833054 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105846882 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105882883 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105887890 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105889082 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105894089 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105901957 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105938911 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105957985 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105977058 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.105984926 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.105988979 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106055975 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106077909 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106153011 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106161118 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106182098 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106189013 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106201887 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106211901 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106240988 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106267929 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106303930 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106364965 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106374979 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106394053 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106405973 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106447935 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106465101 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.106484890 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.106513023 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.107811928 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.108983994 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109004021 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109061003 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109083891 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109122992 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.109148979 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109168053 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109194040 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109203100 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.109204054 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109226942 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.109231949 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.109267950 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123239994 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123262882 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123373985 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123414040 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123433113 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123456001 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123481989 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123485088 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123492956 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123519897 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123590946 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123605013 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123619080 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123622894 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123639107 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123640060 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123683929 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123684883 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123701096 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123727083 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123739958 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123744965 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123769999 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123795033 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123807907 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123809099 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123819113 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123872042 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123894930 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123914957 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123928070 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123928070 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.123940945 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.123999119 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.141590118 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141675949 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141843081 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.141895056 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141928911 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141942978 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.141974926 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141990900 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.141992092 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142011881 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142029047 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142056942 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142112017 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142112017 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142128944 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142153978 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142191887 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142205000 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142222881 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142252922 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142271042 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142319918 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142333984 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142359018 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142411947 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142432928 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142481089 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142501116 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142534971 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142555952 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.142580032 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.142612934 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.429766893 CEST	49896	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.429815054 CEST	443	49896	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.479459047 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.479754925 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.496877909 CEST	49932	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.496937037 CEST	443	49932	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.517487049 CEST	49930	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.517528057 CEST	443	49930	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.519161940 CEST	49931	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.519196033 CEST	443	49931	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.578536987 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.578593016 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.578708887 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.579016924 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.579044104 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.579729080 CEST	49929	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.579792023 CEST	443	49929	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.634547949 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.639574051 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.639612913 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.640934944 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.641083002 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.641801119 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.642039061 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.642050982 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.643512964 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.671931982 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.672038078 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:38.672096968 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.672158957 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.715528965 CEST	49936	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:38.715593100 CEST	443	49936	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.150587082 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.150646925 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.150743961 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.151133060 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.151159048 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.210175991 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.211963892 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.212023973 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.212652922 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.219461918 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.219667912 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.219683886 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.247077942 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.247169971 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.269176006 CEST	49938	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.269228935 CEST	443	49938	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.376929998 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.376995087 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.377145052 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.377490044 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.377507925 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.385946989 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.386007071 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.386106968 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.386404037 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.386424065 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.439194918 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.439604044 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.439640045 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.440259933 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.440802097 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.440973997 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.440985918 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.441011906 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.441343069 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.441730976 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.441768885 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.442183018 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.442958117 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.443085909 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.443228960 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.447114944 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.447149992 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.447238922 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.448935032 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.448959112 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.449894905 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.449932098 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.450001955 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.450252056 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.450278044 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477452993 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477489948 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477638960 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.477665901 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477683067 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477754116 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.477787018 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477845907 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477863073 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.477864027 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477884054 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477904081 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477905989 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.477930069 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.477941990 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.477960110 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.478020906 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.478043079 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.478060007 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.478116035 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.481560946 CEST	49941	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.481587887 CEST	443	49941	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496618032 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496660948 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496733904 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.496751070 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496815920 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.496822119 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496864080 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.496891975 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496920109 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.496973991 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.496984005 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.497020960 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.497035027 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.497040033 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.497071981 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.497087955 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.497123003 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.497128010 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.497176886 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.497199059 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.503032923 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.506676912 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.515924931 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.516019106 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.516030073 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.516093016 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.568994045 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.569029093 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.569397926 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.569436073 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.569612026 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.569768906 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.570640087 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.570782900 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.571115971 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.571232080 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.573828936 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.573894978 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.579309940 CEST	49940	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.579370022 CEST	443	49940	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592309952 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592418909 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592436075 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592500925 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592562914 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.592566967 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592617989 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.592622995 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.592645884 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.592691898 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.593288898 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593303919 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593359947 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593373060 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593375921 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593432903 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.593460083 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.593476057 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.593540907 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.597203970 CEST	49946	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.597235918 CEST	443	49946	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:39.597907066 CEST	49945	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:39.597929001 CEST	443	49945	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.497155905 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497186899 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.497302055 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497361898 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497428894 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.497504950 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497848034 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497867107 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.497909069 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.497937918 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.554280043 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.554459095 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.559768915 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.559947014 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.600241899 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.600280046 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.600903034 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.601002932 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.644447088 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.653482914 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.653527021 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.654067993 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.654190063 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.654867887 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.663975000 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664175034 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.664282084 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664310932 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664422989 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.664462090 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664678097 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.664714098 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664798021 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.664830923 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.664908886 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.668862104 CEST	49959	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.668910980 CEST	443	49959	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.669248104 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.669282913 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.669361115 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.669574976 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.669589996 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.677328110 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.677426100 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.677524090 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.677535057 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.677560091 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.677598953 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.695421934 CEST	49960	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.695461035 CEST	443	49960	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.696037054 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.696079969 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.696151972 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.696350098 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.696376085 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.725393057 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.725507021 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.726201057 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.726217985 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.728404999 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.728416920 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.752413988 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.752612114 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.759284019 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.759429932 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.759449005 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.759506941 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.787709951 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.787740946 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.797765017 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.797782898 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.799979925 CEST	49963	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.800012112 CEST	443	49963	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.816184044 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.816230059 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.816284895 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:41.816298962 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.816315889 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.816325903 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.820492029 CEST	49964	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:46:41.820518970 CEST	443	49964	152.199.21.175	192.168.2.5
Aug 31, 2022 16:46:43.533381939 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:43.533500910 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:46:43.533581018 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:43.904736996 CEST	49923	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:46:43.904771090 CEST	443	49923	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:11.371786118 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:47:11.371830940 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:47:18.897813082 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:47:18.897847891 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:47:24.616952896 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.617006063 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.617360115 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.617392063 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.617443085 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.617713928 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.617990971 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.618006945 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.618237972 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.618257046 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.665421963 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.698498011 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.698529005 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.700565100 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.700712919 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.703649044 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.703854084 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.703923941 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.720956087 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.722126961 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.722142935 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.725790977 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.726735115 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.729425907 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.729687929 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.732079983 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.732095957 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.751369953 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.767009974 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.767091036 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.767743111 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.767756939 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.767766953 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.767815113 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.767823935 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.768714905 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.769686937 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.794491053 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794603109 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794689894 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794763088 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794769049 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.794780016 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794845104 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.794897079 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.795722008 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.796722889 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.796731949 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.797727108 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.801568031 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.801620960 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.801712036 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.801927090 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.801943064 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822093964 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822190046 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822248936 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822334051 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822465897 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.822746992 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.822757959 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.823739052 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.823746920 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.824724913 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.825730085 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.826766014 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.849951029 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.850025892 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.850092888 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.850234985 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.850354910 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.850738049 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.850750923 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.851720095 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.851726055 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.851860046 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.852718115 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.852726936 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.853717089 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.853724003 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.854718924 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.854726076 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.855709076 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.855715036 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.856703997 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.856709957 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.856719971 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.857705116 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.858710051 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.859711885 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.872754097 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.872787952 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.887893915 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.905642033 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.905687094 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.905906916 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.907671928 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.908718109 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.918452978 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.918678045 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.918692112 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.918719053 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.928529978 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.928831100 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.928898096 CEST	443	50043	172.67.31.203	192.168.2.5
Aug 31, 2022 16:47:24.930727959 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.930752993 CEST	50043	443	192.168.2.5	172.67.31.203
Aug 31, 2022 16:47:24.931636095 CEST	50044	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.931654930 CEST	443	50044	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:24.997765064 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:24.997801065 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070307970 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070338964 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070385933 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070408106 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070427895 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.070923090 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:25.070965052 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.071005106 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.072371006 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:25.095669985 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.095693111 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.095715046 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.095725060 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.095748901 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.095844984 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:25.096133947 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:25.096163034 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:25.107498884 CEST	50046	443	192.168.2.5	13.107.246.60
Aug 31, 2022 16:47:25.107541084 CEST	443	50046	13.107.246.60	192.168.2.5
Aug 31, 2022 16:47:26.211287975 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:47:26.211633921 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:47:26.211680889 CEST	443	49894	152.199.21.175	192.168.2.5
Aug 31, 2022 16:47:26.211853027 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:47:26.211883068 CEST	49894	443	192.168.2.5	152.199.21.175
Aug 31, 2022 16:47:33.538580894 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:33.538624048 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.538722038 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:33.538968086 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:33.538990974 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.589453936 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.590210915 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:33.590236902 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.590723038 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.591770887 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:33.591902018 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:33.698368073 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:34.331280947 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:47:34.331569910 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:47:34.331625938 CEST	443	49924	52.98.213.194	192.168.2.5
Aug 31, 2022 16:47:34.331726074 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:47:34.331738949 CEST	49924	443	192.168.2.5	52.98.213.194
Aug 31, 2022 16:47:43.631534100 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:43.631671906 CEST	443	50081	142.250.203.100	192.168.2.5
Aug 31, 2022 16:47:43.634862900 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:47.940037966 CEST	50081	443	192.168.2.5	142.250.203.100
Aug 31, 2022 16:47:47.940087080 CEST	443	50081	142.250.203.100	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 16:45:30.492986917 CEST	55039	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:30.493383884 CEST	60975	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:30.512698889 CEST	53	60975	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:30.513089895 CEST	53	55039	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:30.694276094 CEST	55068	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:30.721020937 CEST	53	55068	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:31.086973906 CEST	56682	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:31.190097094 CEST	53	56682	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:32.772854090 CEST	58581	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:32.802855015 CEST	53	58581	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:33.442691088 CEST	65513	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:33.460781097 CEST	53	65513	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:34.732597113 CEST	64419	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:34.751600027 CEST	53	64419	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:35.291950941 CEST	52688	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:35.311547041 CEST	53	52688	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:35.500288963 CEST	61344	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:35.518048048 CEST	53	61344	8.8.8.8	192.168.2.5
Aug 31, 2022 16:45:35.832967043 CEST	58472	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:36.172003984 CEST	60284	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:38.009517908 CEST	53823	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:39.514758110 CEST	49579	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:45:53.617933989 CEST	65493	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:07.027081013 CEST	65330	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:07.046495914 CEST	53	65330	8.8.8.8	192.168.2.5
Aug 31, 2022 16:46:10.000444889 CEST	59862	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:16.019061089 CEST	55726	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:25.360312939 CEST	49261	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:29.510719061 CEST	60187	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:29.527863026 CEST	53	60187	8.8.8.8	192.168.2.5
Aug 31, 2022 16:46:30.559169054 CEST	60582	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:40.608901024 CEST	60870	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:40.681893110 CEST	57508	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:46:41.468055010 CEST	63957	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:47:13.830327988 CEST	56967	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:47:24.534537077 CEST	56057	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:47:24.556298971 CEST	53	56057	8.8.8.8	192.168.2.5
Aug 31, 2022 16:47:24.722651005 CEST	61204	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:47:33.517529964 CEST	63102	53	192.168.2.5	8.8.8.8
Aug 31, 2022 16:47:33.537292004 CEST	53	63102	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 31, 2022 16:45:30.492986917 CEST	192.168.2.5	8.8.8.8	0x24e9	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.493383884 CEST	192.168.2.5	8.8.8.8	0x5960	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.694276094 CEST	192.168.2.5	8.8.8.8	0x17f5	Standard query (0)	e.targito.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:31.086973906 CEST	192.168.2.5	8.8.8.8	0xf6cb	Standard query (0)	dutarayamakmur.net	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:32.772854090 CEST	192.168.2.5	8.8.8.8	0x3000	Standard query (0)	lmo.universaliogic.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:33.442691088 CEST	192.168.2.5	8.8.8.8	0x6c65	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.732597113 CEST	192.168.2.5	8.8.8.8	0xb839	Standard query (0)	outlook.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.291950941 CEST	192.168.2.5	8.8.8.8	0x29f0	Standard query (0)	www.outlook.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.500288963 CEST	192.168.2.5	8.8.8.8	0xd417	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.832967043 CEST	192.168.2.5	8.8.8.8	0x50de	Standard query (0)	ow2.res.office365.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:36.172003984 CEST	192.168.2.5	8.8.8.8	0x65e0	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:38.009517908 CEST	192.168.2.5	8.8.8.8	0x44af	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:39.514758110 CEST	192.168.2.5	8.8.8.8	0x807d	Standard query (0)	e.clarity.ms	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:53.617933989 CEST	192.168.2.5	8.8.8.8	0x8b2a	Standard query (0)	ow2.res.office365.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:07.027081013 CEST	192.168.2.5	8.8.8.8	0xecab	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:10.000444889 CEST	192.168.2.5	8.8.8.8	0x4602	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:16.019061089 CEST	192.168.2.5	8.8.8.8	0x47b1	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:25.360312939 CEST	192.168.2.5	8.8.8.8	0x32af	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:29.510719061 CEST	192.168.2.5	8.8.8.8	0xcf21	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:30.559169054 CEST	192.168.2.5	8.8.8.8	0xdba1	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:40.608901024 CEST	192.168.2.5	8.8.8.8	0xcca0	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:40.681893110 CEST	192.168.2.5	8.8.8.8	0x61e4	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:41.468055010 CEST	192.168.2.5	8.8.8.8	0x2e43	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:13.830327988 CEST	192.168.2.5	8.8.8.8	0xafe	Standard query (0)	e.clarity.ms	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.534537077 CEST	192.168.2.5	8.8.8.8	0x3c82	Standard query (0)	via.placeholder.com	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.722651005 CEST	192.168.2.5	8.8.8.8	0x4761	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:33.517529964 CEST	192.168.2.5	8.8.8.8	0x1cf7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 31, 2022 16:45:30.512698889 CEST	8.8.8.8	192.168.2.5	0x5960	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.513089895 CEST	8.8.8.8	192.168.2.5	0x24e9	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:30.513089895 CEST	8.8.8.8	192.168.2.5	0x24e9	No error (0)	clients.l.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.721020937 CEST	8.8.8.8	192.168.2.5	0x17f5	No error (0)	e.targito.com		3.65.100.84	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.721020937 CEST	8.8.8.8	192.168.2.5	0x17f5	No error (0)	e.targito.com		3.123.224.219	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:30.721020937 CEST	8.8.8.8	192.168.2.5	0x17f5	No error (0)	e.targito.com		35.156.225.55	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:31.190097094 CEST	8.8.8.8	192.168.2.5	0xf6cb	No error (0)	dutarayamakmur.net		31.22.4.109	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:32.802855015 CEST	8.8.8.8	192.168.2.5	0x3000	No error (0)	lmo.universaliogic.com		190.123.44.208	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:33.460781097 CEST	8.8.8.8	192.168.2.5	0x6c65	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.223.2	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.222.194	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.229.242	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.222.226	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.111.82	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.214.50	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.228.130	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:34.751600027 CEST	8.8.8.8	192.168.2.5	0xb839	No error (0)	outlook.com		52.96.91.34	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	www.outlook.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	outlook.office365.com	outlook.ha.office365.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	outlook.ha.office365.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	FRA-efz.ms-acdc.office.com		52.98.213.162	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	FRA-efz.ms-acdc.office.com		40.101.124.2	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.311547041 CEST	8.8.8.8	192.168.2.5	0x29f0	No error (0)	FRA-efz.ms-acdc.office.com		52.97.135.82	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	outlook.live.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	outlook.office365.com	outlook.ha.office365.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	outlook.ha.office365.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	FRA-efz.ms-acdc.office.com		52.98.213.194	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	FRA-efz.ms-acdc.office.com		52.97.149.242	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.518048048 CEST	8.8.8.8	192.168.2.5	0xd417	No error (0)	FRA-efz.ms-acdc.office.com		52.97.151.82	A (IP address)	IN (0x0001)
Aug 31, 2022 16:45:35.854187965 CEST	8.8.8.8	192.168.2.5	0x50de	No error (0)	ow2.res.office365.com	ow2.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:36.194010973 CEST	8.8.8.8	192.168.2.5	0x65e0	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:36.194010973 CEST	8.8.8.8	192.168.2.5	0x65e0	No error (0)	clarity.azurefd.net	global-geo-afdthirdparty-unicast.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:38.030930996 CEST	8.8.8.8	192.168.2.5	0x44af	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:39.533898115 CEST	8.8.8.8	192.168.2.5	0x807d	No error (0)	e.clarity.ms	vmss-clarity-ingest-eus2-b.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:45:53.640131950 CEST	8.8.8.8	192.168.2.5	0x8b2a	No error (0)	ow2.res.office365.com	ow2.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:07.046495914 CEST	8.8.8.8	192.168.2.5	0xecab	No error (0)	aka.ms		23.63.126.201	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:07.355585098 CEST	8.8.8.8	192.168.2.5	0xfe6	No error (0)	kmas-prod.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:07.355585098 CEST	8.8.8.8	192.168.2.5	0xfe6	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:07.355585098 CEST	8.8.8.8	192.168.2.5	0xfe6	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:07.355585098 CEST	8.8.8.8	192.168.2.5	0xfe6	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:10.044562101 CEST	8.8.8.8	192.168.2.5	0x4602	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:16.041537046 CEST	8.8.8.8	192.168.2.5	0x47b1	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:16.141431093 CEST	8.8.8.8	192.168.2.5	0x39c7	No error (0)	kmas-prod.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:16.141431093 CEST	8.8.8.8	192.168.2.5	0x39c7	No error (0)	dual.part-0032.t-0009.t-msedge.net	global-entry-afdthirdparty-fallback.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:16.141431093 CEST	8.8.8.8	192.168.2.5	0x39c7	No error (0)	dual.part-0032.t-0009.fbs1-t-msedge.net	part-0032.t-0009.fbs1-t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:16.141431093 CEST	8.8.8.8	192.168.2.5	0x39c7	No error (0)	part-0032.t-0009.fbs1-t-msedge.net		13.107.219.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:16.141431093 CEST	8.8.8.8	192.168.2.5	0x39c7	No error (0)	part-0032.t-0009.fbs1-t-msedge.net		13.107.227.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:24.479943037 CEST	8.8.8.8	192.168.2.5	0x52f0	No error (0)	cs1227.wpc.alphacdn.net		192.229.221.185	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:25.386985064 CEST	8.8.8.8	192.168.2.5	0x32af	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:25.386985064 CEST	8.8.8.8	192.168.2.5	0x32af	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:25.386985064 CEST	8.8.8.8	192.168.2.5	0x32af	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:25.387427092 CEST	8.8.8.8	192.168.2.5	0x84af	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:25.387427092 CEST	8.8.8.8	192.168.2.5	0x84af	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.143563986 CEST	8.8.8.8	192.168.2.5	0x33d4	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:26.143563986 CEST	8.8.8.8	192.168.2.5	0x33d4	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.143563986 CEST	8.8.8.8	192.168.2.5	0x33d4	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.229623079 CEST	8.8.8.8	192.168.2.5	0xfbc2	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:26.229623079 CEST	8.8.8.8	192.168.2.5	0xfbc2	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.246177912 CEST	8.8.8.8	192.168.2.5	0xefd0	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:26.246177912 CEST	8.8.8.8	192.168.2.5	0xefd0	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.246177912 CEST	8.8.8.8	192.168.2.5	0xefd0	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:26.637288094 CEST	8.8.8.8	192.168.2.5	0x2cd9	No error (0)	cs1227.wpc.alphacdn.net		192.229.221.185	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	outlook.office365.com	outlook.ha.office365.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	outlook.ha.office365.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	HHN-efz.ms-acdc.office.com		52.98.175.2	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.18	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	HHN-efz.ms-acdc.office.com		40.99.149.210	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:29.527863026 CEST	8.8.8.8	192.168.2.5	0xcf21	No error (0)	HHN-efz.ms-acdc.office.com		52.98.171.226	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:30.577064037 CEST	8.8.8.8	192.168.2.5	0xdba1	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:31.558305025 CEST	8.8.8.8	192.168.2.5	0x501e	No error (0)	cs1227.wpc.alphacdn.net		192.229.221.185	A (IP address)	IN (0x0001)
Aug 31, 2022 16:46:40.638197899 CEST	8.8.8.8	192.168.2.5	0xcca0	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:40.706882954 CEST	8.8.8.8	192.168.2.5	0x61e4	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:41.491404057 CEST	8.8.8.8	192.168.2.5	0x2e43	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:41.491404057 CEST	8.8.8.8	192.168.2.5	0x2e43	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:46:41.491404057 CEST	8.8.8.8	192.168.2.5	0x2e43	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:13.851344109 CEST	8.8.8.8	192.168.2.5	0xafe	No error (0)	e.clarity.ms	vmss-clarity-ingest-eus2-b.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:47:24.556298971 CEST	8.8.8.8	192.168.2.5	0x3c82	No error (0)	via.placeholder.com		172.67.31.203	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.556298971 CEST	8.8.8.8	192.168.2.5	0x3c82	No error (0)	via.placeholder.com		104.22.72.89	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.556298971 CEST	8.8.8.8	192.168.2.5	0x3c82	No error (0)	via.placeholder.com		104.22.73.89	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.565354109 CEST	8.8.8.8	192.168.2.5	0xc68c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:47:24.565354109 CEST	8.8.8.8	192.168.2.5	0xc68c	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:47:24.565354109 CEST	8.8.8.8	192.168.2.5	0xc68c	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.565354109 CEST	8.8.8.8	192.168.2.5	0xc68c	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.743062019 CEST	8.8.8.8	192.168.2.5	0x4761	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:47:24.743062019 CEST	8.8.8.8	192.168.2.5	0x4761	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 16:47:24.743062019 CEST	8.8.8.8	192.168.2.5	0x4761	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:24.743062019 CEST	8.8.8.8	192.168.2.5	0x4761	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)
Aug 31, 2022 16:47:33.537292004 CEST	8.8.8.8	192.168.2.5	0x1cf7	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

accounts.google.com

e.targito.com

clients2.google.com

dutarayamakmur.net

https:

lmo.universaliogic.com

outlook.com

www.outlook.com

outlook.live.com

krs.microsoft.com

logincdn.msauth.net

outlook.office365.com

acctcdn.msftauth.net

via.placeholder.com

wcpstatic.microsoft.com

mem.gfx.ms

aka.ms

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49721	142.250.203.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:30 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:30 UTC	0	OUT	Data Raw: 20 Data Ascii:
2022-08-31 14:45:31 UTC	4	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 31 Aug 2022 14:45:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"IdentityListAccountsHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external"}]} Cross-Origin-Opener-Policy: same-origin; report-to="IdentityListAccountsHttp" Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-w7oTCVELGzdjVA1lSKwrKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-31 14:45:31 UTC	6	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-08-31 14:45:31 UTC	6	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49725	3.65.100.84	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:30 UTC	0	OUT	GET /c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ== HTTP/1.1 Host: e.targito.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:31 UTC	2	IN	HTTP/1.1 302 Found Date: Wed, 31 Aug 2022 14:45:31 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://dutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ== Set-Cookie: 7838d2ad-c0ac-4398-b6af-ea62c78427ea=ad16a225-640c-4304-9e8b-2a177b75d7a9; expires=Tue, 31 Aug 2032 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none Set-Cookie: trgid_megaknihy_cz=ad16a225-640c-4304-9e8b-2a177b75d7a9; expires=Tue, 31 Aug 2032 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none Set-Cookie: 7838d2ad-c0ac-4398-b6af-ea62c78427ea_m=e24d843c-46e0-448f-b9dc-dad648861167; expires=Thu, 01 Sep 2022 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none Set-Cookie: trgm_megaknihy_cz=e24d843c-46e0-448f-b9dc-dad648861167; expires=Thu, 01 Sep 2022 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none Set-Cookie: 7838d2ad-c0ac-4398-b6af-ea62c78427ea_d=1661194854; expires=Thu, 01 Sep 2022 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none Set-Cookie: trgd_megaknihy_cz=1661194854; expires=Thu, 01 Sep 2022 14:45:31 GMT; domain=.targito.com; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.5	49851	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:07 UTC	56	OUT	GET /redirect?id=tQtJq38l HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:46:08 UTC	56	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 Strict-Transport-Security: max-age=2592000 X-Cache: CONFIG_NOCACHE X-Azure-Ref: 0L3QPYwAAAACdnYvn6VlcRYoKyHyY0g83QlJVMzBFREdFMDcxNABlYjYwNTJmOS02NjZlLTQ1Y2QtOWMxOS00MTg2YzZlYjkwY2M= Date: Wed, 31 Aug 2022 14:46:07 GMT Connection: close
2022-08-31 14:46:08 UTC	57	IN	Data Raw: 37 39 39 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 39 35 31 39 33 37 35 39 36 2c 20 61 70 70 2d 61 72 67 75 6d 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f Data Ascii: 799<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://apps.apple.com/
2022-08-31 14:46:08 UTC	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.5	49855	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:08 UTC	59	OUT	GET /css/styles.css HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://krs.microsoft.com/redirect?id=tQtJq38l Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:46:09 UTC	74	IN	HTTP/1.1 200 OK Content-Length: 555 Content-Type: text/css Last-Modified: Wed, 10 Aug 2022 19:06:10 GMT Accept-Ranges: bytes ETag: "1d8acec40643f2b" Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 Strict-Transport-Security: max-age=2592000 X-Cache: CONFIG_NOCACHE X-Azure-Ref: 0MHQPYwAAAAARz8y1jmTHQa9bz8OvbhvlQlJVMzBFREdFMDQyMQBlYjYwNTJmOS02NjZlLTQ1Y2QtOWMxOS00MTg2YzZlYjkwY2M= Date: Wed, 31 Aug 2022 14:46:08 GMT Connection: close
2022-08-31 14:46:09 UTC	74	IN	Data Raw: ef bb bf 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 2c 53 65 67 6f 65 55 49 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 34 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 65 78 2d 72 6f 77 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: .container { font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif; margin-top: 64px; display: flex; flex-direction: column; text-align: center; align-items: center;}.flex-row { display: flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.5	49857	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:08 UTC	59	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=tQtJq38l Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:46:09 UTC	61	IN	HTTP/1.1 200 OK Content-Length: 5989 Content-Type: image/png Last-Modified: Wed, 10 Aug 2022 19:06:08 GMT Accept-Ranges: bytes ETag: "1d8acec3f330765" Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 Strict-Transport-Security: max-age=2592000 X-Cache: CONFIG_NOCACHE X-Azure-Ref: 0MHQPYwAAAACHRx/Lh6icQoM7FJtZ7K8oQlJVMzBFREdFMDcxNgBlYjYwNTJmOS02NjZlLTQ1Y2QtOWMxOS00MTg2YzZlYjkwY2M= Date: Wed, 31 Aug 2022 14:46:08 GMT Connection: close
2022-08-31 14:46:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 02 fd 50 4c 54 45 6f 6f 6f 00 00 00 5f 5f 5f 56 56 56 94 94 94 66 66 66 5c 5c 5c 8d 8d 8d 85 85 85 73 73 73 62 62 62 78 78 78 7e 7e 7e 6a 6a 6a 59 59 59 00 00 00 ff ff ff a6 a6 a6 00 f0 76 80 80 80 40 40 40 c0 c0 c0 2a 2a 2a 00 c7 ff 00 e1 ff 00 d3 ff 00 d6 ff 10 10 10 00 e0 ff 00 d1 ff dd dd dd 00 c2 ff 00 d9 ff f0 f0 f0 00 ca ff 60 60 60 00 ce ff 00 dc ff 20 20 20 00 df ff 30 30 30 00 d5 ff a0 a0 a0 00 c4 ff 00 c5 ff ee ee ee e0 e0 e0 00 c9 ff 00 d8 ff 00 cc ff fc 37 46 00 cd ff 00 db ff 00 d0 ff fe 39 45 50 50 50 f4 32 49 00 de ff f9 35 47 b0 b0 b0 f7 34 48 ff c3 00 d0 d0 d0 90 90 90 ff 3a 44 ff c9 00 ff c7 00 f0 30 4b f3 31 4a ec 2c 4e ff cb 00 a2 Data Ascii: PNGIHDR4n PLTEooo___VVVfff\\\sssbbbxxx~~~jjjYYYv@@@***``` 0007F9EPPP2I5G4H:D0K1J,N
2022-08-31 14:46:09 UTC	65	IN	Data Raw: a3 f6 1f 48 0e 2b 46 63 c9 6d fd 7d 61 c1 0b fa 4f 5a 92 38 6f 44 6a fd 9b 7f 5c 6d 1b 41 bb 2a 9e d7 06 73 a7 12 34 26 6a 76 4f 5a 54 a6 e6 8d Data Ascii: H+Fcm}aOZ8oDj\mA*s4&jvOZT
2022-08-31 14:46:09 UTC	65	IN	Data Raw: d2 cc 54 8e 86 29 ab 70 62 27 6f 92 f1 b5 6f 38 79 2f cd b2 65 4c ed b3 61 34 b6 dc be fe 1b 3e 1a 4d e0 e4 4f 63 a1 5c b5 98 5d 1b 1b ca c3 a0 54 b8 72 5f 2a 41 63 a0 66 f7 a4 49 c5 6a 26 5e f8 f6 9e 74 98 50 9e 9a 48 34 7e 7e db e9 65 3a 84 58 45 24 71 a9 67 68 a0 1c 7b 69 00 46 63 e5 6e 5f c8 ad e3 d0 c4 2e d8 fb b8 09 8f 88 8c 9c 97 93 f6 49 d2 ce 69 83 dd 6a d0 94 ab 49 cd 14 ab 79 70 ed 09 d1 82 bf 7a 42 a2 71 e4 19 0a 5c 38 27 8a 21 1b ba 13 2d 14 bb be 66 1a 42 e3 e7 4c 01 9e 2f 1b 14 1c 9a c8 29 6a 98 1d 75 1f c3 5c bc 52 48 20 77 a6 12 34 a5 6a 76 cf 9e 54 a8 e6 c1 fe 1b db 08 3e fa 48 8a ec 69 04 a0 4d bd e1 05 9f 74 0e 6f bf 58 8d a0 26 c0 06 d1 04 da 05 98 fa 3c 03 83 26 08 cb af b2 42 c6 6c db 67 c2 6b bb 38 52 c6 52 5f 93 6e 55 89 06 56 93 Data Ascii: T)pb'oo8y/eLa4>MOc\]Tr_*AcfIj&^tPH4~~e:XE$qgh{iFcn_.IijIypzBq\8'!-fBL/)ju\RH w4jvT>HiMtoX&<&Blgk8RR_nUV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.5	49858	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:08 UTC	60	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=tQtJq38l Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:46:09 UTC	67	IN	HTTP/1.1 200 OK Content-Length: 6391 Content-Type: image/png Last-Modified: Wed, 10 Aug 2022 19:06:08 GMT Accept-Ranges: bytes ETag: "1d8acec3f3308f7" Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 Strict-Transport-Security: max-age=2592000 X-Cache: CONFIG_NOCACHE X-Azure-Ref: 0MHQPYwAAAAC86XTNNAgCTIf2ExjUPv7yQlJVMzBFREdFMDQwNgBlYjYwNTJmOS02NjZlLTQ1Y2QtOWMxOS00MTg2YzZlYjkwY2M= Date: Wed, 31 Aug 2022 14:46:08 GMT Connection: close
2022-08-31 14:46:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(
2022-08-31 14:46:09 UTC	71	IN	Data Raw: 10 bb eb 3b e8 98 4e ba 17 fc 84 42 c6 13 54 f0 0e 5a 04 07 ae 50 c4 96 5f 82 27 d0 03 15 70 c4 26 6b 87 8a a9 96 a4 21 11 bc 8a 02 72 0d ab e0 Data Ascii: ;NBTZP_'p&k!r
2022-08-31 14:46:09 UTC	71	IN	Data Raw: 95 71 14 b0 24 6b a0 89 49 64 3c cc eb 2e 05 5f a3 84 9a 42 04 77 2c 82 53 57 28 e6 c4 27 c1 41 f4 40 1e 1c b1 8f 68 3c 8f 61 9b 3d bb 62 c1 67 cc 7f 39 bf 3d a5 19 3a fe 73 8b 60 66 42 8d 6c e7 23 aa 21 cf a6 c8 63 34 67 29 bd 07 32 da d1 5f f0 f0 76 18 fd 97 09 1e 9f f1 95 ce 7e 3c 1b 3e 36 1c 1e 6e 15 7c 88 3d c1 96 a5 ac 4e 7a f9 66 7e bf 8c 0c 75 d8 1f c1 0d f4 42 1c 1c a0 c7 58 9b 33 a7 49 37 14 79 a7 f1 70 52 ec 76 5b c1 69 e4 3c 99 04 73 55 ed 40 f7 da db 4b c8 09 82 98 54 0c 0d 4c 85 9b 75 20 d8 ce 83 4b 97 c8 18 2b b2 3f 79 a2 91 a9 63 d8 18 ba 83 9b a1 46 33 cb e7 89 5d aa fc d9 ba e1 23 ae 9f b3 be 08 56 1e d0 03 6a 01 06 e7 82 35 49 2e 34 c5 9e fc 61 a9 e0 5a 09 18 fa 35 32 b4 12 15 fc f8 2a 69 66 08 19 1b 3a 88 d9 59 b4 5c c3 5c f8 22 e5 40 Data Ascii: q$kId<._Bw,SW('A@h<a=bg9=:s`fBl#!c4g)2_v~<>6n\|=Nzf~uBX3I7ypRv[i<sU@KTLu K+?ycF3]#Vj5I.4aZ52*if:Y\\"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.5	49872	23.63.126.201	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:16 UTC	75	OUT	GET /krs?id=UPmn92S3 HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:16 UTC	76	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://krs.microsoft.com/redirect?id=UPmn92S3 Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Wed, 31 Aug 2022 14:46:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Aug 2022 14:46:16 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.5	49875	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:16 UTC	76	OUT	GET /redirect?id=UPmn92S3 HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:46:17 UTC	77	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 Strict-Transport-Security: max-age=2592000 X-Cache: CONFIG_NOCACHE X-Azure-Ref: 0OHQPYwAAAAC1/OxGV5f7SbNWH8ZFJduOQlJVMzBFREdFMDQxNgBlYjYwNTJmOS02NjZlLTQ1Y2QtOWMxOS00MTg2YzZlYjkwY2M= Date: Wed, 31 Aug 2022 14:46:16 GMT Connection: close
2022-08-31 14:46:17 UTC	77	IN	Data Raw: 37 61 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 39 35 31 39 33 37 35 39 36 2c 20 61 70 70 2d 61 72 67 75 6d 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f Data Ascii: 7a2<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://apps.apple.com/
2022-08-31 14:46:17 UTC	79	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.5	49890	52.98.213.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:23 UTC	79	OUT	GET /owa/?nlp=1 HTTP/1.1 Host: outlook.live.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; logonLatency=LGN01=637975539356482914; MSFPC=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; OWAPF=p:11111111&v:15.20.5566.21&l:mouse&
2022-08-31 14:46:23 UTC	80	IN	HTTP/1.1 302 Content-Length: 442 Content-Type: text/html; charset=utf-8 Location: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&aadredir=1&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015 Server: Microsoft-IIS/10.0 request-id: 3e50371a-9ac5-5076-7825-486ac1e146a8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedFETarget: AS4P191CU002.internal.outlook.com X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RoutingKeyCookie=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: HostSwitchPrg=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: logonLatency=LGN01=637975539837445397; domain=live.com; path=/; secure; HttpOnly Set-Cookie: exchangecookie=534d8faa8e714f788c0ecd2363c9b10d; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RpsCsrfState.ngjoP4g0Pxw3ld7th5oHWVgyEjVTUBS6CGCV5dKU1nc=70b1504b-a812-7672-c757-76dae1b0d8b4; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: HostSwitchPrg=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Mon, 31-Aug-1992 14:46:23 GMT; path=/; secure Set-Cookie: logonLatency=LGN01=637975539837445397; domain=live.com; path=/; secure; HttpOnly Set-Cookie: exchangecookie=534d8faa8e714f788c0ecd2363c9b10d; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RpsCsrfState.ngjoP4g0Pxw3ld7th5oHWVgyEjVTUBS6CGCV5dKU1nc=70b1504b-a812-7672-c757-76dae1b0d8b4; path=/;SameSite=None; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=AhR7n8MBFSVmk1-L2gg; expires=Wed, 31-Aug-2022 20:48:23 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: AM0PR06MB5042.eurprd06.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-Content-Type-Options: nosniff X-BeSku: WCS5 X-OWA-DiagnosticsInfo: 2;0;0 X-IIDs: 0 X-BackEnd-Begin: 2022-08-31T14:46:23.744 X-BackEnd-End: 2022-08-31T14:46:23.744 X-DiagInfo: AM0PR06MB5042 X-BEServer: AM0PR06MB5042 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: AS9PR06CA0681.EURPRD06.PROD.OUTLOOK.COM X-FEEFZInfo: DHR X-FEServer: AS4P191CA0024 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DHR"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: DHR X-FEServer: AS9PR06CA0681 Date: Wed, 31 Aug 2022 14:46:22 GMT Connection: close
2022-08-31 14:46:23 UTC	83	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 73 72 66 3f 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 61 6d 70 3b 72 70 73 6e 76 3d 31 33 26 61 6d 70 3b 63 74 3d 31 36 36 31 39 35 37 31 38 33 26 61 6d 70 3b 72 76 65 72 3d 37 2e 30 2e 36 37 33 37 2e 30 26 61 6d 70 3b 77 70 3d 4d 42 49 5f 53 53 4c 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 25 33 66 6e 6c 70 25 33 64 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&ct=1661957183&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.5	49893	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:26 UTC	83	OUT	GET /16.000/Converged_v21033_-__Cqeow2darz41wUymj4A2.css HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:26 UTC	84	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471677 Cache-Control: public, max-age=31536000 Content-MD5: qPtjfPT14mja1HZVdVAnUQ== Content-Type: text/css Date: Wed, 31 Aug 2022 14:46:26 GMT Etag: 0x8DA4F58384F4944 Last-Modified: Thu, 16 Jun 2022 05:22:34 GMT Server: ECAcc (frd/E2E8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 725cfc86-d01e-008c-2acd-a6ea43000000 x-ms-version: 2009-09-19 Content-Length: 109599 Connection: close
2022-08-31 14:46:26 UTC	85	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2022-08-31 14:46:26 UTC	101	IN	Data Raw: 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c 65 66 Data Ascii: ,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:lef
2022-08-31 14:46:26 UTC	117	IN	Data Raw: 69 6e Data Ascii: in
2022-08-31 14:46:26 UTC	117	IN	Data Raw: 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 Data Ascii: -left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-box-s
2022-08-31 14:46:26 UTC	133	IN	Data Raw: 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 Data Ascii: :539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table-responsive>.table>thead>tr>td,.table-responsive>.tab
2022-08-31 14:46:26 UTC	149	IN	Data Raw: 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 49 45 5f 4d 37 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 49 45 5f 4d 37 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 49 45 5f 4d 37 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 2e 49 45 5f 4d 37 20 62 75 74 74 6f 6e 2c 2e 49 45 Data Ascii: osoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.IE_M7 ul{margin-left:0}.IE_M7 input[type="button"],.IE_M7 input[type="submit"],.IE_M7 button,.IE
2022-08-31 14:46:26 UTC	165	IN	Data Raw: 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 32 62 32 62 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 7d 2e 62 74 6e 2d 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 Data Ascii: :hover,button:hover,input[type="button"]:hover,input[type="submit"]:hover,input[type="reset"]:hover{background-color:#b2b2b2;background-color:rgba(0,0,0,.3)}.btn-focus,.btn:focus,button:focus,input[type="button"]:focus,input[type="submit"]:focus,input[typ
2022-08-31 14:46:26 UTC	181	IN	Data Raw: 20 55 49 22 2c 22 47 61 64 75 67 69 22 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 Data Ascii: UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.5	49895	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:28 UTC	192	OUT	GET /16.000/content/js/ConvergedLoginPaginatedStrings.en_8IAH-rV-SAmuJXx1_pfJfw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:28 UTC	192	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2220837 Cache-Control: public, max-age=31536000 Content-MD5: TxwL/+/aWTyX5/rk3patkg== Content-Type: application/x-javascript Date: Wed, 31 Aug 2022 14:46:28 GMT Etag: 0x8DA76A6745BB0A6 Last-Modified: Fri, 05 Aug 2022 05:50:51 GMT Server: ECAcc (frd/E2C8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bfa4a1f7-b01e-0016-4915-a9876c000000 x-ms-version: 2009-09-19 Content-Length: 36328 Connection: close
2022-08-31 14:46:28 UTC	193	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 29 7b 69 66 28 6e 5b 69 5d 29 72 65 74 75 72 6e 20 6e 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 69 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 6e 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 31 29 2c 74 3d 6e 28 35 29 2c 72 3d 6e 28 34 29 2c 61 3d 74 2e 53 74 72 69 6e 67 73 56 61 72 Data Ascii: !function(e){function o(i){if(n[i])return n[i].exports;var t=n[i]={exports:{},id:i,loaded:!1};return e[i].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){var i=n(1),t=n(5),r=n(4),a=t.StringsVar
2022-08-31 14:46:28 UTC	209	IN	Data Raw: 57 Data Ascii: W
2022-08-31 14:46:28 UTC	209	IN	Data Raw: 69 6e 64 6f 77 73 20 48 65 6c 6c 6f 20 6f 72 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 46 69 64 6f 44 69 61 6c 6f 67 5f 44 65 73 63 5f 43 72 6f 73 73 50 6c 61 74 66 6f 72 6d 3d 22 53 69 67 6e 20 69 6e 20 77 69 74 68 6f 75 74 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 72 20 70 61 73 73 77 6f 72 64 20 62 79 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 6b 65 79 2e 22 2c 65 2e 43 54 5f 53 54 52 5f 47 69 74 48 75 62 44 69 61 6c 6f 67 5f 44 65 73 63 3d 22 54 6f 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 2c 20 79 6f 75 20 6d 75 73 74 20 68 61 76 65 20 70 72 65 76 69 6f 75 73 6c 79 20 6c 69 6e 6b 65 64 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 20 74 6f 20 61 20 Data Ascii: indows Hello or a security key.",e.CT_STR_FidoDialog_Desc_CrossPlatform="Sign in without a username or password by using a security key.",e.CT_STR_GitHubDialog_Desc="To use this option, you must have previously linked your personal Microsoft account to a
2022-08-31 14:46:28 UTC	225	IN	Data Raw: 54 52 5f 50 72 6f 6f 66 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 74 65 78 74 65 64 20 79 6f 75 72 20 70 68 6f 6e 65 20 7b 30 7d 2e 20 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 74 6f 20 73 69 67 6e 20 69 6e 2e 22 2c 6e 2e 43 54 5f 4f 54 43 43 5f 53 54 52 5f 50 72 6f 6f 66 44 65 73 63 72 69 70 74 69 6f 6e 4d 61 74 63 68 3d 22 49 66 20 7b 30 7d 20 6d 61 74 63 68 65 73 20 74 68 65 20 6c 61 73 74 20 34 20 64 69 67 69 74 73 20 6f 66 20 74 68 65 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 6f 6e 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2c 20 77 65 27 6c 6c 20 73 65 6e 64 20 79 6f 75 20 61 20 63 6f 64 65 2e 22 2c 6e 2e 43 54 5f 4f 54 43 43 5f 53 54 52 5f 45 72 72 6f 72 5f 54 6f 6f 4d 61 6e 79 49 6e 76 61 6c 69 64 4f 54 43 3d 22 54 68 65 Data Ascii: TR_ProofDescription="We texted your phone {0}. Please enter the code to sign in.",n.CT_OTCC_STR_ProofDescriptionMatch="If {0} matches the last 4 digits of the phone number on your account, we'll send you a code.",n.CT_OTCC_STR_Error_TooManyInvalidOTC="The

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.5	49898	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:29 UTC	228	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_GASermMBtJQPCgSX-pw2WQ2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:29 UTC	229	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2141445 Cache-Control: public, max-age=31536000 Content-MD5: escb/rlLGsJ9GiG/DsPFFg== Content-Type: application/x-javascript Date: Wed, 31 Aug 2022 14:46:29 GMT Etag: 0x8DA76545DD23E70 Last-Modified: Thu, 04 Aug 2022 20:03:14 GMT Server: ECAcc (frd/E2E0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1e006253-301e-0015-02ce-a9740c000000 x-ms-version: 2009-09-19 Content-Length: 385420 Connection: close
2022-08-31 14:46:29 UTC	230	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2022-08-31 14:46:29 UTC	246	IN	Data Raw: 72 6f 72 3a 22 31 33 31 30 30 31 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 41 75 74 68 55 73 65 72 4e 6f 74 41 6c 6c 6f 77 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 31 30 31 30 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 32 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 33 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c Data Ascii: ror:"131001",PublicIdentifierAuthUserNotAllowedByPolicy:"131010",PublicIdentifierSasBeginCallNonRetriableError:"131002",PublicIdentifierSasEndCallRetriableError:"131003",PublicIdentifierSasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBl
2022-08-31 14:46:29 UTC	262	IN	Data Raw: 74 28 Data Ascii: t(
2022-08-31 14:46:29 UTC	262	IN	Data Raw: 32 29 2c 61 3d 74 28 31 32 29 2c 6f 3d 74 28 36 32 29 2c 72 3d 77 69 6e 64 6f 77 2c 73 3d 6e 2e 4f 62 6a 65 63 74 3d 7b 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 61 2e 70 61 72 73 65 28 61 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 29 2c 6e 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 22 22 3b 72 65 74 75 72 6e 20 65 26 26 73 2e 66 6f 72 45 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 69 26 26 28 69 2b 3d 6e 29 2c 69 2b 3d 65 2b 74 2b 28 61 7c 7c 22 22 29 7d 29 29 2c 69 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 2e 75 74 69 6c 73 2e 6f 62 6a 65 63 74 46 6f 72 45 61 63 68 28 65 2c 6e 29 7d Data Ascii: 2),a=t(12),o=t(62),r=window,s=n.Object={clone:function(e){var n={};return e&&(n=a.parse(a.stringify(e))),n},join:function(e,n,t){var i="";return e&&s.forEach(e,(function(e,a){i&&(i+=n),i+=e+t+(a\|\|"")})),i},forEach:function(e,n){i.utils.objectForEach(e,n)}
2022-08-31 14:46:29 UTC	278	IN	Data Raw: 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 6e 2e 69 73 50 72 69 6d 61 72 79 42 75 74 74 6f 6e 56 69 73 69 62 6c 65 28 29 26 26 65 2b 2b 2c 6e 2e 69 73 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 56 69 73 69 62 6c 65 28 29 26 26 65 2b 2b 2c 31 3d 3d 3d 65 7d 29 29 2c 6e 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 44 65 73 63 72 69 62 65 64 42 79 3d 6d 2c 6e 2e 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 44 65 73 63 72 69 62 65 64 42 79 3d 62 2c 6e 2e 72 65 6d 6f 76 65 42 6f 74 74 6f 6d 4d 61 72 67 69 6e 3d 77 2c 6e 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 50 72 65 76 65 6e 74 54 61 62 62 69 6e 67 3d 53 2c 6e 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 41 74 74 72 69 62 75 74 65 73 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ar e=0;return n.isPrimaryButtonVisible()&&e++,n.isSecondaryButtonVisible()&&e++,1===e})),n.primaryButtonDescribedBy=m,n.secondaryButtonDescribedBy=b,n.removeBottomMargin=w,n.primaryButtonPreventTabbing=S,n.primaryButtonAttributes=i.pureComputed((function(
2022-08-31 14:46:29 UTC	294	IN	Data Raw: 69 63 65 45 6e 61 62 6c 65 64 29 7b 76 61 72 20 72 3d 67 2e 63 6c 6f 6e 65 28 74 29 3b 21 72 2e 70 72 6f 6f 66 2e 6f 74 63 53 65 6e 74 7c 7c 6a 26 26 77 65 3d 3d 3d 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 7c 7c 28 72 2e 70 72 6f 6f 66 2e 6f 74 63 53 65 6e 74 3d 21 31 29 2c 72 2e 70 72 6f 6f 66 2e 74 79 70 65 3d 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 2c 61 2e 70 75 73 68 28 72 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 3a 61 2e 70 75 73 68 28 67 2e 63 6c 6f 6e 65 28 74 29 29 7d 7d 7d 29 29 7d 69 66 28 6e 26 26 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 26 26 46 65 28 65 2c 74 29 3d 3d 3d 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 29 7b 76 61 72 20 72 3d 65 2e 43 72 65 64 65 6e 74 69 61 6c 73 26 26 65 2e 43 Data Ascii: iceEnabled){var r=g.clone(t);!r.proof.otcSent\|\|j&&we===PROOF.Type.Voice\|\|(r.proof.otcSent=!1),r.proof.type=PROOF.Type.Voice,a.push(r)}break;case PROOF.Type.Email:a.push(g.clone(t))}}}))}if(n&&0===a.length&&Fe(e,t)===m.OneTimeCode){var r=e.Credentials&&e.C
2022-08-31 14:46:29 UTC	310	IN	Data Raw: 75 6c 6c 3b 6e 2e 67 65 74 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 61 5a 29 74 72 79 7b 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 7c 7c 7b 7d 2c 74 3d 65 2e 62 72 6f 77 73 65 72 7c 7c 7b 7d 2c 72 3d 6e 2e 61 72 7c 7c 7b 7d 2c 73 3d 6e 2e 4b 7c 7c 7b 7d 2c 63 3d 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3f 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 22 22 3b 72 65 74 75 72 6e 20 72 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 44 3d 63 2c 72 2e 68 6f 73 74 50 61 67 65 49 44 3d 6e 2e 68 70 67 69 64 2c 72 2e 70 61 67 65 4e 61 6d 65 3d 6e 2e 70 67 69 64 7c 7c 6e 2e 62 6f 2c 72 2e 61 63 74 6f 72 49 44 3d 6e 2e 68 70 67 61 63 74 7c 7c 6e 2e 61 62 2c 72 2e 61 70 70 49 64 3d 6e 2e 61 70 70 49 64 Data Ascii: ull;n.getInstance=function(e){if(e.aZ)try{r=r\|\|function(e){var n=e\|\|{},t=e.browser\|\|{},r=n.ar\|\|{},s=n.K\|\|{},c=n.correlationId?n.correlationId:"";return r.correlationID=c,r.hostPageID=n.hpgid,r.pageName=n.pgid\|\|n.bo,r.actorID=n.hpgact\|\|n.ab,r.appId=n.appId
2022-08-31 14:46:29 UTC	326	IN	Data Raw: 53 75 70 70 6f 72 74 65 64 22 29 3b 76 61 72 20 65 3d 70 2e 67 65 74 43 6f 6f 6b 69 65 28 6d 2e 73 73 6f 54 69 6c 65 73 29 7c 7c 74 2e 66 6f 72 63 65 54 69 6c 65 73 3b 69 66 28 21 65 26 26 70 2e 67 65 74 43 6f 6f 6b 69 65 28 6d 2e 73 73 6f 50 75 6c 6c 65 64 29 29 72 65 74 75 72 6e 20 5f 28 22 42 53 53 4f 2e 69 6e 66 6f 22 2c 22 74 68 72 6f 74 74 6c 65 64 22 29 2c 76 28 22 43 6f 6f 6b 69 65 20 70 75 6c 6c 20 74 68 72 6f 74 74 6c 65 64 22 29 2c 73 2e 72 65 6a 65 63 74 28 22 74 68 72 6f 74 74 6c 65 64 22 29 3b 76 61 72 20 6e 3d 22 74 62 61 75 74 68 3a 2f 2f 6c 6f 67 69 6e 2e 77 69 6e 64 6f 77 73 2e 6e 65 74 3f 63 6f 6e 74 65 78 74 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 Data Ascii: Supported");var e=p.getCookie(m.ssoTiles)\|\|t.forceTiles;if(!e&&p.getCookie(m.ssoPulled))return _("BSSO.info","throttled"),v("Cookie pull throttled"),s.reject("throttled");var n="tbauth://login.windows.net?context="+encodeURIComponent(l.location.href.split
2022-08-31 14:46:29 UTC	342	IN	Data Raw: 6f 67 3d 6f 2e Data Ascii: og=o.
2022-08-31 14:46:29 UTC	342	IN	Data Raw: 63 72 65 61 74 65 28 29 2c 74 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 28 69 29 7d 2c 74 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 28 69 2c 7b 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 3a 72 2c 64 61 74 61 3a 61 7d 29 7d 69 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 72 65 67 69 73 74 65 72 28 22 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 72 6f 6c 22 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 7b 63 72 65 61 74 65 56 69 65 77 4d 6f 64 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 65 2c 6e 2e 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 29 7d Data Ascii: create(),t.onUnregisterDialog=o.create(),t.dispose=function(){t.onUnregisterDialog(i)},t.onRegisterDialog(i,{templateNodes:r,data:a})}i.components.register("dialog-content-control",{viewModel:{createViewModel:function(e,n){return new s(e,n.templateNodes)}
2022-08-31 14:46:29 UTC	358	IN	Data Raw: 5b 69 5d 2e 4b 64 2c 72 29 2c 6f 2e 6e 6f 64 65 56 61 6c 75 65 3d 22 22 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 7d 2c 55 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 3d 65 2e 6d 61 74 63 68 28 2f 5e 5c 5b 6b 6f 5f 6d 65 6d 6f 5c 3a 28 2e 2a 3f 29 5c 5d 24 2f 29 29 3f 65 5b 31 5d 3a 6e 75 6c 6c 7d 7d 7d 28 29 2c 77 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 22 2c 77 2e 61 61 29 2c 77 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 6d 65 6d 6f 69 7a 65 22 2c 77 2e 61 61 2e 58 62 29 2c 77 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 75 6e 6d 65 6d 6f 69 7a 65 22 2c 77 2e 61 61 2e 62 64 29 2c 77 2e 62 28 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 2e 70 Data Ascii: [i].Kd,r),o.nodeValue="",o.parentNode&&o.parentNode.removeChild(o)}},Uc:function(e){return(e=e.match(/^\[ko_memo\:(.*?)\]$/))?e[1]:null}}}(),w.b("memoization",w.aa),w.b("memoization.memoize",w.aa.Xb),w.b("memoization.unmemoize",w.aa.bd),w.b("memoization.p
2022-08-31 14:46:29 UTC	374	IN	Data Raw: 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 2c 22 6e 75 6c 6c 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 5d 2c 74 3d 2f 5e 28 3f 3a 5b 24 5f 61 2d 7a 5d 5b 24 5c 77 5d 2a 7c 28 2e 2b 29 28 5c 2e 5c 73 2a 5b 24 5f 61 2d 7a 5d 5b 24 5c 77 5d 2a 7c 5c 5b 2e 2b 5c 5d 29 29 24 2f 69 2c 69 3d 52 65 67 45 78 70 28 22 5c 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 22 5d 29 2a 5c 22 7c 27 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 27 5d 29 2a 27 7c 60 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 60 5d 29 2a 60 7c 2f 5c 5c 2a 28 3f 3a 5b 5e 2a 5d 7c 5c 5c 2a 2b 5b 5e 2a 2f 5d 29 2a 5c 5c 2a 2b 2f 7c 2f 2f 2e 2a 5c 6e 7c 2f 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 2f 5d 29 2b 2f 77 2a 7c 5b 5e 5c 5c 73 3a 2c 2f 5d 5b 5e 2c 5c 22 27 60 7b 7d 28 29 2f 3a 5b 5c 5c 5d 5d 2a 5b 5e 5c 5c 73 2c 5c 22 27 60 7b Data Ascii: ["true","false","null","undefined"],t=/^(?:[$_a-z][$\w]\|(.+)(\.\s[$_a-z][$\w]\|\[.+\]))$/i,i=RegExp("\"(?:\\\\.\|[^\"])\"\|'(?:\\\\.\|[^'])'\|`(?:\\\\.\|[^`])`\|/\\(?:[^]\|\\+[^/])\\+/\|//.\n\|/(?:\\\\.\|[^/])+/w\|[^\\s:,/][^,\"'`{}()/:[\\]]*[^\\s,\"'`{
2022-08-31 14:46:29 UTC	390	IN	Data Raw: 65 5b 6e 5d 3d 74 29 3a 61 7c 7c 28 69 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 69 2c 6e 2c 74 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 74 29 29 2c 22 6e 61 6d 65 22 3d 3d 3d 6e 26 26 77 2e 61 2e 59 63 28 65 2c 61 3f 22 22 3a 74 29 7d 29 29 7d 7d 2c 77 2e 63 2e 63 68 65 63 6b 65 64 3d 7b 61 66 74 65 72 3a 5b 22 76 61 6c 75 65 22 2c 22 61 74 74 72 22 5d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 69 3d 65 2e 63 68 65 63 6b 65 64 2c 63 3d 61 28 29 3b 69 66 28 21 77 2e 53 2e 59 61 28 29 26 26 28 69 7c 7c 21 73 26 26 21 77 2e 53 2e 71 61 28 29 29 29 7b 76 61 72 20 75 3d 77 2e 75 2e 47 28 6e 29 3b 69 66 28 64 29 7b 76 61 72 20 66 3d 6c 3f 75 2e 76 28 29 3a 75 Data Ascii: e[n]=t):a\|\|(i?e.setAttributeNS(i,n,t):e.setAttribute(n,t)),"name"===n&&w.a.Yc(e,a?"":t)}))}},w.c.checked={after:["value","attr"],init:function(e,n,t){function i(){var i=e.checked,c=a();if(!w.S.Ya()&&(i\|\|!s&&!w.S.qa())){var u=w.u.G(n);if(d){var f=l?u.v():u
2022-08-31 14:46:29 UTC	406	IN	Data Raw: 68 2e 45 61 Data Ascii: h.Ea
2022-08-31 14:46:29 UTC	406	IN	Data Raw: 28 65 29 3b 65 6c 73 65 20 69 66 28 22 6e 6f 64 65 73 22 69 6e 20 74 29 7b 69 66 28 74 3d 74 2e 6e 6f 64 65 73 7c 7c 5b 5d 2c 77 2e 4f 28 74 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 27 54 68 65 20 22 6e 6f 64 65 73 22 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 20 70 6c 61 69 6e 2c 20 6e 6f 6e 2d 6f 62 73 65 72 76 61 62 6c 65 20 61 72 72 61 79 2e 27 29 3b 76 61 72 20 69 3d 74 5b 30 5d 26 26 74 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 26 26 77 2e 61 2e 67 2e 67 65 74 28 69 2c 63 29 7c 7c 28 69 3d 77 2e 61 2e 59 62 28 74 29 2c 77 2e 61 2e 67 2e 73 65 74 28 69 2c 63 2c 21 30 29 29 2c 6e 65 77 20 77 2e 43 2e 69 61 28 65 29 2e 6e 6f 64 65 73 28 69 29 7d 65 6c 73 65 7b 69 66 28 21 28 30 3c 28 74 3d 77 2e 68 2e 63 68 69 6c 64 4e 6f 64 65 73 28 65 Data Ascii: (e);else if("nodes"in t){if(t=t.nodes\|\|[],w.O(t))throw Error('The "nodes" option must be a plain, non-observable array.');var i=t[0]&&t[0].parentNode;i&&w.a.g.get(i,c)\|\|(i=w.a.Yb(t),w.a.g.set(i,c,!0)),new w.C.ia(e).nodes(i)}else{if(!(0<(t=w.h.childNodes(e
2022-08-31 14:46:29 UTC	422	IN	Data Raw: 72 73 2e 68 61 73 46 6f 63 75 73 42 61 73 69 63 3d 7b 69 6e 69 74 3a 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 68 61 73 46 6f 63 75 73 2e 69 6e 69 74 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 2e 75 6e 77 72 61 70 28 74 28 29 29 3f 6e 2e 66 6f 63 75 73 28 29 3a 6e 2e 62 6c 75 72 28 29 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 74 2e 53 74 72 69 6e 67 52 65 70 6f 73 69 74 6f 72 79 3d 65 2e 65 78 70 6f 72 74 73 3d 74 2e 53 74 72 69 6e 67 52 65 70 6f 73 69 74 6f 72 79 7c 7c 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 74 68 69 73 2e 72 65 67 69 73 74 65 72 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 5b 6e 5d 3d 65 5b 6e Data Ascii: rs.hasFocusBasic={init:e.bindingHandlers.hasFocus.init,update:function(n,t){e.unwrap(t())?n.focus():n.blur()}}}},function(e,n){var t=window;t.StringRepository=e.exports=t.StringRepository\|\|new function(){var e={};this.registerSource=function(n,t){e[n]=e[n
2022-08-31 14:46:29 UTC	438	IN	Data Raw: 64 43 Data Ascii: dC
2022-08-31 14:46:29 UTC	438	IN	Data Raw: 6f 6e 66 6c 69 63 74 2c 54 2e 46 65 64 4c 69 6e 6b 2c 54 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 2c 54 2e 46 65 74 63 68 53 65 73 73 69 6f 6e 73 50 72 6f 67 72 65 73 73 2c 54 2e 54 69 6c 65 73 2c 54 2e 4c 77 61 43 6f 6e 73 65 6e 74 2c 54 2e 48 69 70 2c 54 2e 52 65 6d 6f 74 65 4c 6f 67 69 6e 50 6f 6c 6c 69 6e 67 2c 54 2e 54 65 6e 61 6e 74 44 69 73 61 6d 62 69 67 75 61 74 69 6f 6e 2c 54 2e 53 65 61 72 63 68 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 2c 54 2e 41 63 63 65 73 73 50 61 73 73 2c 54 2e 53 69 67 6e 75 70 55 73 65 72 6e 61 6d 65 2c 54 2e 53 69 67 6e 75 70 43 72 65 64 65 6e 74 69 61 6c 50 69 63 6b 65 72 2c 54 2e 4c 65 61 72 6e 4d 6f 72 65 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 2c 54 2e 52 65 6d 6f 74 65 Data Ascii: onflict,T.FedLink,T.RemoteConnectCanaryValidation,T.FetchSessionsProgress,T.Tiles,T.LwaConsent,T.Hip,T.RemoteLoginPolling,T.TenantDisambiguation,T.SearchOrganization,T.AccessPass,T.SignupUsername,T.SignupCredentialPicker,T.LearnMoreOfflineAccount,T.Remote
2022-08-31 14:46:29 UTC	454	IN	Data Raw: 73 2f 32 35 2d 73 6d 61 6c 6c 5f 64 39 32 30 62 39 36 64 63 34 36 65 63 38 64 61 32 34 31 65 61 35 62 35 62 34 35 33 31 36 36 63 2e 6a 70 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 32 35 5f 30 65 39 64 37 62 62 30 30 61 62 63 38 31 65 62 31 62 66 37 30 63 62 66 33 39 36 31 62 32 33 62 2e 6a 70 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 32 36 2d 73 6d 61 6c 6c 5f 34 64 35 66 62 63 39 62 32 62 64 39 35 38 37 33 66 64 31 32 36 35 36 34 64 33 65 39 65 31 62 34 Data Ascii: s/25-small_d920b96dc46ec8da241ea5b5b453166c.jpg"},function(e,n,t){e.exports=t.p+"content/images/appbackgrounds/25_0e9d7bb00abc81eb1bf70cbf3961b23b.jpg"},function(e,n,t){e.exports=t.p+"content/images/appbackgrounds/26-small_4d5fbc9b2bd95873fd126564d3e9e1b4
2022-08-31 14:46:29 UTC	470	IN	Data Raw: 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 6c 6f 67 6f 73 2f 34 32 5f 33 34 37 63 32 64 61 63 62 66 65 30 34 30 61 36 31 34 65 65 34 36 37 61 61 63 33 61 62 37 39 31 2e 70 6e 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 6c 6f 67 6f 73 2f 34 33 5f 39 61 38 32 39 63 65 33 32 65 36 35 37 65 62 30 38 35 34 63 61 39 62 66 64 37 39 33 33 61 63 65 2e 70 6e 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 6c 6f 67 6f 73 2f 34 34 5f 30 38 65 64 36 35 37 65 34 38 66 31 34 35 38 Data Ascii: ,t){e.exports=t.p+"content/images/applogos/42_347c2dacbfe040a614ee467aac3ab791.png"},function(e,n,t){e.exports=t.p+"content/images/applogos/43_9a829ce32e657eb0854ca9bfd7933ace.png"},function(e,n,t){e.exports=t.p+"content/images/applogos/44_08ed657e48f1458
2022-08-31 14:46:29 UTC	486	IN	Data Raw: 20 20 20 Data Ascii:
2022-08-31 14:46:29 UTC	486	IN	Data Raw: 20 20 20 20 20 63 61 6c 6c 4d 65 74 61 64 61 74 61 3a 20 73 68 61 72 65 64 44 61 74 61 2e 63 61 6c 6c 4d 65 74 61 64 61 74 61 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 75 62 6d 69 74 52 65 61 64 79 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 53 75 62 6d 69 74 52 65 61 64 79 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 Data Ascii: callMetadata: sharedData.callMetadata },\n event: {\n updateFlowToken: $loginPage.view_onUpdateFlowToken,\n submitReady: $loginPage.view_onSubmitReady,\n redirect: $loginPage.vie
2022-08-31 14:46:29 UTC	502	IN	Data Raw: 65 Data Ascii: e
2022-08-31 14:46:29 UTC	502	IN	Data Raw: 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 2b 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 46 69 64 6f 2b 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 66 69 64 6f 2d 76 69 65 77 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 73 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 72 76 65 72 44 61 74 61 3a 20 73 76 72 Data Ascii: w_onRedirect } }">\n </div>\n\n <div data-viewid="'+t(0).PaginatedState.Fido+'" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-fido-view\',\n params: {\n serverData: svr
2022-08-31 14:46:29 UTC	518	IN	Data Raw: 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 69 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 61 2e 53 65 72 76 65 72 44 61 74 61 29 2c 70 3d 7b 7d 2c 66 3d 7b 7d 3b 69 66 28 74 26 26 28 66 3d 74 2e 67 65 74 28 22 70 6c 74 4d 65 74 72 69 63 73 22 29 7c 7c 7b 7d 29 2c 70 2e 61 70 69 54 69 6d 69 6e 67 49 6e 66 6f 3d 66 2e 61 70 69 54 69 6d 69 6e 67 49 6e 66 6f 7c 7c 5b 5d 2c 70 2e 69 73 50 6c 74 31 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 74 5d 3b 69 66 28 63 28 69 2e 65 6e 74 72 79 54 79 70 65 29 26 26 21 73 28 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 29 26 26 21 64 28 69 2e Data Ascii: n(e,n){var t=i.getInstance(a.ServerData),p={},f={};if(t&&(f=t.get("pltMetrics")\|\|{}),p.apiTimingInfo=f.apiTimingInfo\|\|[],p.isPlt1=function(e){var n=null;if(!e)return null;for(var t=0;t<e.length;t++){var i=e[t];if(c(i.entryType)&&!s(i.initiatorType)&&!d(i.
2022-08-31 14:46:29 UTC	534	IN	Data Raw: 72 6f 73 6f 66 74 5c 27 5d 20 7d 22 20 2f 3e 5c 6e 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 27 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f 6c 6f 67 6f 5f 77 68 69 74 65 5f 61 32 32 30 33 61 35 32 63 65 30 38 34 33 34 32 37 63 36 39 37 38 36 65 31 38 38 34 31 34 33 37 2e 70 6e 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f 6c 6f 67 6f 5f 77 68 69 74 65 5f 35 39 35 65 39 32 30 36 64 34 32 37 34 63 34 32 63 32 37 62 Data Ascii: rosoft\'] }" />\n \x3c!-- /ko --\x3e\n\x3c!-- /ko --\x3e'},function(e,n,t){e.exports=t.p+"content/images/microsoft_logo_white_a2203a52ce0843427c69786e18841437.png"},function(e,n,t){e.exports=t.p+"content/images/microsoft_logo_white_595e9206d4274c42c27b
2022-08-31 14:46:29 UTC	550	IN	Data Raw: 5c 78 33 Data Ascii: \x3
2022-08-31 14:46:29 UTC	550	IN	Data Raw: 65 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 27 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 63 73 73 3a 20 7b 20 61 70 70 3a 20 69 73 41 70 70 42 72 61 6e 64 69 6e 67 20 7d 2c 20 73 74 79 6c 65 3a 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 62 61 63 6b 67 72 6f 75 6e 64 53 74 79 6c 65 20 7d 22 3e 5c 6e 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 6d 61 6c 6c 49 6d 61 67 65 55 72 6c 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 Data Ascii: e\n</div>\n\x3c!-- /ko --\x3e')},function(e,n){e.exports='<div class="background-image-holder" role="presentation" data-bind="css: { app: isAppBranding }, style: { background: backgroundStyle }">\n \x3c!-- ko if: smallImageUrl --\x3e\n <div class="b
2022-08-31 14:46:29 UTC	566	IN	Data Raw: 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 73 74 72 5b 5c 27 53 54 52 5f 45 72 72 6f 72 5f 44 65 74 61 69 6c 73 5f 44 65 62 75 67 5f 4d 6f 64 65 5f 44 65 73 63 5c 27 5d 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 65 72 72 6f 72 42 61 6e 6e 65 72 43 6c 6f 73 65 4c 69 6e 6b 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 23 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 68 69 64 65 42 61 Data Ascii: a-bind="text: str[\'STR_Error_Details_Debug_Mode_Desc\']"></div>\n </div>\n \x3c!-- /ko --\x3e\n </div>\n <div>\n <a id="errorBannerCloseLink" role="button" href="#" data-bind="\n click: hideBa
2022-08-31 14:46:29 UTC	582	IN	Data Raw: 65 72 3d 6e 75 6c 6c 2c 6e 2e 73 68 6f 77 46 69 64 6f 4c 69 6e 6b 49 6e 6c 69 6e 65 3d 73 65 2c 6e 2e 68 69 64 65 43 61 6e 74 41 63 63 65 73 73 59 6f 75 72 41 63 63 6f 75 6e 74 3d 21 30 2c 6e 2e 75 6e 73 61 66 65 5f 63 61 6e 74 41 63 63 65 73 73 59 6f 75 72 41 63 63 6f 75 6e 74 54 65 78 74 3d 42 2e 57 46 5f 53 54 52 5f 43 61 6e 74 41 63 63 65 73 73 41 63 63 6f 75 6e 74 5f 54 65 78 74 2c 6e 2e 61 63 63 65 73 73 52 65 63 6f 76 65 72 79 4c 69 6e 6b 3d 6e 75 6c 6c 2c 6e 2e 73 68 6f 77 43 72 65 64 50 69 63 6b 65 72 3d 21 31 2c 77 2e 61 74 74 61 63 68 56 69 65 77 4c 6f 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 28 6e 2c 7b 65 76 65 6e 74 49 64 3a 6d 2e 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 45 76 65 6e 74 49 64 73 2e 45 76 65 6e 74 5f 4c Data Ascii: er=null,n.showFidoLinkInline=se,n.hideCantAccessYourAccount=!0,n.unsafe_cantAccessYourAccountText=B.WF_STR_CantAccessAccount_Text,n.accessRecoveryLink=null,n.showCredPicker=!1,w.attachViewLoadClientTracingOptions(n,{eventId:m.ClientTracingEventIds.Event_L
2022-08-31 14:46:29 UTC	598	IN	Data Raw: 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 5c 6e 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 68 6f 77 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 3c 61 20 69 64 3d 22 69 64 41 5f 50 57 44 5f 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 22 20 68 72 65 66 3d 22 23 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 74 65 78 74 3a 20 69 73 55 73 65 72 4b 6e 6f 77 6e 20 3f 20 73 74 72 5b 5c 27 43 54 5f 50 57 44 5f 53 54 52 5f 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 5f 4c 69 6e 6b 5c 27 5d 20 3a 20 73 74 72 5b 5c 27 43 54 5f 50 57 44 5f 53 54 52 5f 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 5f 4c 69 Data Ascii: \n<div class="form-group">\n \x3c!-- ko if: showSwitchToCredPickerLink --\x3e\n <a id="idA_PWD_SwitchToCredPicker" href="#" data-bind="\n text: isUserKnown ? str[\'CT_PWD_STR_SwitchToCredPicker_Link\'] : str[\'CT_PWD_STR_SwitchToCredPicker_Li

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49722	216.58.215.238	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:30 UTC	1	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:31 UTC	3	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-bD_YrNnYKH0qDIXcKP37dw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 31 Aug 2022 14:45:31 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5721 X-Daystart: 27931 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-31 14:45:31 UTC	4	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 37 32 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 37 39 33 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5721" elapsed_seconds="27931"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-08-31 14:45:31 UTC	4	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></g
2022-08-31 14:45:31 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.5	49904	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:29 UTC	606	OUT	GET /shared/1.0/content/js/oneDs_8363475333f6d315e7ae.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:29 UTC	607	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471724 Cache-Control: public, max-age=31536000 Content-MD5: UwrgfpGF/r6JSUQzMXfC0A== Content-Type: application/x-javascript Date: Wed, 31 Aug 2022 14:46:29 GMT Etag: 0x8DA45C8B34736C8 Last-Modified: Sat, 04 Jun 2022 01:22:32 GMT Server: ECAcc (frd/E2AE) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 99b0710c-801e-000e-06cd-a61f6b000000 x-ms-version: 2009-09-19 Content-Length: 83274 Connection: close
2022-08-31 14:46:29 UTC	608	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 74 2e 64 28 65 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d 29 Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,function(n,e,t){"use strict";t.r(e),t.d(e,"ValueKind",(function(){return r.e})),t.d(e,"EventLatency",(function(){return r.a})),t.d(e,"EventPersistence",(function(){return r.b})
2022-08-31 14:46:29 UTC	623	IN	Data Raw: 6e Data Ascii: n
2022-08-31 14:46:29 UTC	624	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 65 3a 65 26 26 45 28 65 2e 74 68 65 6e 29 3f 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 72 79 7b 65 2e 74 68 65 6e 28 6e 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 74 28 6e 29 7d 7d 29 29 3a 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 28 65 29 7d 29 29 7d 2c 6e 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 28 65 29 7d 29 29 7d 2c 6e 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 72 79 7b 66 6f 72 Data Ascii: ction(e){return e instanceof n?e:e&&E(e.then)?new n((function(n,t){try{e.then(n,t)}catch(n){t(n)}})):new n((function(n){n(e)}))},n.reject=function(e){return new n((function(n,t){t(e)}))},n.all=function(e){if(e&&e.length)return new n((function(n,t){try{for
2022-08-31 14:46:29 UTC	639	IN	Data Raw: 6f 66 20 65 21 3d 3d 4f 2e 6c 29 7b 69 66 28 74 29 7b 43 2e 73 65 74 43 6c 6f 63 6b 53 6b 65 77 28 74 5b 22 74 69 6d 65 2d 64 65 6c 74 61 2d 6d 69 6c 6c 69 73 22 5d 29 3b 76 61 72 20 67 3d 74 5b 22 6b 69 6c 6c 2d 64 75 72 61 74 69 6f 6e 22 5d 7c 7c 74 5b 22 6b 69 6c 6c 2d 64 75 72 61 74 69 6f 6e 2d 73 65 63 6f 6e 64 73 22 5d 3b 4f 62 6a 65 63 74 28 75 2e 61 29 28 6d 2e 73 65 74 4b 69 6c 6c 53 77 69 74 63 68 54 65 6e 61 6e 74 73 28 74 5b 22 6b 69 6c 6c 2d 74 6f 6b 65 6e 73 22 5d 2c 67 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4f 62 6a 65 63 74 28 75 2e 61 29 28 6f 2e 62 61 74 63 68 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 69 4b 65 79 28 29 3d 3d 3d 6e 29 7b 73 3d 73 7c 7c 5b 5d 3b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 30 29 3b Data Ascii: of e!==O.l){if(t){C.setClockSkew(t["time-delta-millis"]);var g=t["kill-duration"]\|\|t["kill-duration-seconds"];Object(u.a)(m.setKillSwitchTenants(t["kill-tokens"],g),(function(n){Object(u.a)(o.batches,(function(e){if(e.iKey()===n){s=s\|\|[];var t=e.split(0);
2022-08-31 14:46:29 UTC	655	IN	Data Raw: 3a 63 2e 61 2c 61 72 72 49 6e 64 65 78 4f 66 3a 63 2e 62 2c 61 72 72 4d 61 70 3a 63 2e 63 2c 61 72 72 52 65 64 75 63 65 3a 63 2e 64 2c 6f 62 6a 4b 65 79 73 3a 63 2e 42 2c 74 6f 49 53 4f 53 74 72 69 6e 67 3a 63 2e 4b 2c 69 73 52 65 61 63 74 4e 61 74 69 76 65 3a 61 2e 76 2c 69 73 53 74 72 69 6e 67 3a 63 2e 75 2c 69 73 4e 75 6d 62 65 72 3a 63 2e 73 2c 69 73 42 6f 6f 6c 65 61 6e 3a 63 2e 6c 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 63 2e 6f 2c 69 73 41 72 72 61 79 3a 63 2e 6b 2c 69 73 4f 62 6a 65 63 74 3a 63 2e 74 2c 73 74 72 54 72 69 6d 3a 63 2e 49 2c 69 73 44 6f 63 75 6d 65 6e 74 4f 62 6a 65 63 74 41 76 61 69 6c 61 62 6c 65 3a 68 2c 69 73 57 69 6e 64 6f 77 4f 62 6a 65 63 74 41 76 61 69 6c 61 62 6c 65 3a 70 2c 69 73 56 61 6c 75 65 41 73 73 69 67 6e 65 64 3a 6d 2c Data Ascii: :c.a,arrIndexOf:c.b,arrMap:c.c,arrReduce:c.d,objKeys:c.B,toISOString:c.K,isReactNative:a.v,isString:c.u,isNumber:c.s,isBoolean:c.l,isFunction:c.o,isArray:c.k,isObject:c.t,strTrim:c.I,isDocumentObjectAvailable:h,isWindowObjectAvailable:p,isValueAssigned:m,
2022-08-31 14:46:29 UTC	671	IN	Data Raw: 69 7a 65 Data Ascii: ize
2022-08-31 14:46:29 UTC	672	IN	Data Raw: 72 46 61 69 6c 65 64 3a 36 34 2c 54 72 61 63 6b 41 72 67 75 6d 65 6e 74 73 4e 6f 74 53 70 65 63 69 66 69 65 64 3a 36 35 2c 55 72 6c 54 6f 6f 4c 6f 6e 67 3a 36 36 2c 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 42 75 66 66 65 72 46 75 6c 6c 3a 36 37 2c 43 61 6e 6e 6f 74 41 63 63 65 73 73 43 6f 6f 6b 69 65 3a 36 38 2c 49 64 54 6f 6f 4c 6f 6e 67 3a 36 39 2c 49 6e 76 61 6c 69 64 45 76 65 6e 74 3a 37 30 2c 46 61 69 6c 65 64 4d 6f 6e 69 74 6f 72 41 6a 61 78 53 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 3a 37 31 2c 53 65 6e 64 42 72 6f 77 73 65 72 49 6e 66 6f 4f 6e 55 73 65 72 49 6e 69 74 3a 37 32 2c 50 6c 75 67 69 6e 45 78 63 65 70 74 69 6f 6e 3a 37 33 2c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 63 65 70 74 69 6f 6e 3a 37 34 2c 53 6e 69 70 70 65 74 53 63 72 69 Data Ascii: rFailed:64,TrackArgumentsNotSpecified:65,UrlTooLong:66,SessionStorageBufferFull:67,CannotAccessCookie:68,IdTooLong:69,InvalidEvent:70,FailedMonitorAjaxSetRequestHeader:71,SendBrowserInfoOnUserInit:72,PluginException:73,NotificationException:74,SnippetScri
2022-08-31 14:46:29 UTC	687	IN	Data Raw: 3d 3d 74 26 26 28 65 3d 28 4f 62 6a 65 63 74 28 73 2e 63 29 28 29 3c 3c 32 26 34 32 39 34 39 36 37 32 39 35 7c 33 26 65 29 3e 3e 3e 30 2c 74 3d 30 29 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 66 6f 72 28 76 61 72 20 6e 2c 65 3d 5b 22 30 22 2c 22 31 22 2c 22 32 22 2c 22 33 22 2c 22 34 22 2c 22 35 22 2c 22 36 22 2c 22 37 22 2c 22 38 22 2c 22 39 22 2c 22 61 22 2c 22 62 22 2c 22 63 22 2c 22 64 22 2c 22 65 22 2c 22 66 22 5d 2c 74 3d 22 22 2c 72 3d 30 3b 72 3c 34 3b 72 2b 2b 29 74 2b 3d 65 5b 31 35 26 28 6e 3d 4f 62 6a 65 63 74 28 73 2e 63 29 28 29 29 5d 2b 65 5b 6e 3e 3e 34 26 31 35 5d 2b 65 5b 6e 3e 3e 38 26 31 35 5d 2b 65 5b 6e 3e 3e 31 32 26 31 35 5d 2b 65 5b 6e 3e 3e 31 36 26 31 35 5d 2b 65 5b 6e 3e 3e 32 30 26 31 35 5d 2b 65 5b Data Ascii: ==t&&(e=(Object(s.c)()<<2&4294967295\|3&e)>>>0,t=0);return r}function O(){for(var n,e=["0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f"],t="",r=0;r<4;r++)t+=e[15&(n=Object(s.c)())]+e[n>>4&15]+e[n>>8&15]+e[n>>12&15]+e[n>>16&15]+e[n>>20&15]+e[

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.5	49903	52.98.175.2	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:29 UTC	689	OUT	GET /owa/prefetch.aspx?id=292841&mkt=EN-US HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:29 UTC	690	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: f6f2899d-9041-d4f7-b122-b6e22dca644e Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedFETarget: FR2P281CU001.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: ClientId=B7006793450E4ECF871F2E33BEF4282C; expires=Thu, 31-Aug-2023 14:46:29 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=B7006793450E4ECF871F2E33BEF4282C; expires=Thu, 31-Aug-2023 14:46:29 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 28-Feb-2023 14:46:29 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.5588.10&l:mouse; path=/ X-CalculatedBETarget: FR2P281MB0281.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.5588.10 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2022-08-31T14:46:29.974 X-BackEnd-End: 2022-08-31T14:46:29.975 X-DiagInfo: FR2P281MB0281 X-BEServer: FR2P281MB0281 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: FR3P281CA0048.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: FR2P281CA0018 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: HHN X-FEServer: FR3P281CA0048 Date: Wed, 31 Aug 2022 14:46:29 GMT Connection: close
2022-08-31 14:46:29 UTC	691	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.5	49905	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:30 UTC	694	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:30 UTC	695	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471724 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:30 GMT Etag: 0x8D7B00724D9E930 Last-Modified: Wed, 12 Feb 2020 22:01:42 GMT Server: ECAcc (frd/E2A0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 154007b0-701e-0073-4ccd-a6103e000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2022-08-31 14:46:30 UTC	696	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.5	49906	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:30 UTC	695	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:30 UTC	698	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471724 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:30 GMT Etag: 0x8D79ED29CF0C29A Last-Modified: Wed, 22 Jan 2020 00:32:50 GMT Server: ECAcc (frd/E2FB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 99146265-b01e-0055-3bcd-a688ae000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2022-08-31 14:46:30 UTC	698	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.5	49907	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:30 UTC	702	OUT	GET /shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:30 UTC	703	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471708 Cache-Control: public, max-age=31536000 Content-MD5: 6dTbAT1RVL9d6geobv3IJg== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:30 GMT Etag: 0x8D79ED29BA5E089 Last-Modified: Wed, 22 Jan 2020 00:32:48 GMT Server: ECAcc (frd/E2A9) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 46007be3-401e-0009-26cd-a607a7000000 x-ms-version: 2009-09-19 Content-Length: 1555 Connection: close
2022-08-31 14:46:30 UTC	703	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2c 30 61 37 2e 38 37 36 2c 37 2e 38 37 36 2c 30 2c 30 2c 31 2c 32 2e 31 32 36 2e 32 38 35 2c 38 2e 30 31 31 2c 38 2e 30 31 31 2c 30 2c 30 2c 31 2c 35 2e 35 38 39 2c 35 2e 35 38 39 2c 38 2e 30 37 32 2c 38 2e 30 37 32 2c 30 2c 30 2c 31 2c 30 2c 34 2e 32 35 32 2c 38 2e 30 31 31 2c 38 2e 30 31 31 2c 30 2c 30 2c 31 2d 35 2e 35 38 39 2c 35 2e 35 38 39 2c 38 2e 30 37 32 2c 38 2e 30 37 32 2c 30 2c 30 2c 31 2d 34 2e 32 35 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path d="M8,0a7.876,7.876,0,0,1,2.126.285,8.011,8.011,0,0,1,5.589,5.589,8.072,8.072,0,0,1,0,4.252,8.011,8.011,0,0,1-5.589,5.589,8.072,8.072,0,0,1-4.252

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.5	49909	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:30 UTC	705	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:30 UTC	706	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471718 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:30 GMT Etag: 0x8D8852A7FCCA219 Last-Modified: Tue, 10 Nov 2020 03:41:25 GMT Server: ECAcc (frd/E2FC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2be48fa6-401e-002e-44cd-a6613a000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2022-08-31 14:46:30 UTC	706	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.5	49913	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:31 UTC	708	OUT	GET /16.000.29527.5/images/favicon.ico HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:31 UTC	708	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 511419 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 31 Aug 2022 14:46:31 GMT Etag: 0x8DA8613FA2A96EF Last-Modified: Wed, 24 Aug 2022 21:02:38 GMT Server: ECAcc (frd/E2A4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2f528075-c01e-0049-40a1-b8fb05000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2022-08-31 14:46:31 UTC	709	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2022-08-31 14:46:31 UTC	725	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.5	49916	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:31 UTC	726	OUT	GET /16.000.29527.5/images/favicon.ico HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: logincdn.msauth.net
2022-08-31 14:46:31 UTC	726	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 511419 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 31 Aug 2022 14:46:31 GMT Etag: 0x8DA8613FA2A96EF Last-Modified: Wed, 24 Aug 2022 21:02:38 GMT Server: ECAcc (frd/E2A4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2f528075-c01e-0049-40a1-b8fb05000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2022-08-31 14:46:31 UTC	727	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2022-08-31 14:46:31 UTC	742	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.5	49917	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:31 UTC	726	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: logincdn.msauth.net
2022-08-31 14:46:31 UTC	744	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471725 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:31 GMT Etag: 0x8D79ED29CF0C29A Last-Modified: Wed, 22 Jan 2020 00:32:50 GMT Server: ECAcc (frd/E2FB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 99146265-b01e-0055-3bcd-a688ae000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2022-08-31 14:46:31 UTC	745	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.5	49918	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:31 UTC	748	OUT	GET /shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: logincdn.msauth.net
2022-08-31 14:46:31 UTC	748	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471709 Cache-Control: public, max-age=31536000 Content-MD5: 6dTbAT1RVL9d6geobv3IJg== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:31 GMT Etag: 0x8D79ED29BA5E089 Last-Modified: Wed, 22 Jan 2020 00:32:48 GMT Server: ECAcc (frd/E2A9) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 46007be3-401e-0009-26cd-a607a7000000 x-ms-version: 2009-09-19 Content-Length: 1555 Connection: close
2022-08-31 14:46:31 UTC	749	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2c 30 61 37 2e 38 37 36 2c 37 2e 38 37 36 2c 30 2c 30 2c 31 2c 32 2e 31 32 36 2e 32 38 35 2c 38 2e 30 31 31 2c 38 2e 30 31 31 2c 30 2c 30 2c 31 2c 35 2e 35 38 39 2c 35 2e 35 38 39 2c 38 2e 30 37 32 2c 38 2e 30 37 32 2c 30 2c 30 2c 31 2c 30 2c 34 2e 32 35 32 2c 38 2e 30 31 31 2c 38 2e 30 31 31 2c 30 2c 30 2c 31 2d 35 2e 35 38 39 2c 35 2e 35 38 39 2c 38 2e 30 37 32 2c 38 2e 30 37 32 2c 30 2c 30 2c 31 2d 34 2e 32 35 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><title>assets</title><path d="M8,0a7.876,7.876,0,0,1,2.126.285,8.011,8.011,0,0,1,5.589,5.589,8.072,8.072,0,0,1,0,4.252,8.011,8.011,0,0,1-5.589,5.589,8.072,8.072,0,0,1-4.252

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49726	31.22.4.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:31 UTC	6	OUT	GET /c3ZjQHN0b25lcmdyb3VwLmNvbQ== HTTP/1.1 Host: dutarayamakmur.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:31 UTC	7	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 14:45:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=69f4e58d6435b4ef6ef401f4eacb1429; path=/
2022-08-31 14:45:31 UTC	7	IN	Data Raw: 37 65 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 6c 6d 6f 2e 75 6e 69 76 65 72 73 61 6c 69 6f 67 69 63 2e 63 6f 6d 2f 3f 75 73 65 72 6e 61 6d 65 3d 73 76 63 40 73 74 6f 6e 65 72 67 72 6f 75 70 2e 63 6f 6d 22 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a Data Ascii: 7e<script type="text/javascript">window.location.href = "https://lmo.universaliogic.com/?username=svc@stonergroup.com"</script>
2022-08-31 14:45:31 UTC	7	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.5	49919	192.229.221.185	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:32 UTC	751	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: logincdn.msauth.net
2022-08-31 14:46:32 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471726 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:32 GMT Etag: 0x8D7B00724D9E930 Last-Modified: Wed, 12 Feb 2020 22:01:42 GMT Server: ECAcc (frd/E2A0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 154007b0-701e-0073-4ccd-a6103e000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2022-08-31 14:46:32 UTC	752	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.5	49889	52.98.213.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:33 UTC	753	OUT	GET /owa/?nlp=1&signup=1 HTTP/1.1 Host: outlook.live.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; MSFPC=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; OWAPF=p:11111111&v:15.20.5566.21&l:mouse&; logonLatency=LGN01=637975539837445397; exchangecookie=534d8faa8e714f788c0ecd2363c9b10d; RpsCsrfState.ngjoP4g0Pxw3ld7th5oHWVgyEjVTUBS6CGCV5dKU1nc=70b1504b-a812-7672-c757-76dae1b0d8b4; X-OWA-RedirectHistory=AhR7n8MBFSVmk1-L2gg
2022-08-31 14:46:33 UTC	754	IN	HTTP/1.1 302 Content-Length: 452 Content-Type: text/html; charset=utf-8 Location: https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26signup%3d1%26RpsCsrfState%3d70b1504b-a812-7672-c757-76dae1b0d8b4&id=292841&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015 Server: Microsoft-IIS/10.0 request-id: 769a71b6-085b-5b75-e842-d29726d11a9a Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedFETarget: DB6PR0201CU001.internal.outlook.com X-BackEndHttpStatus: 302 Set-Cookie: RoutingKeyCookie=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: HostSwitchPrg=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: logonLatency=LGN01=637975539937300831; domain=live.com; path=/; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: HostSwitchPrg=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Mon, 31-Aug-1992 14:46:33 GMT; path=/; secure Set-Cookie: logonLatency=LGN01=637975539937300831; domain=live.com; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=Aul4zjoBX9FZmV-L2gg\|AhR7n8MBFSVmk1-L2gg; expires=Wed, 31-Aug-2022 20:48:33 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: DB7PR06MB5723.eurprd06.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-Content-Type-Options: nosniff X-BeSku: WCS5 X-OWA-DiagnosticsInfo: 2;0;0 X-IIDs: 0 X-BackEnd-Begin: 2022-08-31T14:46:33.730 X-BackEnd-End: 2022-08-31T14:46:33.730 X-DiagInfo: DB7PR06MB5723 X-BEServer: DB7PR06MB5723 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: AS9PR06CA0684.EURPRD06.PROD.OUTLOOK.COM X-FEEFZInfo: DHR X-FEServer: DB6PR0201CA0002 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DHR"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: DHR X-FEServer: AS9PR06CA0684 Date: Wed, 31 Aug 2022 14:46:33 GMT Connection: close
2022-08-31 14:46:33 UTC	757	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 6c 69 76 65 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 6c 63 69 64 3d 31 30 33 33 26 61 6d 70 3b 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 61 6d 70 3b 72 70 73 6e 76 3d 31 33 26 61 6d 70 3b 63 74 3d 31 36 36 31 39 35 37 31 39 33 26 61 6d 70 3b 72 76 65 72 3d 37 2e 30 2e 36 37 33 37 2e 30 26 61 6d 70 3b 77 70 3d 4d 42 49 5f 53 53 4c 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6c 69 76 65 2e 63 6f 6d 25 32 66 6f 77 61 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://signup.live.com/signup?lcid=1033&wa=wsignin1.0&rpsnv=13&ct=1661957193&rver=7.0.6737.0&wp=MBI_SSL&wreply=https%3a%2f%2foutlook.live.com%2fowa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.5	49896	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:37 UTC	757	OUT	GET /converged_ux_v2_u77h9aLlpCTRkWpDDpAa0Q2.css?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:37 UTC	758	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470979 Cache-Control: public, max-age=31536000 Content-MD5: gEjLXvpzruHh9T06FIYDvg== Content-Type: text/css Date: Wed, 31 Aug 2022 14:46:37 GMT Etag: 0x8DA74C345A6EDF6 Last-Modified: Tue, 02 Aug 2022 20:12:06 GMT Server: ECAcc (frd/E311) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f463e68b-d01e-0027-5ccf-a6b818000000 x-ms-version: 2009-09-19 Content-Length: 95362 Connection: close
2022-08-31 14:46:37 UTC	759	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2022-08-31 14:46:37 UTC	775	IN	Data Raw: 2d Data Ascii: -
2022-08-31 14:46:37 UTC	775	IN	Data Raw: 65 72 72 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2e 68 61 73 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 2c 69 6e 70 75 74 3a 3a 2d 6d 73 2d 72 65 76 65 61 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 69 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 3a 68 6f 76 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 73 2d 72 65 76 65 61 6c 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d Data Ascii: error input[type="text"],input[type="text"].has-error{border-color:#e81123}input::-ms-clear,input::-ms-reveal{height:100%;padding:4px 8px;margin-right:-8px;margin-left:4px;color:rgba(0,0,0,0.6)}input::-ms-clear:hover,input::-ms-reveal:hover{color:#0078d7}
2022-08-31 14:46:37 UTC	791	IN	Data Raw: 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 49 45 5f 4d 37 20 2e 63 5f 69 6e 6d 69 64 64 6c 65 5f 61 72 65 61 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 49 45 5f 4d 37 20 2e 72 6f 77 2c 2e 49 45 5f 4d 37 20 64 69 76 23 69 53 68 6f 77 53 65 6e 64 48 6f 6c 64 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 49 45 5f 4d 37 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 49 45 5f 4d 37 20 2e 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 62 Data Ascii: ,"Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.IE_M7 .c_inmiddle_area{padding-bottom:20px}.IE_M7 .row,.IE_M7 div#iShowSendHolder{clear:both}.IE_M7 ul{margin-left:0}.IE_M7 .modal .modal-content{padding-b
2022-08-31 14:46:37 UTC	807	IN	Data Raw: 65 61 72 63 68 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 6c 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 75 72 6c 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 77 65 65 6b 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 73 65 6c 65 63 74 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 Data Ascii: earch"],body.cb.cbTheme_Skype input[type="tel"],body.cb.cbTheme_Skype input[type="text"],body.cb.cbTheme_Skype input[type="time"],body.cb.cbTheme_Skype input[type="url"],body.cb.cbTheme_Skype input[type="week"],body.cb.cbTheme_Skype select,body.cb.cbTheme
2022-08-31 14:46:37 UTC	823	IN	Data Raw: 7d 2e 6d 69 64 64 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6e 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 78 2d 77 69 64 74 68 3a 34 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 30 70 78 29 3b 70 61 64 64 69 6e 67 3a 34 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 2d 6d 6f 7a 2d 62 Data Ascii: }.middle{display:table-cell;vertical-align:middle}.inner{margin-left:auto;margin-right:auto;position:relative;max-width:440px;width:calc(100% - 40px);padding:44px;margin-bottom:28px;background-color:#fff;-webkit-box-shadow:0 2px 6px rgba(0,0,0,0.2);-moz-b
2022-08-31 14:46:37 UTC	839	IN	Data Raw: 65 3a 31 2e Data Ascii: e:1.
2022-08-31 14:46:37 UTC	839	IN	Data Raw: 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 22 52 6f 62 6f 74 6f 22 2c 22 45 62 72 69 6d 61 22 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 22 47 61 64 75 67 69 22 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c Data Ascii: 5rem;font-weight:600;padding:0;margin-top:16px;margin-bottom:12px;font-family:"Segoe UI","Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskool

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.5	49930	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:38 UTC	852	OUT	GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:38 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470558 Cache-Control: public, max-age=31536000 Content-MD5: tZ45+ZIcr8oUnrloW1H2Vg== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:38 GMT Etag: 0x8DA74C360A43D5B Last-Modified: Tue, 02 Aug 2022 20:12:51 GMT Server: ECAcc (frd/E30C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 613cc92d-f01e-0033-6dd0-a6ec9c000000 x-ms-version: 2009-09-19 Content-Length: 22961 Connection: close
2022-08-31 14:46:38 UTC	946	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 74 2c 6e 29 7b 65 26 26 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 3a 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 4f 72 53 65 74 50 72 6f 70 73 4f 6e 45 6c 65 6d 65 6e 74 73 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 5f 66 6f 72 45 61 63 68 4b 65 79 28 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 73 3d 30 2c 69 3d 65 Data Ascii: function _addEventListener(e,t,n){e&&e.addEventListener?e.addEventListener(t,n):e&&e instanceof HTMLElement&&e.attachEvent&&e.attachEvent("on"+t,n)}function _getOrSetPropsOnElements(e,t,n,r){if("object"==typeof t){_forEachKey(t,function(n){for(var s=0,i=e
2022-08-31 14:46:38 UTC	961	IN	Data Raw: 73 29 2c 74 3d 30 2c 6e 3d 74 68 69 73 2e 65 6c 65 6d 73 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 74 5d 3b 0a 45 76 65 6e 74 53 68 69 6d 2e 4f 6e 65 28 72 2c 65 2e 65 76 65 6e 74 4d 61 70 2c 65 2e 73 65 6c 65 63 74 6f 72 2c 65 2e 64 61 74 61 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 73 3d 74 68 69 73 2e 65 6c 65 6d 73 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 73 5b 72 5d 3b 45 76 65 6e 74 53 68 69 6d 2e 54 72 69 67 67 65 72 28 69 2c 65 2c 74 2c 6e 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 48 Data Ascii: s),t=0,n=this.elems;t<n.length;t++){var r=n[t];EventShim.One(r,e.eventMap,e.selector,e.data)}return this},e.prototype.trigger=function(e,t,n){for(var r=0,s=this.elems;r<s.length;r++){var i=s[r];EventShim.Trigger(i,e,t,n)}return this},e.prototype.triggerH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.5	49931	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:38 UTC	852	OUT	GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:38 UTC	855	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2469359 Cache-Control: public, max-age=31536000 Content-MD5: o3vbuPQYpAFMmawTk+WKWA== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:38 GMT Etag: 0x8DA74C360D13A6A Last-Modified: Tue, 02 Aug 2022 20:12:51 GMT Server: ECAcc (frd/E2AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: dcb34f38-201e-007b-70d3-a63711000000 x-ms-version: 2009-09-19 Content-Length: 80144 Connection: close
2022-08-31 14:46:38 UTC	856	IN	Data Raw: 2f 2a 21 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c Data Ascii: /*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the l
2022-08-31 14:46:38 UTC	888	IN	Data Raw: 75 Data Ascii: u
2022-08-31 14:46:38 UTC	897	IN	Data Raw: 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 51 2e 66 6e 3d 7a 3b 61 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 55 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 7d 3b 61 2e 62 28 22 73 75 62 73 63 72 69 62 61 62 6c 65 22 2c 61 2e 51 29 3b 61 2e 62 28 22 69 73 53 75 62 73 63 72 69 62 61 62 6c 65 22 2c 61 2e 48 62 29 3b 61 2e 5a 3d 61 2e 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 63 2e 70 75 73 68 28 65 29 3b 65 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 65 3d 63 2e 70 6f 70 28 29 7d 76 61 72 20 63 3d 5b 5d 2c 65 Data Ascii: nction.prototype);a.Q.fn=z;a.Hb=function(a){return null!=a&&"function"==typeof a.U&&"function"==typeof a.notifySubscribers};a.b("subscribable",a.Q);a.b("isSubscribable",a.Hb);a.Z=a.k=function(){function b(a){c.push(e);e=a}function d(){e=c.pop()}var c=[],e
2022-08-31 14:46:38 UTC	968	IN	Data Raw: 65 6f 66 20 61 2e 4e 3f 62 3a 6e 65 77 20 61 2e 4e 28 62 29 7d 61 2e 64 3d 7b 7d 3b 76 61 72 20 78 3d 7b 73 63 72 69 70 74 3a 21 30 2c 74 65 78 74 61 72 65 61 3a 21 30 7d 3b 61 2e 67 65 74 42 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 64 5b 62 5d 7d 3b 0d 0a 61 2e 4e 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 67 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 21 61 2e 46 28 62 29 2c 6d 2c 6c 3d 61 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 66 3f 62 28 29 3a 62 2c 68 3d 61 2e 61 2e 63 28 6d 29 3b 63 3f 28 63 2e 4b 26 26 63 2e 4b 28 29 2c 61 2e 61 2e 65 78 74 65 6e 64 28 65 2c 63 29 2c 6c 26 26 28 65 2e 4b 3d 6c Data Ascii: eof a.N?b:new a.N(b)}a.d={};var x={script:!0,textarea:!0};a.getBindingHandler=function(b){return a.d[b]};a.N=function(b,c,d,g){var e=this,f="function"==typeof b&&!a.F(b),m,l=a.j(function(){var m=f?b():b,h=a.a.c(m);c?(c.K&&c.K(),a.a.extend(e,c),l&&(e.K=l
2022-08-31 14:46:38 UTC	984	IN	Data Raw: 61 74 61 28 22 69 73 52 65 77 72 69 74 74 65 6e 22 2c 21 30 29 7d 3b 61 2e 62 28 22 74 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 61 2e 4a 29 3b 61 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 2c 63 2c 64 2c 68 29 7b 62 3d 61 2e 68 2e 62 62 28 62 29 3b 66 6f 72 28 76 61 72 20 6c 3d 61 2e 68 2e 6b 61 2c 67 3d 30 3b 67 3c 62 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6d 3d 62 5b 67 5d 2e 6b 65 79 3b 69 66 28 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6d 29 29 7b 76 61 72 20 78 3d 6c 5b 6d 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 78 29 7b 69 66 28 6d 3d 0d 0a 78 28 62 5b 67 5d 2e 76 61 6c 75 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 29 3b 7d 65 6c 73 65 20 69 66 28 Data Ascii: ata("isRewritten",!0)};a.b("templateEngine",a.J);a.kb=function(){function b(b,c,d,h){b=a.h.bb(b);for(var l=a.h.ka,g=0;g<b.length;g++){var m=b[g].key;if(l.hasOwnProperty(m)){var x=l[m];if("function"===typeof x){if(m=x(b[g].value))throw Error(m);}else if(
2022-08-31 14:46:38 UTC	1000	IN	Data Raw: 73 68 28 62 29 2c 63 2e 6f 70 74 69 6f 6e 73 2e 6c 69 76 65 26 26 6e 2e 69 73 4f 62 73 65 72 76 61 62 6c 65 41 72 72 61 79 28 62 29 26 26 63 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 70 75 73 68 28 62 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 67 72 61 70 68 4d 6f 6e 69 74 6f 72 2e 76 61 6c 75 65 48 61 73 4d 75 74 61 74 65 64 28 29 7d 29 29 29 2c 67 26 26 21 67 2e 5f 64 65 73 74 72 6f 79 26 26 28 6e 2e 69 73 41 72 72 61 79 28 67 29 3f 66 3d 67 3a 6e 2e 69 73 4f 62 6a 65 63 74 28 67 29 26 26 28 66 3d 6e 2e 76 61 6c 75 65 73 28 67 29 29 29 2c 30 21 3d 3d 64 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 21 62 7c 7c 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 2e 69 73 43 6f 6d 70 75 74 65 64 28 62 29 Data Ascii: sh(b),c.options.live&&n.isObservableArray(b)&&c.subscriptions.push(b.subscribe(function(){c.graphMonitor.valueHasMutated()}))),g&&!g._destroy&&(n.isArray(g)?f=g:n.isObject(g)&&(f=n.values(g))),0!==d&&n.forEach(f,function(b){!b\|\|b.nodeType\|\|a.isComputed(b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.5	49932	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:38 UTC	853	OUT	GET /lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:38 UTC	854	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470937 Cache-Control: public, max-age=31536000 Content-MD5: +v9Yu4dBC40sInjoTPM11Q== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:38 GMT Etag: 0x8DA74C364D7FF97 Last-Modified: Tue, 02 Aug 2022 20:12:58 GMT Server: ECAcc (frd/E30A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2836d031-a01e-0059-21cf-a6442d000000 x-ms-version: 2009-09-19 Content-Length: 26098 Connection: close
2022-08-31 14:46:38 UTC	872	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 24 43 6f 6e 66 69 67 22 29 2c 24 43 6f 6e 66 69 67 2e 73 68 61 72 65 64 53 74 72 69 6e 67 73 3d 7b 22 65 72 72 6f 72 73 22 3a 7b 22 72 65 71 75 69 72 65 64 22 3a 22 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 65 6d 61 69 6c 52 65 71 75 69 72 65 64 22 3a 22 41 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 70 68 6f 6e 65 52 65 71 75 69 72 65 64 22 3a 22 41 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 70 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 22 3a 22 41 20 70 61 73 73 77 6f 72 64 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 69 Data Ascii: !function(){registerNamespace("$Config"),$Config.sharedStrings={"errors":{"required":"This information is required.","emailRequired":"An email address is required","phoneRequired":"A phone number is required","passwordRequired":"A password is required","i
2022-08-31 14:46:38 UTC	888	IN	Data Raw: 61 6d 65 22 3a 22 53 75 64 61 6e 22 2c 22 69 73 6f 22 3a 22 53 44 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 35 39 37 22 2c 22 6e 61 6d 65 22 3a 22 53 75 72 69 6e 61 6d 65 22 2c 22 69 73 6f 22 3a 22 53 52 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 34 37 22 2c 22 6e 61 6d 65 22 3a 22 53 76 61 6c 62 61 72 64 22 2c 22 69 73 6f 22 3a 22 53 4a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 36 38 22 2c 22 6e 61 6d 65 22 3a 22 53 77 61 7a 69 6c 61 6e 64 22 2c 22 69 73 6f 22 3a 22 53 5a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 34 36 22 2c 22 6e 61 6d 65 22 3a 22 53 77 65 64 65 6e 22 2c 22 69 73 6f 22 3a 22 53 45 22 2c 22 69 6e 45 55 22 3a 21 30 7d 2c 7b 22 63 6f 64 65 22 3a 22 34 31 22 2c 22 6e 61 6d 65 22 3a 22 53 77 69 74 7a 65 72 6c 61 6e 64 22 2c 22 69 73 6f 22 3a 22 43 48 22 7d 2c 7b Data Ascii: ame":"Sudan","iso":"SD"},{"code":"597","name":"Suriname","iso":"SR"},{"code":"47","name":"Svalbard","iso":"SJ"},{"code":"268","name":"Swaziland","iso":"SZ"},{"code":"46","name":"Sweden","iso":"SE","inEU":!0},{"code":"41","name":"Switzerland","iso":"CH"},{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.5	49929	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:38 UTC	853	OUT	GET /lightweightsignuppackage_89wF0Xwfu7FmoF_uu5VFtA2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:38 UTC	913	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1784022 Cache-Control: public, max-age=31536000 Content-MD5: RmyBWiMwU0AyJmv33J2z4Q== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:38 GMT Etag: 0x8DA7A91A0BB6B7E Last-Modified: Wed, 10 Aug 2022 05:31:51 GMT Server: ECAcc (frd/E2BF) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 76c1bdc5-401e-000f-4f0e-ade166000000 x-ms-version: 2009-09-19 Content-Length: 201793 Connection: close
2022-08-31 14:46:38 UTC	914	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 45 6e 63 72 79 70 74 28 65 2c 74 2c 6e 2c 61 29 7b 76 61 72 20 6f 3d 5b 5d 3b 73 77 69 74 63 68 28 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 63 68 67 73 71 73 61 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 53 41 44 61 74 61 28 65 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 68 67 70 77 64 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 4e 65 77 41 6e 64 4f 6c 64 50 77 64 28 65 2c 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 77 64 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 Data Ascii: function Encrypt(e,t,n,a){var o=[];switch(n.toLowerCase()){case"chgsqsa":if(null==e\|\|null==t){return null}o=PackageSAData(e,t);break;case"chgpwd":if(null==e\|\|null==a){return null}o=PackageNewAndOldPwd(e,a);break;case"pwd":if(null==e){return null}o=Package
2022-08-31 14:46:38 UTC	929	IN	Data Raw: 64 54 65 78 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 0a 7d 76 61 72 20 74 3b 74 72 79 7b 74 3d 65 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2e 67 65 74 52 61 6e 67 65 41 74 28 30 29 7d 63 61 74 63 68 28 6e 29 7b 74 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 7d 72 65 74 75 72 6e 20 74 7d 2c 22 72 65 70 6c 61 63 65 51 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 22 28 5b 3f 7c 26 5d 29 22 2b 74 2b 22 3d 28 5b 5e 26 5d 2b 29 22 2c 6f 3d 6e 65 77 20 52 65 67 45 78 70 28 61 2c 22 69 22 29 2c 69 3d 65 2c 72 3d 22 Data Ascii: dText":function(){if(document.selection){return document.selection.createRange()}var t;try{t=e.getSelection().getRangeAt(0)}catch(n){t=e.document.createRange()}return t},"replaceQs":function(e,t,n){var a="([?\|&])"+t+"=([^&]+)",o=new RegExp(a,"i"),i=e,r="
2022-08-31 14:46:38 UTC	1014	IN	Data Raw: 63 74 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 68 2b 64 74 29 2c 63 74 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 63 74 69 6f 6e 22 2c 22 23 22 29 2c 63 74 5b 30 5d 2e 6f 6e 73 75 62 6d 69 74 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 2c 63 74 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 3b 0a 76 61 72 20 74 3d 47 28 29 3b 66 6f 72 28 6c 61 62 65 6c 20 69 6e 20 74 29 7b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 61 62 65 6c 29 26 26 63 74 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6c 61 62 65 6c 2c 74 5b 6c 61 62 65 6c 5d 29 7d 69 66 28 63 74 2e 61 70 70 65 6e 64 28 65 29 2c 30 3d 3d 3d 24 50 61 67 65 48 65 6c Data Ascii: ct[0].setAttribute("id",h+dt),ct[0].setAttribute("action","#"),ct[0].onsubmit="return false;",ct[0].setAttribute("novalidate","novalidate");var t=G();for(label in t){t.hasOwnProperty(label)&&ct[0].setAttribute(label,t[label])}if(ct.append(e),0===$PageHel
2022-08-31 14:46:38 UTC	1030	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 22 3a 66 2e 6d 61 72 63 68 69 6e 67 41 6e 74 73 57 68 69 74 65 7d 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 30 29 7b 69 66 28 65 2e 73 68 6f 77 28 29 2c 24 50 61 67 65 48 65 6c 70 65 72 2e 71 75 65 72 79 41 6c 6c 28 22 5b 64 61 74 61 2d 69 64 3d 27 6d 61 72 63 68 69 6e 67 41 6e 74 73 27 5d 22 2c 65 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 61 3b 73 77 69 74 63 68 28 79 3d 79 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 6e 28 29 29 2c 74 29 7b 63 61 73 65 20 6c 2e 4c 69 67 68 74 62 6f 78 3a 61 3d 76 3f 77 3a 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 6c 2e 43 6f 6e 74 65 6e 74 3a 61 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 70 72 6f 67 72 Data Ascii: ackground":f.marchingAntsWhite}):""}function a(e,t){if(e.length>0){if(e.show(),$PageHelper.queryAll("[data-id='marchingAnts']",e).length>0){return}var a;switch(y=y.replace("{0}",n()),t){case l.Lightbox:a=v?w:y;break;case l.Content:a='<div class="row progr
2022-08-31 14:46:38 UTC	1046	IN	Data Raw: 6e 7b 22 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 22 3a 21 30 7d 7d 2c 22 75 70 64 61 74 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 2c 6f 29 7b 7b 76 61 72 20 69 3d 6e 75 6c 6c 2c 72 3d 74 28 29 3b 6b 6f 2e 75 74 69 6c 73 2e 75 6e 77 72 61 70 4f 62 73 65 72 76 61 62 6c 65 28 72 29 7d 69 66 28 72 2e 69 73 4d 6f 64 69 66 69 65 64 28 29 26 26 21 72 2e 69 73 56 61 6c 69 64 28 29 26 26 28 69 3d 72 2e 65 72 72 6f 72 29 2c 21 72 2e 69 73 4d 6f 64 69 66 69 65 64 28 29 26 26 72 2e 73 65 72 76 65 72 45 72 72 6f 72 26 26 28 69 3d 72 2e 73 65 72 76 65 72 45 72 72 6f 72 29 2c 6b 6f 2e 75 74 69 6c 73 2e 73 65 74 48 74 6d 6c 28 65 2c 69 29 2c 6e 2e 68 61 73 28 22 63 68 69 6c 64 42 69 6e 64 69 6e 67 73 22 29 29 7b 76 61 Data Ascii: n{"controlsDescendantBindings":!0}},"update":function(e,t,n,a,o){{var i=null,r=t();ko.utils.unwrapObservable(r)}if(r.isModified()&&!r.isValid()&&(i=r.error),!r.isModified()&&r.serverError&&(i=r.serverError),ko.utils.setHtml(e,i),n.has("childBindings")){va
2022-08-31 14:46:38 UTC	1062	IN	Data Raw: 6c 54 65 78 74 22 2c 22 6f 70 74 69 6e 45 6d 61 69 6c 43 68 65 63 6b 62 6f 78 22 2c 22 73 65 63 6f 6e 64 4f 70 74 69 6e 45 6d 61 69 6c 43 68 65 63 6b 62 6f 78 22 5d 2c 22 73 74 65 70 43 6f 75 6e 74 65 72 22 3a 47 2e 63 72 65 64 65 6e 74 69 61 6c 73 53 74 65 70 2c 22 74 6f 74 61 6c 53 74 65 70 73 22 3a 47 2e 74 6f 74 61 6c 53 74 65 70 7d 2c 22 66 6f 63 75 73 46 69 72 73 74 49 6e 70 75 74 22 3a 31 2c 22 6f 70 74 49 6e 45 6d 61 69 6c 49 64 22 3a 22 69 4f 70 74 69 6e 45 6d 61 69 6c 22 2c 22 73 65 63 6f 6e 64 4f 70 74 69 6e 45 6d 61 69 6c 49 64 22 3a 22 69 53 65 63 6f 6e 64 4f 70 74 69 6e 45 6d 61 69 6c 22 2c 22 70 61 67 65 42 61 63 6b 41 63 74 69 6f 6e 22 3a 6f 74 7c 7c 71 7c 7c 65 74 7c 7c 47 2e 73 68 6f 77 4d 6f 6a 61 6e 67 55 70 67 72 61 64 65 53 70 65 65 Data Ascii: lText","optinEmailCheckbox","secondOptinEmailCheckbox"],"stepCounter":G.credentialsStep,"totalSteps":G.totalStep},"focusFirstInput":1,"optInEmailId":"iOptinEmail","secondOptinEmailId":"iSecondOptinEmail","pageBackAction":ot\|\|q\|\|et\|\|G.showMojangUpgradeSpee
2022-08-31 14:46:38 UTC	1063	IN	Data Raw: 70 65 65 64 62 75 6d 70 22 3a 7b 22 70 61 67 65 49 64 22 3a 52 2e 53 69 67 6e 75 70 5f 55 73 65 72 6e 61 6d 65 52 65 63 6f 76 65 72 79 53 70 65 65 64 62 75 6d 70 50 61 67 65 5f 43 6c 69 65 6e 74 2c 22 73 65 63 74 69 6f 6e 49 64 22 3a 22 55 73 65 72 6e 61 6d 65 52 65 63 6f 76 65 72 79 53 70 65 65 64 62 75 6d 70 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 4b 7c 7c 58 3f 22 53 69 67 6e 75 70 43 6f 6e 74 72 6f 6c 22 3a 22 53 69 67 6e 75 70 43 72 65 61 74 65 43 6f 6e 74 72 6f 6c 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 76 69 65 77 4d 6f 64 65 6c 22 3a 22 53 69 67 6e 75 70 56 69 65 77 4d 6f 64 65 6c 22 2c 22 76 69 65 77 4d 6f 64 65 6c 4f 70 74 69 6f 6e 73 22 3a 7b 22 6f 62 73 65 72 76 61 62 6c 65 73 22 3a 5b 22 75 73 65 72 6e 61 6d 65 52 65 63 6f 76 65 72 79 53 70 65 Data Ascii: peedbump":{"pageId":R.Signup_UsernameRecoverySpeedbumpPage_Client,"sectionId":"UsernameRecoverySpeedbump","control":K\|\|X?"SignupControl":"SignupCreateControl","options":{"viewModel":"SignupViewModel","viewModelOptions":{"observables":["usernameRecoverySpe
2022-08-31 14:46:38 UTC	1079	IN	Data Raw: 61 74 65 64 7c 7c 64 65 6c 65 74 65 20 57 2e 6f 70 74 69 6f 6e 73 2e 76 69 65 77 44 65 66 73 2e 70 61 73 73 77 6f 72 64 0a 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 65 2e 77 4c 69 76 65 2c 6e 3d 74 2e 41 63 63 6f 75 6e 74 3b 24 50 61 67 65 48 65 6c 70 65 72 2e 6f 6e 4c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 6f 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 72 65 67 69 73 74 65 72 28 22 63 6f 6e 76 65 72 67 65 64 54 6f 75 50 72 69 76 61 63 79 22 2c 7b 22 76 69 65 77 4d 6f 64 65 6c 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 22 73 79 6e 63 68 72 6f 6e 6f 75 73 22 3a 21 30 2c 22 74 65 6d 70 6c 61 74 65 22 3a 24 43 6f 6e 66 69 67 2e 57 4c 58 41 63 63 6f 75 6e 74 2e 73 69 67 6e 75 70 2e Data Ascii: ated\|\|delete W.options.viewDefs.password}(),function(){var e=window,t=e.wLive,n=t.Account;$PageHelper.onLoad(function(){ko.components.register("convergedTouPrivacy",{"viewModel":function(e){return e},"synchronous":!0,"template":$Config.WLXAccount.signup.
2022-08-31 14:46:38 UTC	1095	IN	Data Raw: 29 2c 6f 2e 66 74 72 56 69 65 77 4d 6f 64 65 6c 48 61 6e 64 6c 65 26 26 28 6f 2e 66 74 72 56 69 65 77 4d 6f 64 65 6c 48 61 6e 64 6c 65 2e 62 75 74 74 6f 6e 73 2e 62 61 63 6b 42 75 74 74 6f 6e 2e 76 69 73 69 62 6c 65 28 21 31 29 2c 6f 2e 66 74 72 56 69 65 77 4d 6f 64 65 6c 48 61 6e 64 6c 65 2e 62 75 74 74 6f 6e 73 2e 6e 65 78 74 42 75 74 74 6f 6e 2e 76 69 73 69 62 6c 65 28 21 31 29 29 7d 7d 2c 63 2e 73 65 74 4f 70 74 69 6f 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6b 6f 2e 61 70 70 6c 79 42 69 6e 64 69 6e 67 73 54 6f 4e 6f 64 65 28 65 2c 7b 22 61 74 74 72 22 3a 7b 22 64 61 74 61 2d 76 61 6c 75 65 22 3a 74 2e 69 73 6f 7d 7d 2c 74 29 0a 7d 2c 63 2e 6f 6e 50 69 63 6b 53 75 67 67 65 73 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 Data Ascii: ),o.ftrViewModelHandle&&(o.ftrViewModelHandle.buttons.backButton.visible(!1),o.ftrViewModelHandle.buttons.nextButton.visible(!1))}},c.setOptionData=function(e,t){ko.applyBindingsToNode(e,{"attr":{"data-value":t.iso}},t)},c.onPickSuggestion=function(e){if
2022-08-31 14:46:38 UTC	1111	IN	Data Raw: 5d 0a 7d 2c 22 70 61 72 61 6d 73 22 3a 70 2e 76 69 65 77 43 6f 6e 74 65 78 74 2e 64 61 74 61 2e 69 6e 70 75 74 5b 79 2e 70 61 73 73 77 6f 72 64 2e 6e 61 6d 65 5d 2c 22 6d 65 73 73 61 67 65 22 3a 43 2e 70 61 73 73 77 6f 72 64 4e 6f 74 4d 61 74 63 68 7d 7d 29 2c 6e 2e 66 6f 63 75 73 65 64 3d 6b 6f 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 73 75 70 70 72 65 73 73 4d 65 73 73 61 67 65 73 3d 6b 6f 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 30 29 2c 6e 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 74 79 70 65 50 61 73 73 77 6f 72 64 2e 73 75 70 70 72 65 73 73 4d 65 73 73 61 67 65 73 28 21 31 29 7d 29 2c 74 2e 72 65 74 79 70 65 50 61 73 73 77 6f 72 64 3d 6e 2c 6e 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ]},"params":p.viewContext.data.input[y.password.name],"message":C.passwordNotMatch}}),n.focused=ko.observable(!1),n.suppressMessages=ko.observable(!0),n.subscribe(function(){t.retypePassword.suppressMessages(!1)}),t.retypePassword=n,n.subscribe(function(
2022-08-31 14:46:38 UTC	1127	IN	Data Raw: 70 61 72 61 6d 73 22 3a 21 30 2c 22 6d 65 73 73 61 67 65 22 3a 64 2e 69 6e 76 61 6c 69 64 42 69 72 74 68 44 61 74 65 7d 7d 29 7d 65 6c 73 65 7b 75 2e 62 69 72 74 68 64 61 74 65 2e 65 78 74 65 6e 64 28 7b 22 62 69 72 74 68 64 61 74 65 50 61 72 74 52 65 71 75 69 72 65 64 22 3a 7b 22 70 61 72 61 6d 73 22 3a 21 30 2c 22 6d 65 73 73 61 67 65 22 3a 64 2e 72 65 71 75 69 72 65 64 7d 2c 22 62 69 72 74 68 64 61 74 65 56 61 6c 69 64 22 3a 7b 22 70 61 72 61 6d 73 22 3a 21 30 2c 22 6d 65 73 73 61 67 65 22 3a 64 2e 69 6e 76 61 6c 69 64 42 69 72 74 68 44 61 74 65 7d 7d 29 7d 75 2e 62 69 72 74 68 64 61 74 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 28 75 2e 62 69 72 74 68 44 61 79 28 22 22 29 2c 75 2e 62 69 72 74 68 4d 6f 6e 74 68 28 22 22 29 2c 75 2e 62 69 72 74 68 59 65 61 Data Ascii: params":!0,"message":d.invalidBirthDate}})}else{u.birthdate.extend({"birthdatePartRequired":{"params":!0,"message":d.required},"birthdateValid":{"params":!0,"message":d.invalidBirthDate}})}u.birthdate.isValid()\|\|(u.birthDay(""),u.birthMonth(""),u.birthYea
2022-08-31 14:46:38 UTC	1143	IN	Data Raw: 6f 46 65 64 53 69 67 6e 49 6e 53 70 65 65 64 62 75 6d 70 2c 42 3d 21 67 26 26 64 26 26 28 64 2e 66 65 64 43 6f 6e 66 69 72 6d 50 61 67 65 44 65 73 63 7c 7c 64 2e 62 69 72 74 68 64 61 74 65 50 61 72 74 73 29 26 26 22 63 61 6e 63 65 6c 22 3d 3d 3d 6d 2e 70 61 67 65 42 61 63 6b 41 63 74 69 6f 6e 26 26 50 2c 4f 3d 21 67 26 26 64 26 26 64 2e 66 65 64 4e 61 6d 65 73 50 72 65 66 69 6c 6c 26 26 78 2c 4c 3d 21 67 26 26 22 46 65 64 53 69 67 6e 49 6e 53 70 65 65 64 62 75 6d 70 22 3d 3d 3d 6d 2e 73 65 63 74 69 6f 6e 49 64 26 26 63 2e 69 73 43 6f 6d 62 69 6e 65 64 53 49 53 55 56 32 26 26 79 2e 73 68 6f 75 6c 64 47 6f 54 6f 46 65 64 53 69 67 6e 49 6e 53 70 65 65 64 62 75 6d 70 2c 44 3d 30 21 3d 3d 75 2e 6e 6f 41 75 74 68 43 61 6e 63 65 6c 26 26 28 45 7c 7c 54 7c 7c 42 Data Ascii: oFedSignInSpeedbump,B=!g&&d&&(d.fedConfirmPageDesc\|\|d.birthdateParts)&&"cancel"===m.pageBackAction&&P,O=!g&&d&&d.fedNamesPrefill&&x,L=!g&&"FedSignInSpeedbump"===m.sectionId&&c.isCombinedSISUV2&&y.shouldGoToFedSignInSpeedbump,D=0!==u.noAuthCancel&&(E\|\|T\|\|B
2022-08-31 14:46:38 UTC	1159	IN	Data Raw: 2e 75 73 65 53 61 6d 65 53 69 74 65 29 3b 76 61 72 20 6f 3d 24 55 74 69 6c 69 74 79 2e 61 64 64 51 75 65 72 79 53 74 72 69 6e 67 28 70 2e 66 73 73 2e 6b 63 46 52 75 2c 22 6b 63 66 74 22 2c 74 2e 6b 63 66 74 29 3b 24 55 74 69 6c 69 74 79 2e 6e 61 76 69 67 61 74 65 54 6f 28 6f 29 7d 65 6c 73 65 7b 76 61 72 20 6f 3d 22 22 3b 6f 3d 70 2e 66 73 73 2e 69 73 57 69 6e 54 73 65 74 46 6c 6f 77 26 26 6e 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 66 73 73 2e 72 75 4f 6e 45 61 73 69 53 75 63 63 65 73 73 29 2e 66 6f 72 6d 61 74 28 65 2e 65 6e 63 72 79 70 74 65 64 4d 65 6d 62 65 72 4e 61 6d 65 29 3a 70 2e 66 73 73 2e 69 73 57 69 6e 54 73 65 74 46 6c 6f 77 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 66 73 73 2e 72 75 4f 6e 53 Data Ascii: .useSameSite);var o=$Utility.addQueryString(p.fss.kcFRu,"kcft",t.kcft);$Utility.navigateTo(o)}else{var o="";o=p.fss.isWinTsetFlow&&n?decodeURIComponent(p.fss.ruOnEasiSuccess).format(e.encryptedMemberName):p.fss.isWinTsetFlow?decodeURIComponent(p.fss.ruOnS
2022-08-31 14:46:38 UTC	1175	IN	Data Raw: 5d 2e 75 73 65 72 41 63 74 69 6f 6e 3d 6e 0a 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 26 26 79 5b 65 5d 29 7b 76 61 72 20 6e 3d 79 5b 65 5d 2e 75 73 65 72 41 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 69 66 28 6e 3d 3d 3d 74 29 7b 6e 3d 22 22 7d 65 6c 73 65 7b 76 61 72 20 61 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3b 2d 31 21 3d 3d 61 26 26 6e 2e 73 70 6c 69 63 65 28 61 2c 31 29 7d 79 5b 65 5d 2e 75 73 65 72 41 63 74 69 6f 6e 3d 6e 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 24 50 61 67 65 48 65 6c 70 65 72 2e 64 65 66 65 72 72 65 64 28 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 7b 22 70 68 6f 6e 65 22 3a 65 7d 3b 76 2e 4a 73 6f Data Ascii: ].userAction=n}}function r(e,t){if(null!=e&&"undefined"!=typeof e&&y[e]){var n=y[e].userAction;if(n){if(n===t){n=""}else{var a=n.indexOf(t);-1!==a&&n.splice(a,1)}y[e].userAction=n}}}function s(e){var t=$PageHelper.deferred();if(e){var n={"phone":e};v.Jso

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.5	49936	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:38 UTC	1180	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:38 UTC	1181	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471016 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:38 GMT Etag: 0x8DA74C35727EE32 Last-Modified: Tue, 02 Aug 2022 20:12:35 GMT Server: ECAcc (frd/E2C8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 513ec507-c01e-0049-73cf-a6fb05000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2022-08-31 14:46:38 UTC	1182	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.5	49938	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:39 UTC	1185	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:39 UTC	1186	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471023 Cache-Control: public, max-age=31536000 Content-MD5: 5h8LmH5/oEhH5cNR2+nY3g== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:39 GMT Etag: 0x8DA74C3555740E4 Last-Modified: Tue, 02 Aug 2022 20:12:32 GMT Server: ECAcc (frd/E2C3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cb5092fe-401e-004a-2ecf-a60865000000 x-ms-version: 2009-09-19 Content-Length: 224 Connection: close
2022-08-31 14:46:39 UTC	1186	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 32 32 2e 34 38 34 6c 2d 38 2d 38 2c 2e 39 36 39 2d 2e 39 36 38 4c 31 38 2c 32 30 2e 35 34 37 6c 37 2e 30 33 31 2d 37 2e 30 33 31 2e 39 36 39 2e 39 36 38 2d 38 2c 38 5a 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><title>assets</title><path d="M18,22.484l-8-8,.969-.968L18,20.547l7.031-7.031.969.968-8,8Z"/><rect width="36" height="36" fill="none"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.5	49940	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:39 UTC	1187	OUT	GET /oneds_CBxZrnSxLbjHuOGn7pHqpg2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:39 UTC	1188	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470961 Cache-Control: public, max-age=31536000 Content-MD5: TG9uHzngBH/n/rWU7NJ5sA== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:39 GMT Etag: 0x8DA74C368E3CD6D Last-Modified: Tue, 02 Aug 2022 20:13:05 GMT Server: ECAcc (frd/E314) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ffc5d6e8-b01e-0072-5ccf-a6ee33000000 x-ms-version: 2009-09-19 Content-Length: 83930 Connection: close
2022-08-31 14:46:39 UTC	1189	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 43 6f 72 65 2c 20 33 2e 31 2e 31 31 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0d 0a 20 2a 2f 0d 0a 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 44 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 61 3d 22 6f 62 6a 65 63 74 22 2c 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 5f 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 74 3d 4f 62 6a 65 63 Data Ascii: /! 1DS JS SDK Core, 3.1.11 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var e=this,n=function(c){"use strict";var D="function",a="object",n="undefined",f="prototype",_="hasOwnProperty",t=Objec
2022-08-31 14:46:39 UTC	1205	IN	Data Raw: 61 Data Ascii: a
2022-08-31 14:46:39 UTC	1205	IN	Data Raw: 72 20 72 2c 65 3d 6c 2e 67 65 74 45 78 74 43 66 67 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 65 26 26 21 6d 28 65 5b 6e 5d 29 3f 72 3d 65 5b 6e 5d 3a 69 26 26 21 6d 28 69 5b 6e 5d 29 26 26 28 72 3d 69 5b 6e 5d 29 2c 6d 28 72 29 3f 74 3a 72 7d 2c 6c 2e 68 61 73 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 73 7d 2c 6c 2e 67 65 74 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 6c 2e 73 65 74 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3d 65 7d 2c 6c 2e 70 72 6f 63 65 73 73 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 73 3b 6e 26 26 28 73 3d 6e 2e 67 65 74 4e 65 78 74 28 29 2c 6e 2e 70 72 6f 63 65 73 73 54 65 6c 65 6d 65 74 72 79 28 65 2c 6c 29 29 Data Ascii: r r,e=l.getExtCfg(e,null);return e&&!m(e[n])?r=e[n]:i&&!m(i[n])&&(r=i[n]),m(r)?t:r},l.hasNext=function(){return null!=s},l.getNext=function(){return s},l.setNext=function(e){s=e},l.processNext=function(e){var n=s;n&&(s=n.getNext(),n.processTelemetry(e,l))
2022-08-31 14:46:39 UTC	1223	IN	Data Raw: 29 7b 65 26 26 49 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 64 65 6e 74 69 66 69 65 72 26 26 65 2e 76 65 72 73 69 6f 6e 26 26 28 65 3d 65 2e 69 64 65 6e 74 69 66 69 65 72 2b 22 3d 22 2b 65 2e 76 65 72 73 69 6f 6e 2c 75 2e 70 6c 75 67 69 6e 56 65 72 73 69 6f 6e 53 74 72 69 6e 67 41 72 72 2e 70 75 73 68 28 65 29 29 7d 29 7d 29 7d 75 2e 67 65 74 57 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 30 3a 2d 31 7d 2c 69 26 26 49 28 69 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 69 64 65 6e 74 69 66 69 65 72 26 26 65 2e 76 65 72 73 69 6f 6e 26 26 28 65 3d 65 2e 69 64 65 6e 74 69 66 69 65 72 2b 22 3d 22 2b 65 2e 76 65 72 73 69 6f 6e 2c Data Ascii: ){e&&I(e,function(e){e.identifier&&e.version&&(e=e.identifier+"="+e.version,u.pluginVersionStringArr.push(e))})})}u.getWParam=function(){return"undefined"!=typeof document?0:-1},i&&I(i,function(e){e&&e.identifier&&e.version&&(e=e.identifier+"="+e.version,
2022-08-31 14:46:39 UTC	1239	IN	Data Raw: 61 69 Data Ascii: ai
2022-08-31 14:46:39 UTC	1239	IN	Data Raw: 6c 65 64 54 6f 53 65 74 53 74 6f 72 61 67 65 42 75 66 66 65 72 3a 34 31 2c 46 61 69 6c 65 64 54 6f 52 65 73 74 6f 72 65 53 74 6f 72 61 67 65 42 75 66 66 65 72 3a 34 32 2c 49 6e 76 61 6c 69 64 42 61 63 6b 65 6e 64 52 65 73 70 6f 6e 73 65 3a 34 33 2c 46 61 69 6c 65 64 54 6f 46 69 78 44 65 70 72 69 63 61 74 65 64 56 61 6c 75 65 73 3a 34 34 2c 49 6e 76 61 6c 69 64 44 75 72 61 74 69 6f 6e 56 61 6c 75 65 3a 34 35 2c 54 65 6c 65 6d 65 74 72 79 45 6e 76 65 6c 6f 70 65 49 6e 76 61 6c 69 64 3a 34 36 2c 43 72 65 61 74 65 45 6e 76 65 6c 6f 70 65 45 72 72 6f 72 3a 34 37 2c 43 61 6e 6e 6f 74 53 65 72 69 61 6c 69 7a 65 4f 62 6a 65 63 74 3a 34 38 2c 43 61 6e 6e 6f 74 53 65 72 69 61 6c 69 7a 65 4f 62 6a 65 63 74 4e 6f 6e 53 65 72 69 61 6c 69 7a 61 62 6c 65 3a 34 39 2c 43 Data Ascii: ledToSetStorageBuffer:41,FailedToRestoreStorageBuffer:42,InvalidBackendResponse:43,FailedToFixDepricatedValues:44,InvalidDurationValue:45,TelemetryEnvelopeInvalid:46,CreateEnvelopeError:47,CannotSerializeObject:48,CannotSerializeObjectNonSerializable:49,C
2022-08-31 14:46:39 UTC	1255	IN	Data Raw: 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 65 2e 73 65 74 43 6c 6f 63 6b 53 6b 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 7c 7c 28 65 3f 28 6f 3d 65 2c 69 3d 74 3d 21 30 29 3a 74 3d 21 31 2c 6e 3d 21 30 29 7d 7d 29 7d 2c 7a 6e 3d 22 73 65 6e 64 41 74 74 65 6d 70 74 22 2c 6a 6e 3d 22 26 4e 6f 52 65 73 70 6f 6e 73 65 42 6f 64 79 3d 74 72 75 65 22 2c 55 6e 3d 28 28 6c 3d 7b 7d 29 5b 31 5d 3d 6e 2c 6c 5b 31 30 30 5d 3d 6e 2c 6c 5b 32 30 30 5d 3d 22 73 65 6e 74 22 2c 6c 5b 38 30 30 34 5d 3d 53 6e 2c 6c 5b 38 30 30 33 5d 3d 53 6e 2c 6c 29 2c 56 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 72 65 73 70 6f 6e 73 65 54 65 Data Ascii: tClockSkewHeaderValue=function(){return o},e.setClockSkew=function(e){i\|\|(e?(o=e,i=t=!0):t=!1,n=!0)}})},zn="sendAttempt",jn="&NoResponseBody=true",Un=((l={})[1]=n,l[100]=n,l[200]="sent",l[8004]=Sn,l[8003]=Sn,l),Vn={};function Wn(e){try{return e.responseTe
2022-08-31 14:46:39 UTC	1271	IN	Data Raw: 3f 72 7c 7c 21 21 74 2e 64 69 73 61 62 6c 65 54 65 6c 65 6d 65 74 72 79 3a 72 29 7c 7c 50 7c 7c 28 53 5b 59 6e 5d 26 26 28 65 2e 69 4b 65 79 3d 53 5b 59 6e 5d 29 2c 74 26 26 74 5b 59 6e 5d 26 26 28 65 2e 69 4b 65 79 3d 74 5b 59 6e 5d 29 2c 6f 28 65 2c 21 30 29 2c 55 3f 64 28 32 2c 32 29 3a 61 28 29 29 2c 73 2e 70 72 6f 63 65 73 73 4e 65 78 74 28 65 2c 6e 29 7d 2c 73 2e 73 65 74 45 76 65 6e 74 51 75 65 75 65 4c 69 6d 69 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 4f 3d 30 3c 65 3f 65 3a 31 65 34 2c 52 3d 30 3c 6e 3f 6e 3a 30 2c 62 28 29 3b 76 61 72 20 74 3d 65 3c 46 3b 69 66 28 21 74 26 26 30 3c 45 29 66 6f 72 28 76 61 72 20 72 3d 31 3b 21 74 26 26 72 3c 3d 33 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 71 5b 72 5d 3b 6f 26 26 6f 2e 62 61 74 63 68 65 73 26 Data Ascii: ?r\|\|!!t.disableTelemetry:r)\|\|P\|\|(S[Yn]&&(e.iKey=S[Yn]),t&&t[Yn]&&(e.iKey=t[Yn]),o(e,!0),U?d(2,2):a()),s.processNext(e,n)},s.setEventQueueLimits=function(e,n){O=0<e?e:1e4,R=0<n?n:0,b();var t=e<F;if(!t&&0<E)for(var r=1;!t&&r<=3;r++){var o=q[r];o&&o.batches&

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49731	190.123.44.208	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:33 UTC	7	OUT	GET /?username=svc@stonergroup.com HTTP/1.1 Host: lmo.universaliogic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://dutarayamakmur.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:34 UTC	8	IN	HTTP/1.1 302 Found Server: nginx/1.21.6 Date: Wed, 31 Aug 2022 14:45:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://outlook.com Access-Control-Allow-Origin: * Access-Control-Allow-Headers: *
2022-08-31 14:45:34 UTC	8	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.5	49941	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:39 UTC	1187	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:39 UTC	1221	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470965 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:39 GMT Etag: 0x8DA74C347423B1A Last-Modified: Tue, 02 Aug 2022 20:12:08 GMT Server: ECAcc (frd/E2C4) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4d95bcce-201e-0093-45cf-a66a88000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2022-08-31 14:46:39 UTC	1221	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.5	49945	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:39 UTC	1273	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:39 UTC	1274	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471035 Cache-Control: public, max-age=31536000 Content-MD5: GpB463eVzCq5vobQLSGoUw== Content-Type: application/javascript Date: Wed, 31 Aug 2022 14:46:39 GMT Etag: 0x8DA74C345C8A201 Last-Modified: Tue, 02 Aug 2022 20:12:06 GMT Server: ECAcc (frd/E2E8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e240e6d5-701e-0052-08cf-a69062000000 x-ms-version: 2009-09-19 Content-Length: 8111 Connection: close
2022-08-31 14:46:39 UTC	1275	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 73 74 61 74 65 3d 3d 6c 26 26 28 65 2e 70 72 65 76 26 26 28 65 2e 70 72 65 76 2e 6e 65 78 74 3d 65 2e 6e 65 78 74 29 2c 65 2e 6e 65 78 74 26 26 28 65 2e 6e 65 78 74 2e 70 72 65 76 3d 65 2e 70 72 65 76 29 2c 44 3d 3d 65 26 26 28 44 3d 65 2e 6e 65 78 74 29 2c 24 3d 3d 65 26 26 28 24 3d 65 2e 70 72 65 76 29 2c 65 2e 73 74 61 74 65 3d 75 2c 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 3d 6e 75 6c 6c 2c 79 2d 2d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 65 2e 73 74 61 74 65 3d 3d 75 29 7b 76 61 72 20 72 3d 24 3b 72 3f 28 72 2e 6e 65 78 74 3d 65 2c 65 2e 70 72 65 76 3d 72 29 3a 44 3d Data Ascii: !function(){function e(e){function t(e){return e&&e.state==l&&(e.prev&&(e.prev.next=e.next),e.next&&(e.next.prev=e.prev),D==e&&(D=e.next),$==e&&($=e.prev),e.state=u,e.prev=e.next=null,y--),e}function a(e){if(e&&e.state==u){var r=$;r?(r.next=e,e.prev=r):D=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.5	49946	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:39 UTC	1274	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:39 UTC	1283	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470961 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 31 Aug 2022 14:46:39 GMT Etag: 0x8DA74C355704399 Last-Modified: Tue, 02 Aug 2022 20:12:32 GMT Server: ECAcc (frd/E2EC) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 11f21d2a-201e-0038-17cf-a638d3000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2022-08-31 14:46:39 UTC	1284	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2022-08-31 14:46:39 UTC	1300	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.5	49959	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:41 UTC	1300	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: acctcdn.msftauth.net
2022-08-31 14:46:41 UTC	1301	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470963 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 31 Aug 2022 14:46:41 GMT Etag: 0x8DA74C355704399 Last-Modified: Tue, 02 Aug 2022 20:12:32 GMT Server: ECAcc (frd/E2EC) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 11f21d2a-201e-0038-17cf-a638d3000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2022-08-31 14:46:41 UTC	1301	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2022-08-31 14:46:41 UTC	1317	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.5	49960	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:41 UTC	1301	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: acctcdn.msftauth.net
2022-08-31 14:46:41 UTC	1318	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471019 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:41 GMT Etag: 0x8DA74C35727EE32 Last-Modified: Tue, 02 Aug 2022 20:12:35 GMT Server: ECAcc (frd/E2C8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 513ec507-c01e-0049-73cf-a6fb05000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2022-08-31 14:46:41 UTC	1319	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.5	49963	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:41 UTC	1323	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: acctcdn.msftauth.net
2022-08-31 14:46:41 UTC	1323	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2471025 Cache-Control: public, max-age=31536000 Content-MD5: 5h8LmH5/oEhH5cNR2+nY3g== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:41 GMT Etag: 0x8DA74C3555740E4 Last-Modified: Tue, 02 Aug 2022 20:12:32 GMT Server: ECAcc (frd/E2C3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cb5092fe-401e-004a-2ecf-a60865000000 x-ms-version: 2009-09-19 Content-Length: 224 Connection: close
2022-08-31 14:46:41 UTC	1323	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 32 32 2e 34 38 34 6c 2d 38 2d 38 2c 2e 39 36 39 2d 2e 39 36 38 4c 31 38 2c 32 30 2e 35 34 37 6c 37 2e 30 33 31 2d 37 2e 30 33 31 2e 39 36 39 2e 39 36 38 2d 38 2c 38 5a 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><title>assets</title><path d="M18,22.484l-8-8,.969-.968L18,20.547l7.031-7.031.969.968-8,8Z"/><rect width="36" height="36" fill="none"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.5	49964	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:41 UTC	1324	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: acctcdn.msftauth.net
2022-08-31 14:46:41 UTC	1324	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2470967 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 31 Aug 2022 14:46:41 GMT Etag: 0x8DA74C347423B1A Last-Modified: Tue, 02 Aug 2022 20:12:08 GMT Server: ECAcc (frd/E2C4) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4d95bcce-201e-0093-45cf-a66a88000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2022-08-31 14:46:41 UTC	1325	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.5	50043	172.67.31.203	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:47:24 UTC	1326	OUT	GET /1.gif HTTP/1.1 Host: via.placeholder.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:47:24 UTC	1328	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 14:47:24 GMT Content-Type: image/webp Content-Length: 38 Connection: close Cache-Control: max-age=86400 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=106 Content-Disposition: inline; filename="1.webp" ETag: "630f3d2a-6a" Expires: Thu, 01 Sep 2022 10:51:20 GMT Last-Modified: Wed, 31 Aug 2022 10:51:22 GMT Vary: Accept X-Cache: L2 CF-Cache-Status: HIT Age: 14024 Accept-Ranges: bytes Set-Cookie: __cf_bm=HntnaWufvDT.tpisEWWoiJn_H4j5R7pvUBKQWq4lb9c-1661957244-0-Ad5W3qm0/j4E06N4vui55W0iMhfNu2UM6ZCvAvPxliGJzHAqEVUK7/MmI71puufNNu1b7H0psA9Kw3mkfSGbEFQ=; path=/; expires=Wed, 31-Aug-22 15:17:24 GMT; domain=.placeholder.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 74368fab6fcd9076-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 14:47:24 UTC	1328	IN	Data Raw: 52 49 46 46 1e 00 00 00 57 45 42 50 56 50 38 4c 11 00 00 00 2f 00 00 00 00 07 50 e6 32 97 b9 ff 81 88 e8 7f 00 00 Data Ascii: RIFFWEBPVP8L/P2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.5	50044	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:47:24 UTC	1327	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=53483493cbd04c4f8d261e7d2a972d58&HASH=5348&LV=202208&V=4&LU=1661957136805; MS0=9a411c94ed0c4ec99fea5f3c28c17d3e
2022-08-31 14:47:24 UTC	1328	IN	HTTP/1.1 200 OK Cache-Control: max-age=43200 Content-Length: 279220 Content-Type: application/javascript Content-MD5: X1JOIM5h9UISVFS6+GfEew== Last-Modified: Wed, 24 Aug 2022 17:34:36 GMT Accept-Ranges: bytes Age: 31933 ETag: 0x8DA85F6EA62BF74 Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 43f2bfd3-901e-0096-53fe-bc2a08000000 x-ms-version: 2009-09-19 X-Azure-Ref: 0fHQPYwAAAAAYUpNTwtDqTKw63NMda8QxQlJVMzBFREdFMDQyMAAzOWI0NjE1Ny1jYjllLTQ5YjctYTY1YS04NzIyYTNmODI0ZTQ= Date: Wed, 31 Aug 2022 14:47:24 GMT Connection: close
2022-08-31 14:47:24 UTC	1329	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 61 5b 6e 5d 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 61 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 69 2e 6d 3d 65 2c 69 2e 63 3d 61 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var a={};function i(n){if(a[n])return a[n].exports;var o=a[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=e,i.c=a,i.d=function(e
2022-08-31 14:47:24 UTC	1337	IN	Data Raw: 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 38 30 25 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 39 70 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 20 55 49 2c 20 53 65 67 6f 65 55 49 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 64 69 76 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 5f 33 52 4a 7a 65 4c 33 6c 39 52 6c 5f 6c 41 51 Data Ascii: dding-right:0;width:80%;width:calc(100% - 19px);font-family:Segoe UI, SegoeUI, Arial, sans-serif;font-style:normal;font-weight:normal;font-size:15px;line-height:20px;text-transform:none;cursor:pointer;box-sizing:border-box}div[dir="rtl"] ._3RJzeL3l9Rl_lAQ
2022-08-31 14:47:24 UTC	1345	IN	Data Raw: 61 2d 6c 61 62 65 6c 3d 22 27 2b 74 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 72 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 72 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 72 2e 6d 6f Data Ascii: a-label="'+t.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+r.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+r.modalBody+'">\n <div>\n <h1 class="'+r.mo
2022-08-31 14:47:24 UTC	1353	IN	Data Raw: 65 2b 2b 29 7d 7d 7d 2c 65 7d 28 29 2c 6c 3d 6e 2e 6c 6f 63 61 6c 73 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 54 68 65 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 69 66 28 21 61 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 62 65 74 77 65 65 6e 2d 70 61 67 65 2d 61 6e 64 2d 64 69 61 6c 6f 67 22 5d 29 7b 76 61 72 20 69 3d 61 5b 22 64 69 61 6c 6f 67 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 3b 74 68 69 73 2e 73 65 74 4d 69 73 73 69 6e 67 43 6f 6c 6f 72 46 72 6f 6d 41 6e 6f 74 68 65 72 50 72 6f 70 65 72 74 79 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 62 65 74 77 65 65 6e 2d 70 61 67 65 2d 61 6e 64 2d 64 69 61 6c 6f 67 22 2c Data Ascii: e++)}}},e}(),l=n.locals,c=function(){function e(){}return e.createTheme=function(e,a){if(!a["background-color-between-page-and-dialog"]){var i=a["dialog-background-color"];this.setMissingColorFromAnotherProperty("background-color-between-page-and-dialog",
2022-08-31 14:47:24 UTC	1361	IN	Data Raw: 20 20 Data Ascii:
2022-08-31 14:47:24 UTC	1361	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2022-08-31 14:47:24 UTC	1369	IN	Data Raw: 65 70 74 41 6c 6c 4c 61 62 65 6c 29 2b 27 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 27 2b 62 2e 62 61 6e 6e 65 72 42 75 74 74 6f 6e 2b 22 20 22 2b 62 2e 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 54 68 65 6d 65 2b 27 22 3e 27 2b 74 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 72 65 6a 65 63 74 41 6c 6c 4c 61 62 65 6c 29 2b 27 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 27 2b 62 2e 62 61 6e 6e 65 72 42 75 74 74 6f 6e 2b 22 20 22 2b 62 2e 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 54 Data Ascii: eptAllLabel)+'</button>\n <button type="button" class="'+b.bannerButton+" "+b.secondaryButtonTheme+'">'+t.escapeHtml(this.textResources.rejectAllLabel)+'</button>\n <button type="button" class="'+b.bannerButton+" "+b.secondaryButtonT
2022-08-31 14:47:24 UTC	1377	IN	Data Raw: 6f 72 74 65 64 2c 20 73 65 74 74 69 6e 67 20 63 6f 6e 73 65 6e 74 20 69 73 20 68 61 6e 64 6c 65 64 20 62 79 20 6c 69 62 72 61 72 79 22 29 7d 2c 65 2e 68 61 73 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 28 29 7d 2c 65 2e 69 73 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 61 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 Data Ascii: orted, setting consent is handled by library")},e.hasConsent=function(){return g()},e.isVisible=function(){return!!document.getElementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var a=[],i=1;i<arguments.length;i++)a[i-1]=arguments[i];var n=this.e
2022-08-31 14:47:24 UTC	1385	IN	Data Raw: 79 6f 75 20 63 6c 69 63 6b 20 6f 6e 20 6f 72 20 70 75 72 63 68 61 73 65 73 20 79 6f 75 20 6d 61 6b 65 20 61 66 74 65 72 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 61 6e 20 61 64 20 66 6f 72 20 70 61 79 6d 65 6e 74 20 70 75 72 70 6f 73 65 73 2c 20 61 6e 64 20 74 6f 20 73 68 6f 77 20 79 6f 75 20 61 64 73 20 74 68 61 74 20 61 72 65 20 6d 6f 72 65 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 79 27 72 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 79 6f 75 20 63 6c 69 63 6b 20 6f 6e 20 61 6e 20 61 64 20 61 6e 64 20 73 68 6f 77 20 79 6f 75 20 61 64 73 20 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 6e 74 65 72 65 73 74 73 20 61 6e 64 20 77 65 62 73 69 Data Ascii: you click on or purchases you make after clicking on an ad for payment purposes, and to show you ads that are more relevant to you. For example, they're used to detect when you click on an ad and show you ads based on your social media interests and websi
2022-08-31 14:47:24 UTC	1393	IN	Data Raw: d9 84 d9 81 d8 a7 d8 aa 20 d8 aa d8 b9 d8 b1 d9 8a d9 81 20 d8 a7 d9 84 d8 a7 d8 b1 d8 aa d8 a8 d8 a7 d8 b7 20 d8 b9 d9 84 d9 89 20 d9 88 d8 b3 d8 a7 d8 a6 d9 84 20 d8 a7 d9 84 d8 aa d9 88 d8 a7 d8 b5 d9 84 20 d8 a7 d9 84 d8 a7 d8 ac d8 aa d9 85 d8 a7 d8 b9 d9 8a 20 d9 84 d8 b9 d8 b1 d8 b6 20 d8 a7 d9 84 d8 a5 d8 b9 d9 84 d8 a7 d9 86 d8 a7 d8 aa 20 d9 88 d8 a7 d9 84 d9 85 d8 ad d8 aa d9 88 d9 89 20 d8 a7 d8 b3 d8 aa d9 86 d8 a7 d8 af d9 8b d8 a7 20 d8 a5 d9 84 d9 89 20 d9 85 d9 84 d9 81 d8 a7 d8 aa 20 d8 aa d8 b9 d8 b1 d9 8a d9 81 d9 83 20 d8 b9 d9 84 d9 89 20 d9 88 d8 b3 d8 a7 d8 a6 d9 84 20 d8 a7 d9 84 d8 aa d9 88 d8 a7 d8 b5 d9 84 20 d8 a7 d9 84 d8 a7 d8 ac d8 aa d9 85 d8 a7 d8 b9 d9 8a 20 d9 88 d8 a7 d9 84 d9 86 d8 b4 d8 a7 d8 b7 20 d8 b9 d9 84 d9 89 Data Ascii:
2022-08-31 14:47:24 UTC	1401	IN	Data Raw: a4 86 e0 a4 b5 e0 a4 b6 e0 a5 8d e0 a4 af e0 a4 95 20 e0 a4 95 e0 a5 81 e0 a4 95 e0 a5 80 e0 a4 9c e0 a4 bc 20 e0 a4 95 e0 a4 be 20 e0 a4 b9 e0 a5 80 20 e0 a4 89 e0 a4 aa e0 a4 af e0 a5 8b e0 a4 97 20 e0 a4 95 e0 a4 bf e0 a4 af e0 a4 be 20 e0 a4 9c e0 a4 be e0 a4 8f e0 a4 97 e0 a4 be 2e 20 e0 a4 86 e0 a4 aa 20 e0 a4 aa e0 a5 83 e0 a4 b7 e0 a5 8d e0 a4 a0 20 e0 a4 95 e0 a5 87 20 e0 a4 a8 e0 a4 bf e0 a4 9a e0 a4 b2 e0 a5 87 20 e0 a4 ad e0 a4 be e0 a4 97 20 e0 a4 ae e0 a5 87 e0 a4 82 20 27 e0 a4 95 e0 a5 81 e0 a4 95 e0 a5 80 e0 a4 9c e0 a4 bc 20 e0 a4 aa e0 a5 8d e0 a4 b0 e0 a4 ac e0 a4 82 e0 a4 a7 e0 a4 bf e0 a4 a4 20 e0 a4 95 e0 a4 b0 e0 a5 87 e0 a4 82 27 20 e0 a4 aa e0 a4 b0 20 e0 a4 95 e0 a5 8d e0 a4 b2 e0 a4 bf e0 a4 95 20 e0 a4 95 e0 a4 b0 e0 a4 95 e0 Data Ascii: . ' '
2022-08-31 14:47:24 UTC	1409	IN	Data Raw: b5 d1 80 d1 81 d0 be d0 bd d0 b0 d0 bb d0 b8 d0 b7 d0 b8 d1 80 d0 b0 d0 bd d0 b0 20 d1 80 d0 b5 d0 ba d0 bb d0 b0 d0 bc d0 b0 20 d0 b2 d1 8a d0 b7 20 d0 be d1 81 d0 bd d0 be d0 b2 d0 b0 20 d0 bd d0 b0 20 d0 b2 d0 b0 d1 88 d0 b0 d1 82 d0 b0 20 d0 be d0 bd d0 bb d0 b0 d0 b9 d0 bd 20 d0 b0 d0 ba d1 82 d0 b8 d0 b2 d0 bd d0 be d1 81 d1 82 2e 20 d0 90 d0 ba d0 be 20 d0 be d1 82 d1 85 d0 b2 d1 8a d1 80 d0 bb d0 b8 d1 82 d0 b5 20 d0 be d0 bf d1 86 d0 b8 d0 be d0 bd d0 b0 d0 bb d0 bd d0 b8 d1 82 d0 b5 20 d0 b1 d0 b8 d1 81 d0 ba d0 b2 d0 b8 d1 82 d0 ba d0 b8 2c 20 d1 89 d0 b5 20 d1 81 d0 b5 20 d0 b8 d0 b7 d0 bf d0 be d0 bb d0 b7 d0 b2 d0 b0 d1 82 20 d1 81 d0 b0 d0 bc d0 be 20 d0 b1 d0 b8 d1 81 d0 ba d0 b2 d0 b8 d1 82 d0 ba d0 b8 2c 20 d0 ba d0 be d0 b8 d1 82 d0 be Data Ascii: . , ,
2022-08-31 14:47:24 UTC	1417	IN	Data Raw: 20 6e 61 c5 a1 69 68 20 77 65 62 20 6c 6f 6b 61 63 69 6a 61 2e 22 7d 2c 7b 69 64 3a 22 63 31 22 2c 6e 61 6d 65 3a 22 41 6e 61 6c 69 74 69 6b 61 22 2c 64 65 73 63 3a 22 44 6f 70 75 c5 a1 74 61 6d 6f 20 74 72 65 c4 87 69 6d 20 73 74 72 61 6e 61 6d 61 20 64 61 20 6b 6f 72 69 73 74 65 20 61 6e 61 6c 69 74 69 c4 8d 6b 65 20 6b 6f 6c 61 c4 8d 69 c4 87 65 20 64 61 20 62 69 20 72 61 7a 75 6d 6a 65 6c 69 20 6b 61 6b 6f 20 6b 6f 72 69 73 74 69 74 65 20 6e 61 c5 a1 65 20 77 65 62 20 6c 6f 6b 61 63 69 6a 65 20 74 61 6b 6f 20 64 61 20 69 68 20 6d 6f c5 be 65 6d 6f 20 70 6f 62 6f 6c 6a c5 a1 61 74 69 2c 20 61 20 74 72 65 c4 87 65 20 73 74 72 61 6e 65 20 6d 6f 67 75 20 72 61 7a 76 69 74 69 20 69 20 70 6f 62 6f 6c 6a c5 a1 61 74 69 20 73 76 6f 6a 65 20 70 72 6f 69 7a 76 Data Ascii: naih web lokacija."},{id:"c1",name:"Analitika",desc:"Doputamo treim stranama da koriste analitike kolaie da bi razumjeli kako koristite nae web lokacije tako da ih moemo poboljati, a tree strane mogu razviti i poboljati svoje proizv
2022-08-31 14:47:24 UTC	1425	IN	Data Raw: 6f 6f 6b 69 65 20 70 72 6f 20 73 6f 63 69 c3 a1 6c 6e c3 ad 20 73 c3 ad 74 c4 9b 20 70 6f 75 c5 be c3 ad 76 c3 a1 6d 65 20 73 70 6f 6c 75 20 73 20 74 c5 99 65 74 c3 ad 6d 69 20 73 74 72 61 6e 61 6d 69 20 6b 20 7a 6f 62 72 61 7a 6f 76 c3 a1 6e c3 ad 20 72 65 6b 6c 61 6d 20 61 20 6f 62 73 61 68 75 20 6e 61 20 7a c3 a1 6b 6c 61 64 c4 9b 20 76 61 c5 a1 69 63 68 20 70 72 6f 66 69 6c c5 af 20 6e 61 20 73 6f 63 69 c3 a1 6c 6e c3 ad 63 68 20 73 c3 ad 74 c3 ad 63 68 20 61 20 61 6b 74 69 76 69 74 20 6e 61 20 6e 61 c5 a1 69 63 68 20 77 65 62 65 63 68 2e 20 53 6c 6f 75 c5 be c3 ad 20 6b 20 70 72 6f 70 6f 6a 65 6e c3 ad 20 76 61 c5 a1 c3 ad 20 61 6b 74 69 76 69 74 79 20 6e 61 20 6e 61 c5 a1 69 63 68 20 77 65 62 65 63 68 20 73 20 70 72 6f 66 69 6c 79 20 6e 61 20 73 6f Data Ascii: ookie pro sociln st pouvme spolu s tetmi stranami k zobrazovn reklam a obsahu na zklad vaich profil na socilnch stch a aktivit na naich webech. Slou k propojen va aktivity na naich webech s profily na so
2022-08-31 14:47:24 UTC	1433	IN	Data Raw: 2e 20 3c 61 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 3f 4c 69 6e 6b 49 64 3d 35 32 31 38 33 39 27 3e 44 61 74 65 6e 73 63 68 75 74 7a 65 72 6b 6c c3 a4 72 75 6e 67 3c 2f 61 3e 20 3c 61 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 61 6b 61 2e 6d 73 2f 33 72 64 70 61 72 74 79 63 6f 6f 6b 69 65 73 27 3e 43 6f 6f 6b 69 65 73 20 76 6f 6e 20 44 72 69 74 74 61 6e 62 69 65 74 65 72 6e 3c 2f 61 3e 22 2c 61 63 63 65 70 74 41 6c 6c 4c 61 62 65 6c 3a 22 41 6e 6e 65 68 6d 65 6e 22 2c 72 65 6a 65 63 74 41 6c 6c 4c 61 62 65 6c 3a 22 41 62 6c 65 68 6e 65 6e 22 2c 6d 6f 72 65 49 6e 66 6f 4c 61 62 65 6c Data Ascii: . <a target='_blank' href='https://go.microsoft.com/fwlink/?LinkId=521839'>Datenschutzerklrung</a> <a target='_blank' href='https://aka.ms/3rdpartycookies'>Cookies von Drittanbietern</a>",acceptAllLabel:"Annehmen",rejectAllLabel:"Ablehnen",moreInfoLabel
2022-08-31 14:47:24 UTC	1441	IN	Data Raw: cf 81 ce b7 cf 83 ce b9 ce bc ce bf cf 80 ce bf ce b9 ce bf cf 8d ce bc ce b5 20 ce bf cf 81 ce b9 cf 83 ce bc ce ad ce bd ce b1 20 63 6f 6f 6b 69 65 20 ce b1 ce bd ce ac ce bb cf 85 cf 83 ce b7 cf 82 20 ce b3 ce b9 ce b1 20 ce b4 ce b9 ce b1 cf 86 ce b7 ce bc ce af cf 83 ce b5 ce b9 cf 82 2e 22 7d 2c 7b 69 64 3a 22 63 32 22 2c 6e 61 6d 65 3a 22 43 6f 6f 6b 69 65 20 ce bc ce ad cf 83 cf 89 ce bd 20 ce ba ce bf ce b9 ce bd cf 89 ce bd ce b9 ce ba ce ae cf 82 20 ce b4 ce b9 ce ba cf 84 cf 8d cf 89 cf 83 ce b7 cf 82 22 2c 64 65 73 63 3a 22 ce 95 ce bc ce b5 ce af cf 82 2c 20 ce ba ce b1 ce b8 cf 8e cf 82 20 ce ba ce b1 ce b9 20 cf 84 cf 81 ce af cf 84 ce b1 20 ce bc ce ad cf 81 ce b7 2c 20 cf 87 cf 81 ce b7 cf 83 ce b9 ce bc ce bf cf 80 ce bf ce b9 ce bf cf Data Ascii: cookie ."},{id:"c2",name:"Cookie ",desc:", ,
2022-08-31 14:47:24 UTC	1449	IN	Data Raw: 22 7d 2c 7b 69 64 3a 22 63 31 22 2c 6e 61 6d 65 3a 22 41 6e c3 a1 6c 69 73 69 73 22 2c 64 65 73 63 3a 22 50 65 72 6d 69 74 69 6d 6f 73 20 61 20 74 65 72 63 65 72 6f 73 20 75 74 69 6c 69 7a 61 72 20 63 6f 6f 6b 69 65 73 20 64 65 20 61 6e c3 a1 6c 69 73 69 73 20 70 61 72 61 20 63 6f 6d 70 72 65 6e 64 65 72 20 63 c3 b3 6d 6f 20 75 74 69 6c 69 7a 61 73 20 6e 75 65 73 74 72 6f 73 20 73 69 74 69 6f 73 20 77 65 62 20 64 65 20 66 6f 72 6d 61 20 71 75 65 20 70 6f 64 61 6d 6f 73 20 6d 65 6a 6f 72 61 72 6c 6f 73 20 79 20 71 75 65 20 64 69 63 68 6f 73 20 74 65 72 63 65 72 6f 73 20 70 75 65 64 61 6e 20 64 65 73 61 72 72 6f 6c 6c 61 72 20 79 20 6d 65 6a 6f 72 61 72 20 73 75 73 20 70 72 6f 64 75 63 74 6f 73 2c 20 6c 61 73 20 63 75 61 6c 65 73 20 70 75 65 64 65 6e 20 75 Data Ascii: "},{id:"c1",name:"Anlisis",desc:"Permitimos a terceros utilizar cookies de anlisis para comprender cmo utilizas nuestros sitios web de forma que podamos mejorarlos y que dichos terceros puedan desarrollar y mejorar sus productos, las cuales pueden u
2022-08-31 14:47:24 UTC	1457	IN	Data Raw: 61 20 6d 65 64 69 Data Ascii: a medi
2022-08-31 14:47:24 UTC	1457	IN	Data Raw: 61 73 73 61 20 6e c3 a4 6b 65 6d c3 a4 73 69 20 6d 61 69 6e 6f 6b 73 65 74 20 6a 61 20 73 69 73 c3 a4 6c 74 c3 b6 20 76 61 73 74 61 61 76 61 74 20 70 61 72 65 6d 6d 69 6e 20 6b 69 69 6e 6e 6f 73 74 75 6b 73 65 6e 20 6b 6f 68 74 65 69 74 61 73 69 2e 22 7d 2c 7b 69 64 3a 22 63 33 22 2c 6e 61 6d 65 3a 22 4d 61 69 6e 6f 6e 74 61 22 2c 64 65 73 63 3a 22 4d 61 69 6e 6f 6e 74 61 65 76 c3 a4 73 74 65 69 64 65 6e 20 61 76 75 6c 6c 61 20 4d 69 63 72 6f 73 6f 66 74 20 6a 61 20 6b 6f 6c 6d 61 6e 6e 65 74 20 6f 73 61 70 75 6f 6c 65 74 20 76 6f 69 76 61 74 20 6e c3 a4 79 74 74 c3 a4 c3 a4 20 73 69 6e 75 6c 6c 65 20 75 75 73 69 61 20 6d 61 69 6e 6f 6b 73 69 61 20 74 61 6c 6c 65 6e 74 61 6d 61 6c 6c 61 20 74 69 65 74 6f 6a 61 20 73 69 69 74 c3 a4 2c 20 6d 69 74 6b c3 a4 Data Ascii: assa nkemsi mainokset ja sislt vastaavat paremmin kiinnostuksen kohteitasi."},{id:"c3",name:"Mainonta",desc:"Mainontaevsteiden avulla Microsoft ja kolmannet osapuolet voivat nytt sinulle uusia mainoksia tallentamalla tietoja siit, mitk
2022-08-31 14:47:24 UTC	1465	IN	Data Raw: 75 6d 61 69 6c 20 61 69 72 20 64 c3 a8 20 61 6e 20 74 2d 73 61 6e 61 73 61 63 68 64 20 61 69 72 20 61 6d 20 62 72 69 6f 67 20 74 68 75 20 6e 6f 20 72 75 64 61 6e 20 61 20 63 68 65 61 6e 6e 61 69 63 68 65 61 73 20 74 75 20 61 6e 20 64 c3 a8 69 64 68 20 64 68 75 74 20 62 72 69 6f 67 61 64 68 20 61 69 72 20 73 61 6e 61 73 61 63 68 64 20 61 69 72 73 6f 6e 20 70 c3 a0 69 67 68 65 61 64 68 20 61 67 75 73 20 61 69 72 73 6f 6e 20 73 61 6e 61 73 61 63 68 64 20 61 20 73 68 65 61 6c 6c 74 61 69 6e 6e 20 61 20 62 68 69 6f 73 20 6e 61 73 20 69 6f 6d 63 68 61 69 64 68 65 20 64 68 75 74 2d 73 61 2e 20 4d 61 72 20 65 69 73 69 6d 70 6c 65 69 72 2c 20 61 69 72 73 6f 6e 20 e2 80 99 73 20 67 75 6d 20 62 69 20 66 69 6f 73 20 61 67 61 69 6e 6e 20 6e 75 61 69 72 20 61 20 62 68 Data Ascii: umail air d an t-sanasachd air am briog thu no rudan a cheannaicheas tu an didh dhut briogadh air sanasachd airson pigheadh agus airson sanasachd a shealltainn a bhios nas iomchaidhe dhut-sa. Mar eisimpleir, airson s gum bi fios againn nuair a bh
2022-08-31 14:47:24 UTC	1473	IN	Data Raw: d7 aa 20 d7 95 d7 aa d7 9b d7 a0 d7 99 d7 9d 20 d7 94 d7 9e d7 91 d7 95 d7 a1 d7 a1 d7 99 d7 9d 20 d7 a2 d7 9c 20 d7 a4 d7 a8 d7 95 d7 a4 d7 99 d7 9c d7 99 20 d7 94 d7 9e d7 93 d7 99 d7 94 20 d7 94 d7 97 d7 91 d7 a8 d7 aa d7 99 d7 99 d7 9d 20 d7 95 d7 94 d7 a4 d7 a2 d7 99 d7 9c d7 95 d7 aa 20 d7 a9 d7 9c d7 a0 d7 95 20 d7 91 d7 90 d7 aa d7 a8 d7 99 20 d7 94 d7 90 d7 99 d7 a0 d7 98 d7 a8 d7 a0 d7 98 20 d7 a9 d7 9c d7 a0 d7 95 2e 20 d7 94 d7 9d 20 d7 9e d7 a9 d7 9e d7 a9 d7 99 d7 9d 20 d7 9c d7 97 d7 99 d7 91 d7 95 d7 a8 20 d7 94 d7 a4 d7 a2 d7 99 d7 9c d7 95 d7 aa 20 d7 a9 d7 9c d7 9a 20 d7 91 d7 90 d7 aa d7 a8 d7 99 20 d7 94 d7 90 d7 99 d7 a0 d7 98 d7 a8 d7 a0 d7 98 20 d7 a9 d7 9c d7 a0 d7 95 20 d7 9c d7 a4 d7 a8 d7 95 d7 a4 d7 99 d7 9c d7 99 20 d7 94 d7 Data Ascii: .
2022-08-31 14:47:24 UTC	1481	IN	Data Raw: a9 64 69 c3 a1 73 20 6f 6c 64 61 6c 61 6b 6f 6e 20 61 20 66 65 6c 68 61 73 7a 6e c3 a1 6c c3 b3 6b 20 c3 a9 72 64 65 6b 6c c5 91 64 c3 a9 73 c3 a9 72 65 20 66 65 6c 74 65 68 65 74 c5 91 65 6e 20 73 7a c3 a1 6d 6f 74 20 74 61 72 74 c3 b3 20 68 69 72 64 65 74 c3 a9 73 65 6b 20 c3 a9 73 20 74 61 72 74 61 6c 6d 61 6b 20 6a 65 6c 65 6e 6a 65 6e 65 6b 20 6d 65 67 2e 22 7d 2c 7b 69 64 3a 22 63 33 22 2c 6e 61 6d 65 3a 22 52 65 6b 6c c3 a1 6d 63 c3 a9 6c c3 ba 22 2c 64 65 73 63 3a 22 4d 69 6e 64 20 74 c3 a1 72 73 61 73 c3 a1 67 75 6e 6b 2c 20 6d 69 6e 64 20 6e c3 a9 68 c3 a1 6e 79 20 70 61 72 74 6e 65 72 c3 bc 6e 6b 20 61 20 6b 6f 72 c3 a1 62 62 61 6e 20 6d c3 a1 72 20 6d 65 67 6a 65 6c 65 6e c3 ad 74 65 74 74 20 68 69 72 64 65 74 c3 a9 73 65 6b 65 74 20 74 c3 a1 Data Ascii: dis oldalakon a felhasznlk rdekldsre felteheten szmot tart hirdetsek s tartalmak jelenjenek meg."},{id:"c3",name:"Reklmcl",desc:"Mind trsasgunk, mind nhny partnernk a korbban mr megjelentett hirdetseket t
2022-08-31 14:47:24 UTC	1489	IN	Data Raw: 72 6d 61 74 69 76 61 20 73 75 6c 6c 61 20 70 72 69 76 61 63 79 3c 2f 61 3e 20 3c 61 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 61 6b 61 2e 6d 73 2f 33 72 64 70 61 72 74 79 63 6f 6f 6b 69 65 73 27 3e 43 6f 6f 6b 69 65 20 64 69 20 74 65 72 7a 61 20 70 61 72 74 69 3c 2f 61 3e 22 2c 61 63 63 65 70 74 41 6c 6c 4c 61 62 65 6c 3a 22 41 63 63 65 74 74 61 22 2c 72 65 6a 65 63 74 41 6c 6c 4c 61 62 65 6c 3a 22 52 69 66 69 75 74 61 22 2c 6d 6f 72 65 49 6e 66 6f 4c 61 62 65 6c 3a 22 47 65 73 74 69 73 63 69 20 69 20 63 6f 6f 6b 69 65 22 2c 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 3a 22 43 68 69 75 64 69 22 2c 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 54 69 74 6c 65 3a 22 Data Ascii: rmativa sulla privacy</a> <a target='_blank' href='https://aka.ms/3rdpartycookies'>Cookie di terza parti</a>",acceptAllLabel:"Accetta",rejectAllLabel:"Rifiuta",moreInfoLabel:"Gestisci i cookie",preferencesDialogCloseLabel:"Chiudi",preferencesDialogTitle:"
2022-08-31 14:47:24 UTC	1497	IN	Data Raw: 96 d0 b7 d0 b3 d0 b5 20 d0 bd d0 b5 d0 b3 d1 96 d0 b7 d0 b4 d0 b5 d0 bb d0 b3 d0 b5 d0 bd 20 d0 b6 d0 b5 d0 ba d0 b5 d0 bb d0 b5 d0 bd d0 b4 d1 96 d1 80 d1 96 d0 bb d0 b3 d0 b5 d0 bd 20 d0 b6 d0 b0 d1 80 d0 bd d0 b0 d0 bc d0 b0 d0 bb d0 b0 d1 80 d0 b4 d1 8b 20 d0 ba d3 a9 d1 80 d1 81 d0 b5 d1 82 d1 83 20 d2 af d1 88 d1 96 d0 bd 20 d2 9b d0 be d1 81 d1 8b d0 bc d1 88 d0 b0 20 d0 ba d1 83 d0 ba d0 b8 20 d1 84 d0 b0 d0 b9 d0 bb d0 b4 d0 b0 d1 80 d1 8b d0 bd 20 d0 bf d0 b0 d0 b9 d0 b4 d0 b0 d0 bb d0 b0 d0 bd d0 b0 d0 bc d1 8b d0 b7 2e 20 d0 a2 d0 b0 d2 a3 d0 b4 d0 b0 d1 83 d0 bb d1 8b 20 d0 ba d1 83 d0 ba d0 b8 20 d1 84 d0 b0 d0 b9 d0 bb d0 b4 d0 b0 d1 80 d1 8b d0 bd 20 d2 9b d0 b0 d0 b1 d1 8b d0 bb d0 b4 d0 b0 d0 bc d0 b0 d1 81 d0 b0 d2 a3 d1 8b d0 b7 2c 20 Data Ascii: . ,
2022-08-31 14:47:24 UTC	1505	IN	Data Raw: 94 20 eb 8b b9 ec 82 ac 20 ec 9b b9 20 ec 82 ac ec 9d b4 ed 8a b8 ea b0 80 20 ec 9e 91 eb 8f 99 ed 95 98 ea b8 b0 20 ec 9c 84 ed 95 b4 20 ea bc ad 20 ed 95 84 ec 9a 94 ed 95 a9 eb 8b 88 eb 8b a4 2e 22 7d 2c 7b 69 64 3a 22 63 31 22 2c 6e 61 6d 65 3a 22 eb b6 84 ec 84 9d 22 2c 64 65 73 63 3a 22 eb 8b b9 ec 82 ac eb 8a 94 20 ec a0 9c 33 ec 9e 90 eb a1 9c 20 ed 95 98 ec 97 ac ea b8 88 20 eb b6 84 ec 84 9d 20 ec bf a0 ed 82 a4 eb a5 bc 20 ec 82 ac ec 9a a9 ed 95 98 eb 8f 84 eb a1 9d 20 ed 97 88 ec 9a a9 ed 95 98 ec 97 ac 20 ea b7 80 ed 95 98 ea b0 80 20 eb 8b b9 ec 82 ac 20 ec 9b b9 20 ec 82 ac ec 9d b4 ed 8a b8 eb a5 bc 20 eb 8d 94 20 ec 9e 98 20 ec 82 ac ec 9a a9 ed 95 a0 20 ec 88 98 20 ec 9e 88 eb 8f 84 eb a1 9d 20 ed 95 98 eb a9 b0 2c 20 4d 69 63 72 6f 73 Data Ascii: ."},{id:"c1",name:"",desc:" 3 , Micros
2022-08-31 14:47:24 UTC	1513	IN	Data Raw: 22 52 65 6b 6c 61 6d 6f 73 20 73 6c 61 70 75 6b 61 69 22 2c 64 65 73 63 3a 22 4d 65 73 20 6b 61 72 74 75 20 73 75 20 74 72 65 c4 8d 69 6f 73 69 6f 6d 69 73 20 c5 a1 61 6c 69 6d 69 73 20 72 65 6b 6c 61 6d 6f 73 20 69 72 20 72 69 6e 6b 6f 64 61 72 6f 73 20 73 6c 61 70 75 6b 75 73 20 6e 61 75 64 6f 6a 61 6d 65 20 74 61 6d 2c 20 6b 61 64 20 72 6f 64 79 74 75 6d 65 20 6e 61 75 6a 61 73 20 72 65 6b 6c 61 6d 61 73 20 c4 af 72 61 c5 a1 79 64 61 6d 69 2c 20 6b 75 72 69 61 73 20 72 65 6b 6c 61 6d 61 73 20 6a 61 75 20 6d 61 74 c4 97 74 65 2e 20 4a 69 65 20 74 61 69 70 20 70 61 74 20 6e 61 75 64 6f 6a 61 6d 69 20 73 69 65 6b 69 61 6e 74 20 73 65 6b 74 69 2c 20 6b 75 72 69 61 73 20 72 65 6b 6c 61 6d 61 73 20 73 70 75 73 74 65 6c 69 74 65 20 61 72 62 61 20 6b c4 85 20 Data Ascii: "Reklamos slapukai",desc:"Mes kartu su treiosiomis alimis reklamos ir rinkodaros slapukus naudojame tam, kad rodytume naujas reklamas raydami, kurias reklamas jau matte. Jie taip pat naudojami siekiant sekti, kurias reklamas spustelite arba k
2022-08-31 14:47:24 UTC	1521	IN	Data Raw: 65 6a 65 63 74 41 6c 6c 4c 61 62 65 6c 3a 22 49 72 72 69 66 6a 75 74 61 22 2c 6d 6f 72 65 49 6e 66 6f 4c 61 62 65 6c 3a 22 49 6d 6d 61 6e 69 c4 a1 c4 a1 6a 61 20 6c 2d 63 6f 6f 6b 69 65 73 22 2c 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 3a 22 41 67 c4 a7 6c 61 71 22 2c 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 54 69 74 6c 65 3a 22 49 6d 6d 61 6e 69 c4 a1 c4 a1 6a 61 20 6c 2d 50 72 65 66 65 72 65 6e 7a 69 20 74 61 6c 2d 43 6f 6f 6b 69 65 73 22 2c 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 44 65 73 63 48 74 6d 6c 3a 22 c4 a6 61 66 6e 61 20 6d 69 6c 6c 2d 77 65 62 73 6a 61 6a 74 73 20 74 61 27 20 4d 69 63 72 6f 73 6f 66 74 20 6a 75 c5 bc 61 77 20 63 6f 6f 6b 69 65 73 2e 20 43 6f 6f 6b 69 65 73 20 68 75 Data Ascii: ejectAllLabel:"Irrifjuta",moreInfoLabel:"Immanija l-cookies",preferencesDialogCloseLabel:"Aglaq",preferencesDialogTitle:"Immanija l-Preferenzi tal-Cookies",preferencesDialogDescHtml:"afna mill-websjajts ta' Microsoft juaw cookies. Cookies hu
2022-08-31 14:47:24 UTC	1529	IN	Data Raw: 69 6b 20 76 61 6e 20 76 65 72 65 69 73 74 65 20 63 6f 6f 6b 69 65 73 20 6f 6d 20 65 73 73 65 6e 74 69 c3 ab 6c 65 20 77 65 62 73 69 74 65 66 75 6e 63 74 69 65 73 20 74 65 20 6c 61 74 65 6e 20 77 65 72 6b 65 6e 2e 20 5a 65 20 77 6f 72 64 65 6e 20 62 69 6a 76 6f 6f 72 62 65 65 6c 64 20 67 65 62 72 75 69 6b 74 20 6f 6d 20 6a 65 20 61 61 6e 20 74 65 20 6d 65 6c 64 65 6e 2c 20 6a 65 20 74 61 61 6c 76 6f 6f 72 6b 65 75 72 65 6e 20 6f 70 20 74 65 20 73 6c 61 61 6e 2c 20 6a 65 20 77 69 6e 6b 65 6c 65 72 76 61 72 69 6e 67 20 74 65 20 76 65 72 62 65 74 65 72 65 6e 2c 20 70 72 65 73 74 61 74 69 65 73 20 74 65 20 76 65 72 68 6f 67 65 6e 2c 20 76 65 72 6b 65 65 72 20 74 75 73 73 65 6e 20 77 65 62 73 65 72 76 65 72 73 20 74 65 20 72 65 67 65 6c 65 6e 2c 20 64 65 20 67 Data Ascii: ik van vereiste cookies om essentile websitefuncties te laten werken. Ze worden bijvoorbeeld gebruikt om je aan te melden, je taalvoorkeuren op te slaan, je winkelervaring te verbeteren, prestaties te verhogen, verkeer tussen webservers te regelen, de g
2022-08-31 14:47:24 UTC	1537	IN	Data Raw: 77 61 c4 87 20 69 20 75 64 6f 73 6b 6f 6e 61 6c 61 c4 87 20 73 77 6f 6a 65 20 70 72 6f 64 75 6b 74 79 2c 20 61 20 6e 61 73 74 c4 99 70 6e 69 65 20 75 c5 bc 79 77 61 c4 87 20 69 63 68 20 77 20 77 69 74 72 79 6e 61 63 68 2c 20 6b 74 c3 b3 72 65 20 6e 69 65 20 6e 61 6c 65 c5 bc c4 85 20 64 6f 20 66 69 72 6d 79 20 4d 69 63 72 6f 73 6f 66 74 20 69 20 6e 69 65 20 73 c4 85 20 70 72 7a 65 7a 20 6e 69 c4 85 20 6f 62 73 c5 82 75 67 69 77 61 6e 65 2e 20 4e 61 20 70 72 7a 79 6b c5 82 61 64 20 67 72 6f 6d 61 64 7a 69 6d 79 20 77 20 74 65 6e 20 73 70 6f 73 c3 b3 62 20 64 61 6e 65 20 6f 20 6f 64 77 69 65 64 7a 61 6e 79 63 68 20 73 74 72 6f 6e 61 63 68 20 69 20 6c 69 63 7a 62 69 65 20 6b 6c 69 6b 6e 69 c4 99 c4 87 20 70 6f 74 72 7a 65 62 6e 79 63 68 20 64 6f 20 77 79 6b Data Ascii: wa i udoskonala swoje produkty, a nastpnie uywa ich w witrynach, ktre nie nale do firmy Microsoft i nie s przez ni obsugiwane. Na przykad gromadzimy w ten sposb dane o odwiedzanych stronach i liczbie klikni potrzebnych do wyk
2022-08-31 14:47:24 UTC	1545	IN	Data Raw: 6f 6d 20 74 65 72 63 65 69 72 6f 73 2c 20 63 6f 6f 6b 69 65 73 20 64 65 20 70 75 62 6c 69 63 69 64 61 64 65 20 65 20 6d 61 72 6b 65 74 69 6e 67 20 70 61 72 61 20 6c 68 65 20 6d 6f 73 74 72 61 72 20 6e 6f 76 6f 73 20 61 6e c3 ba 6e 63 69 6f 73 2c 20 72 65 67 69 73 74 61 6e 64 6f 20 6f 73 20 61 6e c3 ba 6e 63 69 6f 73 20 71 75 65 20 6a c3 a1 20 76 69 75 2e 20 54 61 6d 62 c3 a9 6d 20 73 c3 a3 6f 20 75 74 69 6c 69 7a 61 64 6f 73 20 70 61 72 61 20 6d 6f 6e 69 74 6f 72 69 7a 61 72 20 6f 73 20 61 6e c3 ba 6e 63 69 6f 73 20 65 6d 20 71 75 65 20 63 6c 69 63 61 20 6f 75 20 61 73 20 63 6f 6d 70 72 61 73 20 71 75 65 20 66 61 7a 20 64 65 70 6f 69 73 20 64 65 20 63 6c 69 63 61 72 20 6e 75 6d 20 61 6e c3 ba 6e 63 69 6f 2c 20 70 61 72 61 20 65 66 65 69 74 6f 73 20 64 65 Data Ascii: om terceiros, cookies de publicidade e marketing para lhe mostrar novos anncios, registando os anncios que j viu. Tambm so utilizados para monitorizar os anncios em que clica ou as compras que faz depois de clicar num anncio, para efeitos de
2022-08-31 14:47:24 UTC	1553	IN	Data Raw: 74 61 74 65 22 2c 64 65 73 63 3a 22 4e 6f 69 20 c8 99 69 20 74 65 72 c8 9b 69 69 20 66 6f 6c 6f 73 69 6d 20 6d 6f 64 75 6c 65 20 63 6f 6f 6b 69 65 20 64 65 20 70 75 62 6c 69 63 69 74 61 74 65 20 70 65 6e 74 72 75 20 61 20 61 66 69 c8 99 61 20 61 6e 75 6e c8 9b 75 72 69 20 6e 6f 69 2c 20 c3 ae 6e 72 65 67 69 73 74 72 c3 a2 6e 64 20 61 6e 75 6e c8 9b 75 72 69 6c 65 20 70 65 20 63 61 72 65 20 6c 65 2d 61 c8 9b 69 20 76 c4 83 7a 75 74 20 64 65 6a 61 2e 20 44 65 20 61 73 65 6d 65 6e 65 61 2c 20 73 75 6e 74 20 75 74 69 6c 69 7a 61 74 65 20 70 65 6e 74 72 75 20 61 20 75 72 6d c4 83 72 69 20 61 6e 75 6e c8 9b 75 72 69 6c 65 20 70 65 20 63 61 72 65 20 66 61 63 65 c8 9b 69 20 63 6c 69 63 20 73 61 75 20 61 63 68 69 7a 69 c8 9b 69 69 6c 65 20 70 65 20 63 61 72 65 20 Data Ascii: tate",desc:"Noi i terii folosim module cookie de publicitate pentru a afia anunuri noi, nregistrnd anunurile pe care le-ai vzut deja. De asemenea, sunt utilizate pentru a urmri anunurile pe care facei clic sau achiziiile pe care
2022-08-31 14:47:24 UTC	1561	IN	Data Raw: 61 76 65 6e c3 ad 2c 20 70 6f 6d c3 a1 68 61 6a c3 ba 20 76 c3 a1 6d 20 70 72 69 68 6c c3 a1 73 69 c5 a5 20 73 61 2c 20 7a 6f 62 72 61 7a 6f 76 61 c5 a5 20 70 72 69 73 70 c3 b4 73 6f 62 65 6e c3 a9 20 72 65 6b 6c 61 6d 79 20 61 20 61 6e 61 6c 79 7a 6f 76 61 c5 a5 2c 20 61 6b 6f 20 64 6f 62 72 65 20 6e 61 c5 a1 65 20 77 65 62 79 20 66 75 6e 67 75 6a c3 ba 2e 20 c4 8e 61 6c c5 a1 69 65 20 69 6e 66 6f 72 6d c3 a1 63 69 65 20 6e c3 a1 6a 64 65 74 65 20 76 20 c4 8d 61 73 74 69 20 53 c3 ba 62 6f 72 79 20 63 6f 6f 6b 69 65 20 61 20 70 6f 64 6f 62 6e c3 a9 20 74 65 63 68 6e 6f 6c c3 b3 67 69 65 20 76 6f 20 3c 61 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c Data Ascii: aven, pomhaj vm prihlsi sa, zobrazova prispsoben reklamy a analyzova, ako dobre nae weby funguj. alie informcie njdete v asti Sbory cookie a podobn technolgie vo <a target='_blank' href='https://go.microsoft.com/fwl
2022-08-31 14:47:24 UTC	1569	IN	Data Raw: 76 6c 6a 61 20 6b 6f 72 70 6f 72 61 63 69 6a 61 20 4d 69 63 72 6f 73 6f 66 74 20 69 20 6b 6f 6a 65 20 6e 69 73 75 20 75 20 6e 6a 65 6e 6f 6d 20 76 6c 61 73 6e 69 c5 a1 74 76 75 2e 20 4e 61 20 70 72 69 6d 65 72 2c 20 6f 6e 69 20 73 65 20 6b 6f 72 69 73 74 65 20 7a 61 20 70 72 69 6b 75 70 6c 6a 61 6e 6a 65 20 69 6e 66 6f 72 6d 61 63 69 6a 61 20 6f 20 73 74 72 61 6e 69 63 61 6d 61 20 6b 6f 6a 65 20 70 6f 73 65 c4 87 75 6a 65 74 65 20 69 20 6f 20 74 6f 6d 65 20 6b 6f 6c 69 6b 6f 20 6a 65 20 6b 6c 69 6b 6f 76 61 20 70 6f 74 72 65 62 6e 6f 20 7a 61 20 69 7a 76 72 c5 a1 61 76 61 6e 6a 65 20 7a 61 64 61 74 6b 61 2e 20 4f 64 72 65 c4 91 65 6e 65 20 6b 6f 6c 61 c4 8d 69 c4 87 65 20 61 6e 61 6c 69 74 69 6b 65 20 6b 6f 72 69 73 74 69 6d 6f 20 7a 61 20 72 65 6b 6c 61 Data Ascii: vlja korporacija Microsoft i koje nisu u njenom vlasnitvu. Na primer, oni se koriste za prikupljanje informacija o stranicama koje poseujete i o tome koliko je klikova potrebno za izvravanje zadatka. Odreene kolaie analitike koristimo za rekla
2022-08-31 14:47:24 UTC	1577	IN	Data Raw: b9 88 e0 b8 99 20 e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b9 83 e0 b8 8a e0 b9 89 e0 b8 84 e0 b8 b8 e0 b8 81 e0 b8 81 e0 b8 b5 e0 b9 89 e0 b9 80 e0 b8 9e e0 b8 b7 e0 b9 88 e0 b8 ad e0 b8 99 e0 b8 b3 e0 b8 84 e0 b8 b8 e0 b8 93 e0 b9 80 e0 b8 82 e0 b9 89 e0 b8 b2 e0 b8 aa e0 b8 b9 e0 b9 88 e0 b8 a3 e0 b8 b0 e0 b8 9a e0 b8 9a 20 e0 b8 9a e0 b8 b1 e0 b8 99 e0 b8 97 e0 b8 b6 e0 b8 81 e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b8 81 e0 b8 b3 e0 b8 ab e0 b8 99 e0 b8 94 e0 b8 a5 e0 b8 b1 e0 b8 81 e0 b8 a9 e0 b8 93 e0 b8 b0 e0 b8 a0 e0 b8 b2 e0 b8 a9 e0 b8 b2 e0 b8 82 e0 b8 ad e0 b8 87 e0 b8 84 e0 b8 b8 e0 b8 93 20 e0 b8 a1 e0 b8 ad e0 b8 9a e0 b8 9b e0 b8 a3 e0 b8 b0 e0 b8 aa e0 b8 9a e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b8 93 e0 b9 8c e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b9 83 e0 b8 8a e0 b9 89 e0 Data Ascii:
2022-08-31 14:47:24 UTC	1585	IN	Data Raw: 7a c4 b1 20 76 65 79 61 20 74 c4 b1 6b 6c 61 64 c4 b1 6b 74 61 6e 20 73 6f 6e 72 61 20 67 65 72 c3 a7 65 6b 6c 65 c5 9f 65 6e 20 73 61 74 c4 b1 6e 20 61 6c c4 b1 6d 6c 61 72 c4 b1 6e c4 b1 7a c4 b1 20 69 7a 6c 65 6d 65 6b 20 76 65 20 73 69 7a 65 20 64 61 68 61 20 61 6c 61 6b 61 6c c4 b1 20 72 65 6b 6c 61 6d 6c 61 72 20 67 c3 b6 73 74 65 72 6d 65 6b 20 69 c3 a7 69 6e 20 64 65 20 6b 75 6c 6c 61 6e c4 b1 6c c4 b1 72 2e 20 42 75 20 62 69 6c 67 69 6c 65 72 20 c3 b6 72 6e 65 c4 9f 69 6e 20 62 69 72 20 72 65 6b 6c 61 6d 61 20 74 c4 b1 6b 6c 61 64 c4 b1 c4 9f c4 b1 6e c4 b1 7a c4 b1 20 61 6c 67 c4 b1 6c 61 6d 61 6b 20 76 65 20 73 6f 73 79 61 6c 20 6d 65 64 79 61 64 61 6b 69 20 69 6c 67 69 20 61 6c 61 6e 6c 61 72 c4 b1 6e c4 b1 7a 61 20 76 65 20 77 65 62 20 73 69 Data Ascii: z veya tkladktan sonra gerekleen satn almlarnz izlemek ve size daha alakal reklamlar gstermek iin de kullanlr. Bu bilgiler rnein bir reklama tkladnz alglamak ve sosyal medyadaki ilgi alanlarnza ve web si
2022-08-31 14:47:24 UTC	1593	IN	Data Raw: 65 70 74 4c 61 62 65 6c 3a 22 43 68 e1 ba a5 70 20 6e 68 e1 ba ad 6e 22 2c 72 65 6a 65 63 74 4c 61 62 65 6c 3a 22 54 e1 bb ab 20 63 68 e1 bb 91 69 22 2c 73 61 76 65 4c 61 62 65 6c 3a 22 4c c6 b0 75 20 74 68 61 79 20 c4 91 e1 bb 95 69 22 2c 72 65 73 65 74 4c 61 62 65 6c 3a 22 c4 90 e1 ba b7 74 20 6c e1 ba a1 69 20 74 e1 ba a5 74 20 63 e1 ba a3 22 2c 63 61 74 65 67 6f 72 69 65 73 3a 5b 7b 69 64 3a 22 63 30 22 2c 6e 61 6d 65 3a 22 42 e1 ba af 74 20 62 75 e1 bb 99 63 22 2c 64 65 73 63 3a 22 43 68 c3 ba 6e 67 20 74 c3 b4 69 20 73 e1 bb ad 20 64 e1 bb a5 6e 67 20 63 6f 6f 6b 69 65 20 62 e1 ba af 74 20 62 75 e1 bb 99 63 20 c4 91 e1 bb 83 20 74 68 e1 bb b1 63 20 68 69 e1 bb 87 6e 20 63 c3 a1 63 20 63 68 e1 bb a9 63 20 6e c4 83 6e 67 20 63 e1 ba a7 6e 20 74 68 69 Data Ascii: eptLabel:"Chp nhn",rejectLabel:"T chi",saveLabel:"Lu thay i",resetLabel:"t li tt c",categories:[{id:"c0",name:"Bt buc",desc:"Chng ti s dng cookie bt buc thc hin cc chc nng cn thi
2022-08-31 14:47:24 UTC	1601	IN	Data Raw: 72 20 77 65 62 73 69 74 65 73 2e 20 54 68 65 79 e2 80 99 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 79 6f 75 72 20 61 63 74 69 76 69 74 79 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 73 20 74 6f 20 79 6f 75 72 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 70 72 6f 66 69 6c 65 73 20 73 6f 20 74 68 65 20 61 64 73 20 61 6e 64 20 63 6f 6e 74 65 6e 74 20 79 6f 75 20 73 65 65 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 73 20 61 6e 64 20 6f 6e 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 77 69 6c 6c 20 62 65 74 74 65 72 20 72 65 66 6c 65 63 74 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 2e 20 22 7d 2c 7b 69 64 3a 22 63 33 22 2c 6e 61 6d 65 3a 22 41 64 76 65 72 74 69 73 69 6e 67 22 2c 64 65 73 63 3a 22 57 65 20 61 6e 64 20 74 68 69 72 64 20 70 61 72 74 Data Ascii: r websites. Theyre used to connect your activity on our websites to your social media profiles so the ads and content you see on our websites and on social media will better reflect your interests. "},{id:"c3",name:"Advertising",desc:"We and third part

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.5	50046	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:47:24 UTC	1602	OUT	GET /meversion?partner=mshomepage&market=de-ch&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:47:25 UTC	1602	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 30173 Content-Type: application/javascript Expires: Thu, 01 Sep 2022 02:47:24 GMT X-Cache: TCP_MISS X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 0fHQPYwAAAADGfnEfeqpqT7ZYM5I1VCvIQU1TMDRFREdFMTkyMQBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= X-Azure-Ref: 0fHQPYwAAAAC3E8SNkKGmS6dV0eB1Br9VQlJVMzBFREdFMDcxOABlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 Aug 2022 14:47:24 GMT Connection: close
2022-08-31 14:47:25 UTC	1603	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 32 31 30 38 2e 32 22 2c 22 6d 6b 74 22 3a 22 64 65 2d 44 45 22 2c 22 70 74 6e 22 3a 22 6d 73 68 6f 6d 65 70 61 67 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 22 3a 74 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.22108.2","mkt":"de-DE","ptn":"mshomepage","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":t
2022-08-31 14:47:25 UTC	1618	IN	Data Raw: 6e 2e 64 62 67 3f 22 22 3a 22 2e 6d 69 6e 22 29 2b 22 2e 6a 73 22 7d 28 73 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 74 2e 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2c 74 2e 73 72 63 3d 63 3b 76 61 72 20 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 75 28 29 2c 6e 3d 22 42 75 6e 64 6c 65 20 64 6f 77 6e 6c 6f 61 64 20 74 69 6d 65 64 20 6f 75 74 22 3b 6e 6e 28 73 2c 65 2c 63 2c 21 30 2c 6e 29 2c 61 28 41 28 6e Data Ascii: n.dbg?"":".min")+".js"}(s),n=document.getElementsByTagName("head")[0],t=document.createElement("script");t.async=!0,t.type="text/javascript",t.charset="UTF-8",t.src=c;var r=setTimeout(function(){var e=u(),n="Bundle download timed out";nn(s,e,c,!0,n),a(A(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.5	49735	52.96.223.2	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:35 UTC	8	OUT	GET / HTTP/1.1 Host: outlook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://dutarayamakmur.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:35 UTC	9	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://www.outlook.com/owa/ Server: Microsoft-IIS/10.0 request-id: 57f8f04b-5526-de5c-84b7-a70e8e75eae6 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: CH0P223CA0001 X-RequestId: 5616e092-85c9-4d6f-b397-9e4cc34b8b92 X-FEProxyInfo: CH0P223CA0001.NAMP223.PROD.OUTLOOK.COM X-FEEFZInfo: MDW MS-CV: S/D4VyZVXN6Et6cOjnXq5g.0 X-Powered-By: ASP.NET X-FEServer: CH0P223CA0001 Date: Wed, 31 Aug 2022 14:45:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.5	50136	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:48:01 UTC	1633	OUT	GET /scripts/me/MeControl/10.22108.2/de-DE/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:48:01 UTC	1633	IN	HTTP/1.1 200 OK Content-Length: 161509 Content-Type: application/javascript Last-Modified: Tue, 23 Aug 2022 01:00:36 GMT ETag: "1d8b6c66d3c5ce5" X-Cache: TCP_HIT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 0RzMOYwAAAADq4B62wgVURYDpEJtPsSUvQU1TMDRFREdFMTkwOABlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= X-Azure-Ref: 0oXQPYwAAAAAVUvEnzptrSKC6MBFDlLnwQlJVMzBFREdFMDcxNgBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 Aug 2022 14:48:00 GMT Connection: close
2022-08-31 14:48:01 UTC	1634	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 77 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,w){"use strict";var c=function(){},i={},u=[],p=[];function S(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2022-08-31 14:48:01 UTC	1649	IN	Data Raw: 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e 75 6d 62 Data Ascii: ),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"numb
2022-08-31 14:48:01 UTC	1665	IN	Data Raw: 6f 29 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2c 61 3d 21 65 2e 69 6e 64 65 78 4f 66 7c 7c 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 21 22 2b 6f 29 26 26 28 72 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2a 22 29 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 6f 29 29 2c 73 3d 74 79 70 65 6f 66 20 69 3b 73 77 69 74 63 68 28 73 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 6e 5b 6f 5d 3d 6e 75 6c 6c 21 3d 3d 69 3f 53 65 28 69 2c 65 2c 61 29 3a 22 2a 6e 75 6c 6c 2a 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 61 3d 21 30 3b 64 65 66 61 75 6c 74 3a 6e 5b 6f 5d 3d 61 3f 22 2a 22 2b 73 2b 22 2a 22 3a 69 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 2c 65 29 7b 76 61 72 20 72 3d 65 3f 22 5f 68 65 Data Ascii: o)){var i=t[o],a=!e.indexOf\|\|-1===e.indexOf("!"+o)&&(r\|\|-1!==e.indexOf("")\|\|-1!==e.indexOf(o)),s=typeof i;switch(s){case"object":n[o]=null!==i?Se(i,e,a):"null";break;case"function":a=!0;default:n[o]=a?""+s+"*":i}}return n}function Oe(t,e){var r=e?"_he
2022-08-31 14:48:01 UTC	1681	IN	Data Raw: 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 29 7b 76 61 72 20 6e 3d 46 72 28 74 68 69 73 2e 69 64 70 4e 61 6d 65 29 3b 72 65 74 75 72 6e 20 64 74 28 6f 3d 74 68 69 73 2e 67 65 74 46 6f 72 67 65 74 49 66 72 61 6d 65 55 72 6c 28 65 29 2c 6e 2c 30 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 67 65 74 52 65 6d 65 6d 62 65 72 65 64 41 63 63 6f 75 6e 74 73 28 29 3a 72 2e 67 65 74 52 65 6d 65 6d 62 65 72 65 64 41 63 63 6f 75 6e 74 73 28 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 52 74 28 74 2c 65 2e 61 63 63 6f 75 6e 74 29 29 74 68 72 6f 77 20 77 2e 63 72 65 61 74 65 45 72 72 6f 72 28 22 46 6f 72 67 65 74 20 75 73 65 72 20 66 61 69 6c 65 64 2e 20 49 44 50 20 67 65 74 52 65 6d Data Ascii: enticatedState){var n=Fr(this.idpName);return dt(o=this.getForgetIframeUrl(e),n,0).then(function(){return t?t.getRememberedAccounts():r.getRememberedAccounts()}).then(function(t){if(null!=Rt(t,e.account))throw w.createError("Forget user failed. IDP getRem
2022-08-31 14:48:01 UTC	1697	IN	Data Raw: 74 69 6f 6e 20 47 72 28 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 71 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 42 72 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 30 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 64 3d 21 31 Data Ascii: tion Gr(t){return Boolean(t&&void 0!==t.length)}function qr(){}function Br(t){if(!(this instanceof Br))throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a function");this._state=0,this._handled=!1
2022-08-31 14:48:01 UTC	1713	IN	Data Raw: 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 69 67 6e 49 6e 54 6f 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 41 70 70 22 3a 72 65 74 75 72 6e 20 79 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 69 67 6e 4f 75 74 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 28 22 61 61 64 22 3d 3d 3d 65 7c 7c 22 6d 73 61 46 65 64 22 3d 3d 3d 65 29 26 26 79 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 28 22 61 61 64 22 3d 3d 3d 65 7c 7c 22 6d 73 Data Ascii: (this.config.appSignInToUrl);case"signOutFromApp":return yt(this.config.appSignOutUrl);case"signOutFromIdp":return("aad"===e\|\|"msaFed"===e)&&yt(null===(r=this.config.aad)\|\|void 0===r?void 0:r.signOutUrl);case"signOutAndForgetFromIdp":return("aad"===e\|\|"ms
2022-08-31 14:48:01 UTC	1729	IN	Data Raw: 65 2e 70 61 79 6c 6f 61 64 2e 68 65 61 64 65 72 54 68 65 6d 65 29 2c 72 7d 2c 70 72 65 73 65 6e 63 65 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 22 49 4e 49 54 5f 4f 50 54 49 4f 4e 53 22 3d 3d 65 2e 74 79 70 65 26 26 65 2e 70 61 79 6c 6f 61 64 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 73 65 6e 63 65 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 20 65 2e 70 61 79 6c 6f 61 64 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 73 65 6e 63 65 43 6f 6e 66 69 67 3b 69 66 28 22 55 50 44 41 54 45 5f 50 52 45 53 45 4e 43 45 5f 43 4f 4e 46 49 47 22 3d 3d 65 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 2e 70 61 79 6c 6f 61 64 2e 70 72 65 73 65 6e 63 65 43 6f 6e 66 69 67 3b 69 66 28 22 55 50 44 41 54 45 5f 50 52 Data Ascii: e.payload.headerTheme),r},presenceConfig:function(t,e){if(void 0===t&&(t={}),"INIT_OPTIONS"==e.type&&e.payload.options.presenceConfig)return e.payload.options.presenceConfig;if("UPDATE_PRESENCE_CONFIG"==e.type)return e.payload.presenceConfig;if("UPDATE_PR
2022-08-31 14:48:01 UTC	1745	IN	Data Raw: 2e 31 32 20 31 2e 38 31 31 20 31 2e 38 31 31 20 30 20 30 30 2d 31 2e 34 34 39 2e 37 32 32 20 33 2e 34 37 20 33 2e 34 37 20 30 20 30 30 2d 2e 35 39 32 20 32 2e 32 32 33 56 31 38 2e 34 68 2d 32 2e 33 33 35 56 38 2e 35 30 37 68 32 2e 33 32 39 76 31 2e 35 35 39 68 2e 30 33 39 61 32 2e 37 33 31 20 32 2e 37 33 31 20 30 20 30 31 2e 39 36 32 2d 31 2e 32 36 36 20 32 2e 36 31 35 20 32 2e 36 31 35 20 30 20 30 31 31 2e 35 35 2d 2e 34 35 37 6d 31 20 35 2e 32 35 34 61 35 2e 33 35 35 20 35 2e 33 35 35 20 30 20 30 31 31 2e 33 38 37 2d 33 2e 38 38 37 20 35 2e 31 20 35 2e 31 20 30 20 30 31 33 2e 38 35 2d 31 2e 34 33 34 20 34 2e 37 34 31 20 34 2e 37 34 31 20 30 20 30 31 33 2e 36 32 33 20 31 2e 33 38 31 20 35 2e 32 30 38 20 35 2e 32 30 38 20 30 20 30 31 31 2e 33 20 33 2e 37 Data Ascii: .12 1.811 1.811 0 00-1.449.722 3.47 3.47 0 00-.592 2.223V18.4h-2.335V8.507h2.329v1.559h.039a2.731 2.731 0 01.962-1.266 2.615 2.615 0 011.55-.457m1 5.254a5.355 5.355 0 011.387-3.887 5.1 5.1 0 013.85-1.434 4.741 4.741 0 013.623 1.381 5.208 5.208 0 011.3 3.7
2022-08-31 14:48:01 UTC	1760	IN	Data Raw: 63 2d 75 68 66 68 5c 78 33 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 6d 65 20 2e 67 6c 79 70 68 5f 6d 73 66 74 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 64 61 72 6b 20 2e 67 6c 79 70 68 5f 6d 73 66 74 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 64 61 72 6b 20 2e 67 6c 79 70 68 5f 6d 73 66 74 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 6d 73 66 74 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 6d 73 66 74 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 Data Ascii: c-uhfh\x3e.theme-dark .c-me .glyph_msft,.mectrl_theme_azure_hcdark .glyph_msft,.mectrl_theme_dark .glyph_msft,.mectrl_theme_gray .glyph_msft,.mectrl_theme_off_black .glyph_msft\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dut
2022-08-31 14:48:01 UTC	1776	IN	Data Raw: 33 39 20 32 2e 39 33 38 20 32 2e 39 33 38 20 30 20 30 30 32 2e 32 30 39 2e 38 33 37 6d 38 2e 39 33 31 2d 38 2e 33 36 33 61 32 2e 38 39 32 20 32 2e 38 39 32 20 30 20 30 31 2e 35 2e 30 33 39 20 32 2e 30 32 35 20 32 2e 30 32 35 20 30 20 30 31 2e 33 37 36 2e 31 76 32 2e 33 35 37 61 32 2e 30 37 35 20 32 2e 30 37 35 20 30 20 30 30 2d 2e 35 33 35 2d 2e 32 35 35 20 32 2e 36 34 39 20 32 2e 36 34 39 20 30 20 30 30 2d 2e 38 35 31 2d 2e 31 32 20 31 2e 38 31 31 20 31 2e 38 31 31 20 30 20 30 30 2d 31 2e 34 34 39 2e 37 32 32 20 33 2e 34 37 20 33 2e 34 37 20 30 20 30 30 2d 2e 35 39 32 20 32 2e 32 32 33 56 31 38 2e 34 68 2d 32 2e 33 33 35 56 38 2e 35 30 37 68 32 2e 33 32 39 76 31 2e 35 35 39 68 2e 30 33 39 61 32 2e 37 33 31 20 32 2e 37 33 31 20 30 20 30 31 2e 39 36 32 2d Data Ascii: 39 2.938 2.938 0 002.209.837m8.931-8.363a2.892 2.892 0 01.5.039 2.025 2.025 0 01.376.1v2.357a2.075 2.075 0 00-.535-.255 2.649 2.649 0 00-.851-.12 1.811 1.811 0 00-1.449.722 3.47 3.47 0 00-.592 2.223V18.4h-2.335V8.507h2.329v1.559h.039a2.731 2.731 0 01.962-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.5	50145	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:48:02 UTC	1791	OUT	GET /scripts/me/MeControl/10.22108.2/de-DE/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.5	49736	52.98.213.162	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:35 UTC	9	OUT	GET /owa/ HTTP/1.1 Host: www.outlook.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://dutarayamakmur.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:35 UTC	10	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.live.com/owa/ Server: Microsoft-IIS/10.0 request-id: 41df39aa-45b2-a27d-6971-71cfd9fc163d Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: AS9PR06CA0463 X-RequestId: a05a37a8-4775-410d-ab50-7eeace11dafa X-FEProxyInfo: AS9PR06CA0463.EURPRD06.PROD.OUTLOOK.COM X-FEEFZInfo: DHR X-FEServer: AS9PR06CA0463 Date: Wed, 31 Aug 2022 14:45:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.5	49737	52.98.213.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:35 UTC	11	OUT	GET /owa/ HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://dutarayamakmur.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:45:35 UTC	11	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 37607 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 8097804c-1708-f708-f4ef-a341520d5e74 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedBETarget: AM5PR0601MB2500.eurprd06.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; expires=Thu, 31-Aug-2023 14:45:35 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; expires=Thu, 31-Aug-2023 14:45:35 GMT; path=/;SameSite=None; secure Set-Cookie: RoutingKeyCookie=; expires=Mon, 31-Aug-1992 14:45:35 GMT; path=/; secure Set-Cookie: HostSwitchPrg=; expires=Mon, 31-Aug-1992 14:45:35 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Mon, 31-Aug-1992 14:45:35 GMT; path=/; secure Set-Cookie: logonLatency=LGN01=637975539356482914; domain=live.com; path=/; secure; HttpOnly Set-Cookie: O365Consumer=; expires=Mon, 31-Aug-1992 14:45:35 GMT; path=/; secure X-RUM-Validated: 1 X-Content-Type-Options: nosniff X-BeSku: Gen9 X-BackEnd-Begin: 2022-08-31T14:45:35.648 X-BackEnd-End: 2022-08-31T14:45:35.679 X-DiagInfo: AM5PR0601MB2500 X-BEServer: AM5PR0601MB2500 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DHR"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: DHR X-FEProxyInfo: AS9PR06CA0689.EURPRD06.PROD.OUTLOOK.COM X-FEEFZInfo: DHR X-FEServer: AS9PR06CA0689 Date: Wed, 31 Aug 2022 14:45:35 GMT Connection: close
2022-08-31 14:45:35 UTC	13	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 20 63 6f 6e 74 65 6e 74 Data Ascii: <!doctype html> <html dir="ltr" lang="en"> <head> <meta charset=utf-8> <meta http-equiv=x-ua-compatible content="ie=edge"> <meta name=viewport content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name=apple-mobile-web-app-capable content
2022-08-31 14:45:35 UTC	27	IN	Data Raw: 2f 6f 77 32 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 6c 61 6e 64 69 6e 67 2f 32 30 32 32 2e 37 2e 31 35 2e 30 31 2f 69 6d 61 67 65 73 2f 6f 75 74 6c 6f 6f 6b 2d 6d 6f 62 69 6c 65 2d 61 70 70 73 2d 69 6f 73 2e 6a 70 67 22 29 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 66 69 6c 6c 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 76 69 63 65 2d 70 68 6f 74 6f 67 72 61 70 68 20 6c 61 7a 79 20 61 6e 64 72 6f 69 64 22 20 64 61 74 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 77 32 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 6c 61 6e 64 69 6e 67 2f 32 30 32 32 2e 37 2e 31 35 2e 30 31 2f 69 6d 61 67 65 73 2f 6f 75 74 6c 6f 6f 6b 2d 6d 6f 62 69 6c 65 2d 61 70 70 73 2d 61 6e 64 72 Data Ascii: /ow2.res.office365.com/owalanding/2022.7.15.01/images/outlook-mobile-apps-ios.jpg")> <div class=fill> </div> </div> <div class="device-photograph lazy android" data-src="https://ow2.res.office365.com/owalanding/2022.7.15.01/images/outlook-mobile-apps-andr
2022-08-31 14:45:35 UTC	43	IN	Data Raw: 65 6e 64 75 6d 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2d 68 65 61 64 6c 69 6e 65 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 64 69 70 74 79 63 68 3e 20 3c 66 69 67 75 72 65 20 63 6c 61 73 73 3d 70 68 6f 74 6f 3e 20 3c 69 6d 67 20 63 6c 61 73 73 3d 6c 61 7a 79 20 61 6c 74 3d 22 41 6e 6e 65 2c 20 61 20 6e 6f 6e 73 69 67 68 74 65 64 20 70 65 72 73 6f 6e 2c 20 75 73 65 73 20 61 6e 20 61 73 73 69 73 74 69 76 65 20 64 65 76 69 63 65 20 77 69 74 68 20 68 65 72 20 6c 61 70 74 6f 70 22 20 64 61 74 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 77 32 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 6c 61 6e 64 69 6e 67 2f 32 30 32 32 2e 37 2e 31 35 2e 30 31 2f 69 6d 61 67 65 73 2f 61 63 63 65 73 73 69 Data Ascii: endum aria-labelledby=accessibility-headline> <div class=diptych> <figure class=photo> <img class=lazy alt="Anne, a nonsighted person, uses an assistive device with her laptop" data-src="https://ow2.res.office365.com/owalanding/2022.7.15.01/images/accessi
2022-08-31 14:45:35 UTC	45	IN	Data Raw: 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 77 32 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 6c 61 6e 64 69 6e 67 2f 32 30 32 32 2e 37 2e 31 35 2e 30 31 2f 69 6d 61 67 65 73 2f 61 70 70 73 2d 73 75 69 74 65 2d 69 63 6f 6e 2d 77 6f 72 64 2e 6a 70 67 22 29 3e 3c 2f 62 3e 3c 2f 6c 69 3e 20 3c 6c 69 3e 3c 62 20 63 6c 61 73 73 3d 22 6c 61 7a 79 20 6f 6e 65 64 72 69 76 65 22 20 64 61 74 61 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 77 32 2e 72 65 73 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 2f 6f 77 61 6c 61 6e 64 69 6e 67 2f 32 30 32 32 2e 37 2e 31 35 2e 30 31 2f 69 6d 61 67 65 73 2f 61 70 70 73 2d 73 75 69 74 65 2d 69 63 6f 6e 2d 6f 6e 65 64 72 69 76 65 2e 6a 70 67 22 29 3e 3c 2f 62 3e 3c 2f 6c 69 3e 20 3c 6c 69 3e 3c 62 20 63 6c Data Ascii: a-src="https://ow2.res.office365.com/owalanding/2022.7.15.01/images/apps-suite-icon-word.jpg")></b></li> <li><b class="lazy onedrive" data-src="https://ow2.res.office365.com/owalanding/2022.7.15.01/images/apps-suite-icon-onedrive.jpg")></b></li> <li><b cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.5	49764	52.98.213.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:45:36 UTC	50	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.live.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://outlook.live.com/owa/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=B3641F7402F34A3ABF7252DAC277E763; logonLatency=LGN01=637975539356482914
2022-08-31 14:45:36 UTC	51	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 96cc8e3f-f4f8-3d88-efe9-c9e9104f49f6 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedFETarget: DB6PR0601CU001.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.5566.21&l:mouse; path=/ X-CalculatedBETarget: DB6PR0601MB2599.eurprd06.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-Content-Type-Options: nosniff X-BeSku: Gen9 X-OWA-Version: 15.20.5566.21 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2022-08-31T14:45:36.716 X-BackEnd-End: 2022-08-31T14:45:36.716 X-DiagInfo: DB6PR0601MB2599 X-BEServer: DB6PR0601MB2599 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: AS9PR06CA0675.EURPRD06.PROD.OUTLOOK.COM X-FEEFZInfo: DHR X-FEServer: DB6PR0601CA0022 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DHR"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: DHR X-FEServer: AS9PR06CA0675 Date: Wed, 31 Aug 2022 14:45:36 GMT Connection: close
2022-08-31 14:45:36 UTC	52	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.5	49849	23.63.126.201	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 14:46:07 UTC	55	OUT	GET /krs?id=tQtJq38l HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-08-31 14:46:07 UTC	55	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://krs.microsoft.com/redirect?id=tQtJq38l Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Wed, 31 Aug 2022 14:46:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 Aug 2022 14:46:07 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Target ID:	0
Start time:	16:45:24
Start date:	31/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	3
Start time:	16:45:27
Start date:	31/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1812,i,2189406768786567700,6939733223413603732,131072 /prefetch:8
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	4
Start time:	16:45:28
Start date:	31/08/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: chrome.exePID: 6624, Parent PID: 3300

General

Chronological Activities

Analysis Process: chrome.exePID: 6880, Parent PID: 6624

General

Chronological Activities

Analysis Process: chrome.exePID: 7164, Parent PID: 3300

General

Chronological Activities

Disassembly

Windows Analysis Report
https://e.targito.com/c?a=7838d2ad-c0ac-4398-b6af-ea62c78427ea&o=megaknihy_cz&m=e24d843c-46e0-448f-b9dc-dad648861167&c=ad16a225-640c-4304-9e8b-2a177b75d7a9&d=1661194854&l=product_btn_5&u=https%3a%2f%2fdutarayamakmur.net/c3ZjQHN0b25lcmdyb3VwLmNvbQ==